Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: XdU7wnJPQxQ8VgDYziRbN6+3GH9OuS/EFne0NfIcXPU=
Subject key identifier: 95:E5:71:AA:4C:BA:45:9F:B5:A8:40:4A:05:FF:EE:C8:C8:81:22:1C
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019D130F627B3684D6DBC62C1ED82D7F8CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 094F
Signing time: Sun 22 Mar 2026 01:01:08 +0000
Manifest this update: Sun 22 Mar 2026 01:01:08 +0000
Manifest next update: Mon 23 Mar 2026 01:01:08 +0000
Files and hashes: 1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: /2krhPD7hPBgYJOIJIiISHyQelgk8PKMnlkKYaUCKI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:13:0f:62:7b:36:84:d6:db:c6:2c:1e:d8:2d:7f:8c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Mar 22 01:01:08 2026 GMT
Not After : Mar 23 01:01:08 2026 GMT
Subject: CN=95e571aa4cba459fb5a8404a05ffeec8c881221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:04:72:09:7b:62:83:94:ba:f3:f8:fc:4f:
1a:52:01:1f:1f:2d:72:ac:08:bd:bb:ef:9c:33:6e:
31:4e:18:de:95:83:43:2a:cb:27:c9:01:ca:b1:ef:
17:2b:9d:98:41:14:af:5b:b4:cf:63:45:40:27:d0:
4b:97:a4:1c:83:29:af:05:60:4f:e8:e7:b5:eb:78:
f4:27:2d:cd:2b:e7:50:2f:92:0e:32:82:44:82:dc:
f6:05:58:d9:9c:26:d2:18:ff:41:2b:89:a7:84:97:
bf:eb:2e:70:c4:30:0b:2f:0a:66:0d:93:17:15:f1:
ca:53:2c:7c:76:c6:12:19:44:b4:5f:86:11:81:81:
ad:36:d7:d9:c2:46:cf:69:f9:8b:a6:20:0a:33:0f:
1a:94:1d:80:b2:a0:47:64:b0:c5:e7:e8:cc:05:c3:
7a:3c:aa:ad:8d:cd:1a:b7:39:6d:6d:cd:69:49:4e:
4c:33:03:83:f6:70:ee:61:54:37:18:7a:07:8d:06:
22:43:f7:b9:87:02:5f:bd:40:e3:28:a4:23:9f:c5:
4a:8f:b9:59:b4:e8:25:96:58:f5:a6:6b:f8:05:9c:
30:57:c8:ba:a5:81:81:5b:70:52:b8:79:d7:33:9f:
f8:50:8f:38:be:56:38:a5:ec:97:f9:0e:ad:b5:54:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E5:71:AA:4C:BA:45:9F:B5:A8:40:4A:05:FF:EE:C8:C8:81:22:1C
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:94:a2:ed:93:4b:da:b1:59:df:6d:9d:d0:85:b3:53:a8:
82:0a:43:3f:32:b1:7d:53:eb:08:b0:d3:6c:c0:f9:3d:59:7d:
76:af:a2:37:73:9e:a0:3f:38:93:c6:c7:ca:1d:71:5e:7c:3e:
79:32:0b:e2:44:f0:0b:e4:25:5c:92:70:75:e8:ef:a8:6a:b7:
01:30:a9:ea:0b:46:89:cb:bd:49:a4:30:62:6d:a4:c9:b3:ce:
56:c4:78:91:9e:c5:dd:89:5a:c8:54:85:d5:f4:a7:1c:1c:c0:
af:86:ce:57:86:8b:3f:b6:05:1b:c5:39:6c:c0:d0:6e:78:3f:
d9:29:57:fb:0a:d4:85:2e:ce:9a:c0:96:5f:11:34:09:5f:bf:
74:8e:d4:c3:6e:39:2f:3a:53:5f:a7:e9:89:1a:97:8e:b8:8b:
ef:b7:3f:80:95:a1:a5:7e:69:2e:fd:50:96:28:1a:c2:ae:af:
6d:14:09:4b:b3:96:76:62:68:8a:62:52:37:e0:af:7c:bd:4f:
dc:e2:29:3c:3e:4a:1f:e3:0e:07:0e:85:91:01:be:69:b0:36:
e0:9a:c7:85:f6:92:d7:41:22:12:20:bf:58:6d:89:42:f7:9a:
e5:17:5d:02:8c:8d:e1:f4:60:f6:17:67:47:3a:75:6a:65:81:
10:09:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:33:26 2026 by rpki-client