Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: 4synIS7dtZeFHUDOBxEoe1kinZZcqPEkyPb7o5zzzlM=
Subject key identifier: F4:E2:E6:56:C7:66:FE:61:0D:0C:14:39:69:D3:C4:E6:EC:C4:60:41
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019CE825178F5260BB8CDFD5D5145B5315B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0D8F
Signing time: Fri 13 Mar 2026 17:01:10 +0000
Manifest this update: Fri 13 Mar 2026 17:01:10 +0000
Manifest next update: Sat 14 Mar 2026 17:01:10 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: CNOEFoTWGbBhDUVkILmYJlCA4tCN9oLnw8EGkB6Hlwc=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:25:17:8f:52:60:bb:8c:df:d5:d5:14:5b:53:15:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Mar 13 17:01:10 2026 GMT
Not After : Mar 14 17:01:10 2026 GMT
Subject: CN=f4e2e656c766fe610d0c143969d3c4e6ecc46041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:9b:c6:7e:0e:36:dc:7a:c3:4a:3e:b9:3e:
3e:4c:00:06:9a:18:d6:43:85:00:c2:fb:bf:08:f5:
ad:5d:f4:4b:23:6c:b1:74:53:63:d2:e7:eb:b4:8d:
19:4a:88:7e:ec:04:cf:e3:33:20:7c:69:55:62:30:
2d:d5:1d:c7:e8:9d:38:2b:e3:64:00:1c:f3:f6:33:
76:42:2e:a8:dd:c5:a7:70:2c:54:80:a4:9b:44:80:
67:a9:20:09:45:1a:fc:7b:88:ca:4d:3b:e2:2c:79:
bf:e1:48:6f:1a:23:0b:94:16:bf:e9:64:b9:26:64:
d2:65:a5:7a:cc:11:f4:25:8d:23:9f:8c:e3:48:70:
14:b0:98:c8:b5:68:31:c0:a4:b3:64:99:67:38:1f:
f4:ab:c7:c7:69:34:0e:bc:98:11:e4:7e:06:c6:1e:
18:b1:f7:7a:c1:fb:e9:a5:13:aa:0c:ca:1f:50:e9:
a1:0d:7a:fc:7c:26:fc:20:23:47:90:7c:44:10:18:
8f:81:12:ea:7a:d8:78:32:30:e2:aa:bf:22:ec:54:
0b:de:45:55:b1:ba:25:70:c5:ea:06:b6:70:ef:19:
a9:aa:b2:5d:16:46:c9:77:2b:4d:50:0a:fe:f8:b0:
05:39:92:22:f3:36:70:b2:61:a8:6b:f9:ad:1f:32:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:E6:56:C7:66:FE:61:0D:0C:14:39:69:D3:C4:E6:EC:C4:60:41
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f1:0a:62:6d:d7:62:17:14:0f:a1:5e:2d:58:6c:b7:ef:2c:
84:43:e1:16:3f:ee:ae:b6:f2:cd:4a:45:36:c0:06:9a:aa:3c:
8c:29:79:f7:d9:52:ab:06:d2:63:b3:43:db:71:0b:9e:bf:77:
42:d3:fa:bd:d1:03:10:c8:74:8d:c4:fb:f2:14:e4:6d:36:46:
fb:08:16:53:88:d1:b9:01:da:25:b9:73:a8:01:69:10:e0:55:
22:23:b3:5b:85:91:48:06:1a:83:d5:5a:39:a9:d8:fb:77:bf:
83:cd:06:e1:93:f2:d5:7d:b3:a3:a2:5b:c8:a7:ff:c2:4b:16:
78:ce:fd:16:29:7a:6b:d2:4f:37:fb:e3:6b:99:d7:13:23:f9:
44:75:36:13:3f:8d:5f:43:8d:3b:eb:4c:81:e6:7d:f3:36:27:
b7:a9:04:76:eb:bf:5a:2b:90:87:b6:d2:e5:30:47:6a:34:be:
14:e7:3c:a1:d1:3e:a5:b7:e8:7e:1e:88:b4:d2:55:32:f8:f6:
48:0a:32:ba:6c:b7:68:dc:0b:7d:08:b8:13:00:a6:64:72:1c:
9d:c7:64:f2:6b:51:4b:b4:10:1b:57:20:5e:a1:a7:32:79:55:
7d:ab:78:f1:41:13:54:3b:5f:fa:81:77:8c:58:d8:ee:d9:d0:
a8:66:b8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 20:57:27 2026 by rpki-client