Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: IP+3DX0AwnRuSaElpVuYMPNDq5U6OFRbYowhvdwxBk8=
Subject key identifier: 0E:DD:14:E8:24:D0:70:3A:E1:13:4D:DE:5F:11:D8:6C:1D:AA:CA:B4
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 019D39AEECD177479E8F896FD431C412DABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 11C0
Signing time: Sun 29 Mar 2026 13:00:58 +0000
Manifest this update: Sun 29 Mar 2026 13:00:58 +0000
Manifest next update: Mon 30 Mar 2026 13:00:58 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: GqFUGbjQQrzrOFcJHDZPVDFDDmi1JuIpzVYyi9TA6vM=)
2: v2k0Z2ANI4HpUtzeG5E2tPsoW1g.roa (hash: tCUybVD79wplSeTPTl/iXVsu/t1DC6P3qKe+acUwYhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ec:d1:77:47:9e:8f:89:6f:d4:31:c4:12:da:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Mar 29 13:00:58 2026 GMT
Not After : Mar 30 13:00:58 2026 GMT
Subject: CN=0edd14e824d0703ae1134dde5f11d86c1daacab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:39:bc:30:af:c3:62:33:46:16:f0:01:e7:
ba:9b:6e:56:20:78:72:b7:c1:30:52:6b:e0:34:5b:
48:cc:5c:38:35:e1:a9:46:dd:b0:3c:d9:6c:24:9d:
ce:90:ff:90:58:89:76:b9:d9:be:e9:c8:69:e4:eb:
b7:78:32:12:7e:da:6c:b3:d4:2a:13:05:63:61:37:
01:30:ee:57:5b:fa:56:4a:4d:32:d0:7c:92:45:5d:
8f:20:f9:41:47:27:bc:58:c6:1d:f2:98:82:c5:37:
ed:98:a8:a8:55:fb:74:45:0b:a4:8e:be:45:83:b2:
d5:be:70:ea:ef:e3:7d:e9:52:b3:e3:f3:65:9d:20:
8b:c7:ff:0f:4e:dc:e7:57:d3:d0:96:a5:b7:be:b2:
76:ed:4e:ed:72:9b:eb:a8:ae:47:9c:fd:53:84:89:
80:fe:37:7f:c6:e0:bb:e4:c9:f5:93:93:b0:ec:4c:
96:11:b6:3f:49:c7:fa:b8:27:f5:a6:1f:87:70:83:
4f:06:08:5e:b5:da:80:c3:98:e5:17:3d:76:66:2f:
2c:b3:6c:88:90:14:81:73:f4:2d:67:6b:4a:85:37:
7e:7c:35:6f:76:2b:ba:f2:00:9c:b5:f0:b1:2a:a8:
c6:15:8b:09:16:e1:c0:db:12:3e:be:0d:2f:57:20:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DD:14:E8:24:D0:70:3A:E1:13:4D:DE:5F:11:D8:6C:1D:AA:CA:B4
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cc:ba:68:b0:a2:b2:85:79:60:28:d8:fe:59:35:3a:aa:3d:
9b:cb:27:e3:c5:df:1e:2f:87:b5:8b:81:3f:9a:05:4a:11:98:
3f:2a:73:f5:d1:a2:a1:1a:9c:b8:88:13:77:cc:e2:da:b0:02:
5e:32:03:91:12:c8:d0:6d:72:3f:c6:bd:0f:f5:c5:d2:4f:95:
6c:88:2e:22:43:86:93:67:21:a9:f3:67:3f:b6:ab:cf:4b:f6:
ee:e8:cd:89:12:92:e7:2d:de:86:70:2e:3b:55:0a:0b:bb:61:
3b:38:f6:f7:9e:b4:a5:4b:71:03:63:d1:b8:a8:50:81:d6:d0:
d5:d1:d4:4b:fb:df:3f:cc:c0:97:13:51:53:af:bf:10:89:94:
39:90:ac:f6:d2:be:be:69:e0:5a:5f:77:2d:93:12:81:4b:9e:
dd:3b:31:e1:55:a1:52:be:42:cf:46:fe:1c:80:8f:5c:7f:54:
c0:13:f0:da:76:67:46:aa:08:e7:bd:fa:d2:6f:1b:89:c0:60:
7c:6a:b0:7b:db:06:99:b4:0f:28:bc:10:e8:da:95:a0:77:44:
ce:67:53:f9:79:3e:03:54:f0:a8:ed:6a:8f:cf:10:51:44:67:
29:d8:4e:ff:70:b4:fa:a3:8f:d6:b2:9c:11:f0:06:ba:ff:55:
c2:93:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:20 2026 by rpki-client