Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: FehFELqQtGJzOWS8qy74Ra0+WAef+ap3glYprS2BsC4=
Subject key identifier: E9:45:DF:19:27:0B:00:EA:2F:98:AF:5D:7C:5D:C7:6C:47:69:4C:B0
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 019D39098D88AC9C169D54925B03E02523A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0FB7
Signing time: Sun 29 Mar 2026 10:00:20 +0000
Manifest this update: Sun 29 Mar 2026 10:00:20 +0000
Manifest next update: Mon 30 Mar 2026 10:00:20 +0000
Files and hashes: 1: 6g9Sdo-eJYElfuGgjU1PsahjZn8.roa (hash: Q4WRD5ukCrgnTo+xu8mbOedNwPrNG14LcRDJEgtOWxI=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: qZ8MuO6Bce2IY3VEY6jGHdYlziHBs4glXmNvIiF3Bic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8d:88:ac:9c:16:9d:54:92:5b:03:e0:25:23:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Mar 29 10:00:20 2026 GMT
Not After : Mar 30 10:00:20 2026 GMT
Subject: CN=e945df19270b00ea2f98af5d7c5dc76c47694cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:8d:26:49:96:47:51:f9:dc:a8:80:4b:11:
64:f9:cd:61:95:ea:cf:7b:cc:98:ef:ee:47:97:a1:
f8:2d:ce:c5:5b:40:be:96:d1:a3:24:e0:0d:5d:fe:
0c:96:38:ab:c9:04:f3:dd:d7:ee:8d:23:7f:89:6e:
af:5b:38:22:2e:d7:87:1d:fc:11:e6:70:14:15:54:
ba:09:66:25:ce:e3:c2:bf:a8:be:00:c2:a3:14:17:
b4:44:3d:e6:ee:b7:17:aa:b9:b5:48:b0:cf:9f:77:
51:80:e5:c9:de:1e:80:13:2a:cd:c4:5c:ae:a8:d1:
ce:27:6f:c8:5c:b1:bb:60:d2:7e:45:a5:50:5a:e5:
6a:b6:4c:d7:3d:c2:7d:50:86:94:4b:85:bf:52:ca:
88:82:41:b4:a5:11:a1:df:86:c1:37:bf:e6:8c:06:
c8:c8:76:c9:b6:25:ae:62:8d:b8:56:ca:c1:14:93:
19:20:ee:60:73:81:0d:43:c8:05:da:68:46:0e:54:
dc:f6:63:0c:00:07:83:01:05:b0:df:e2:04:bd:7f:
4f:52:10:91:09:d6:8a:ba:09:f7:0c:be:26:c7:87:
78:ad:64:2e:80:3c:77:89:4f:0f:02:03:8f:d6:e1:
5d:c1:0f:59:83:6a:7a:d9:17:a9:ba:df:e6:df:17:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:DF:19:27:0B:00:EA:2F:98:AF:5D:7C:5D:C7:6C:47:69:4C:B0
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fc:af:3d:f7:59:5c:3f:43:8b:32:e0:15:8d:83:52:f0:36:
eb:65:ff:92:a7:47:7f:97:cc:70:91:f6:0d:52:58:dd:bb:3f:
89:74:1b:f3:1c:b8:d0:c6:bb:35:f4:1a:65:f8:dc:ec:61:34:
d3:25:a2:ad:8a:37:00:f1:09:10:c5:93:86:38:a2:63:55:e8:
3b:f2:1b:f3:80:91:70:ea:e7:14:0c:64:24:f8:15:cf:db:85:
22:08:61:fe:8d:95:5c:7b:6b:6b:b7:3a:52:fd:fb:2c:88:47:
97:27:09:e5:a3:11:c3:0f:51:85:34:90:d9:08:94:ea:67:1e:
0e:74:e7:89:bd:0d:d6:cf:c6:bc:ce:35:d6:0b:5d:5b:1e:41:
32:73:79:d1:4e:90:c9:a5:05:f8:a5:ec:a7:4f:0e:07:95:01:
2e:a7:68:a6:03:c0:6e:be:65:76:dd:58:35:47:ba:77:d2:dd:
b7:5f:98:ed:92:14:3a:02:e9:3e:ea:28:67:a6:4f:09:d6:c1:
9d:ba:7c:ac:1b:4b:52:67:a3:22:de:7b:df:90:d4:4d:32:37:
49:04:eb:36:fb:ee:7a:7d:74:8d:dd:25:22:21:c2:d5:76:b2:
97:b6:05:c2:1e:c4:e5:da:15:82:cb:67:61:83:85:c4:03:ae:
1c:83:7b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:16 2026 by rpki-client