Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: CKFTKr2aC53a/KfyHA64iWkzZaZZpYnRp2zx9onW5QI=
Subject key identifier: E6:49:8D:36:61:44:D8:1E:A1:F6:52:AC:FC:5E:82:25:65:57:CA:A9
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 019D37F75B0A539ED5D0777D6F09BEDDF533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 07FD
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: cg+x9LFMHXserTzSZQS6LU9J4O1Up0wwIiQNR3MwDLo=)
2: yAy7dhfnf5ztz8zG2y2BYT0K2Nc.roa (hash: Yhi2sxhWb+ZdylE1qzvoU8mFvZlrRwD3FR8dKXylg+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5b:0a:53:9e:d5:d0:77:7d:6f:09:be:dd:f5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=e6498d366144d81ea1f652acfc5e82256557caa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:d4:7c:bc:7c:8f:02:0c:b2:6f:c2:3a:43:
c1:39:d7:d7:89:2a:b1:1b:96:5e:98:91:7b:f5:3a:
00:9c:35:81:a8:2f:c9:94:44:e5:3d:66:8c:f1:52:
91:28:4a:d1:27:91:0e:c7:a7:67:d8:7f:a5:99:01:
b8:97:25:ce:a3:dd:1e:43:70:78:c7:79:2f:b3:e8:
62:a8:00:f8:00:e2:ac:91:e4:77:f6:37:17:bc:ab:
1e:ac:4a:75:cd:64:5d:c8:ef:1d:44:20:e9:2d:5c:
78:d8:7a:2a:42:c7:a6:4b:e1:a7:07:b9:35:a8:21:
78:8e:53:b7:ae:e6:4b:78:6e:be:70:ca:c0:08:e0:
dc:31:1c:e5:6b:0d:ed:63:d2:58:ae:10:3b:e3:69:
b2:4e:d9:00:84:73:e1:e9:d6:74:98:49:3f:66:be:
a5:97:b0:b1:8a:ec:5a:3d:f6:ca:bf:f3:8e:2f:17:
dc:09:b7:08:70:25:0f:92:11:45:37:c6:4a:0c:d0:
71:6e:7b:e0:c2:21:a6:5a:b9:bb:7d:ac:73:8d:81:
33:6d:18:8e:cf:04:41:7d:ad:36:15:6d:64:d5:78:
33:3f:b8:2a:ad:03:72:45:60:d7:9e:2e:4c:79:fa:
41:bb:61:16:5c:e9:0f:ca:df:fa:44:49:65:d0:e6:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:49:8D:36:61:44:D8:1E:A1:F6:52:AC:FC:5E:82:25:65:57:CA:A9
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ce:c0:d7:fc:52:a0:1a:ef:a8:03:d5:51:b7:f8:64:d2:7f:
e4:2f:e7:06:51:05:71:a3:e4:d4:9a:1e:6f:ac:65:14:b3:ed:
d7:d2:35:bf:71:d6:22:04:e7:52:64:8c:6c:1a:4c:8e:02:7b:
8e:b6:1b:d9:c8:56:f1:9d:9a:59:9b:16:74:0a:97:6a:c2:41:
57:ba:a8:a7:cd:e4:7d:1f:78:b8:4c:2c:45:c3:7b:7c:d5:46:
1c:2d:26:57:64:58:b3:77:4d:f5:34:d4:a4:6d:0c:66:50:6d:
c7:95:1d:2a:a7:52:61:59:fd:e9:ae:a0:f8:f6:48:b0:10:d1:
50:4c:43:77:0c:53:c1:7c:59:d6:2a:12:fc:72:a6:ae:99:51:
a0:11:65:c9:28:2b:01:5b:d5:a0:df:e9:3c:ee:10:a2:fc:b7:
d5:be:bd:51:6b:65:17:99:a7:6a:2e:9b:a0:f4:32:3f:15:94:
96:ad:b9:c2:2d:29:51:13:e5:16:5f:1f:74:76:b7:7b:7f:cd:
cb:43:d1:0f:91:bc:79:48:a6:db:ed:9b:20:3f:d0:1e:bc:f5:
2c:6b:fe:ea:72:f9:f5:5d:af:d8:e7:60:d1:f6:cb:9e:dd:6c:
db:cb:0c:53:dc:c3:f0:f2:21:5a:28:8b:d1:39:ad:e9:cc:71:
23:02:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:19 2026 by rpki-client