Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
File: IxMMmax6pAhscXVxFKQWP4AJAUI.mft (raw, json)
Hash identifier: TlJXVVNFv0PID1YG278Eau5uq2OgTJu+LO2uaGeQ1mc=
Subject key identifier: 04:39:DE:52:C4:A4:93:A4:80:70:E6:0F:8E:4C:E6:67:CB:97:0E:18
Authority key identifier: 23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
Certificate issuer: /CN=23130c99ac7aa4086c71757114a4163f80090142
Certificate serial: 019D37C0FA9D4B4940CF72EBDDA7B133ECD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
Manifest number: 0BD8
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: IxMMmax6pAhscXVxFKQWP4AJAUI.crl (hash: LFSnKnhbPFTOPSNLqk7tmeVp0B/W4wGmIaHX0U88JkQ=)
2: M7AsOPJRuDvyqpdVNAPIyt4dy4E.roa (hash: VA2KwTkb4NGqo/O9WoJ31YAHnrH27JkWDC9odiYJKyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fa:9d:4b:49:40:cf:72:eb:dd:a7:b1:33:ec:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23130c99ac7aa4086c71757114a4163f80090142
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=0439de52c4a493a48070e60f8e4ce667cb970e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:19:bb:cb:b3:7c:54:de:8f:96:62:7b:a7:
31:b1:7d:b0:46:26:41:47:fc:ba:8f:1c:b6:ec:e4:
af:bc:99:24:f9:0f:a6:b2:3d:da:e9:d1:d1:2d:9f:
15:20:f7:11:e2:14:9b:b5:c6:93:f4:8d:6e:cd:e7:
8c:49:51:22:0a:e0:a1:c8:22:a3:b8:dc:18:4a:8a:
ef:4d:24:23:ce:e5:97:e7:89:17:cd:17:a5:73:cd:
ad:cf:ef:6b:05:98:0e:63:89:05:53:c1:86:85:e6:
04:a1:f1:e7:c1:27:b4:57:44:3a:ce:6b:7e:f8:b2:
b4:c1:17:b9:bc:9e:48:b7:d6:54:52:53:96:3f:6f:
c9:fe:1b:38:00:7a:65:84:2e:43:e5:ef:8c:7a:a6:
4b:ff:91:8d:2f:bf:8b:1b:c3:50:48:79:47:e1:26:
a5:33:7d:60:9b:f1:d3:f3:41:83:46:d7:27:7c:c1:
85:8b:93:c0:1c:ea:5f:6e:26:59:43:09:85:46:27:
b0:39:f9:e1:33:cf:7c:b0:6a:4b:47:81:de:72:16:
78:c7:f5:76:bc:32:4b:50:99:cc:9d:0b:70:e8:1a:
c9:c5:72:75:01:02:10:78:73:e5:be:aa:a8:2a:f8:
c6:4f:5e:e0:37:74:1f:21:0c:4c:17:68:12:51:e5:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:DE:52:C4:A4:93:A4:80:70:E6:0F:8E:4C:E6:67:CB:97:0E:18
X509v3 Authority Key Identifier:
keyid:23:13:0C:99:AC:7A:A4:08:6C:71:75:71:14:A4:16:3F:80:09:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxMMmax6pAhscXVxFKQWP4AJAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5c3ae6-2934-479e-8c2d-8e8d5b3e5586/1/IxMMmax6pAhscXVxFKQWP4AJAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:eb:99:1f:ff:fc:8a:a1:e7:41:5c:7a:ef:ef:56:20:ea:51:
35:32:fb:ae:a8:67:9a:e3:59:31:0b:07:7d:cf:e2:e9:93:79:
e9:7e:14:87:01:81:a1:70:87:16:e4:3b:2d:ae:8b:ab:1a:13:
5e:f0:80:b6:82:c7:87:63:31:59:c3:e5:59:3a:78:6d:64:b0:
52:1d:17:5b:af:62:57:fe:b2:3f:a4:20:e5:27:de:69:70:ae:
7d:1a:c3:e8:99:73:99:d3:5c:77:b1:bf:bc:88:45:39:fd:3e:
dc:55:34:4f:60:4d:46:ef:02:9b:45:27:0b:17:cd:01:8a:31:
a6:35:b0:46:9b:10:ba:92:9f:6f:1f:7e:94:de:11:d5:3e:41:
56:2c:fb:6f:45:ea:ef:81:a9:7b:fc:35:00:a3:bf:16:02:7a:
3e:f5:82:2b:5e:44:02:b0:7f:cd:e0:3b:66:b6:d5:b4:03:f2:
d4:48:10:04:2e:99:60:cc:5b:9b:fc:a4:06:86:5a:67:39:2a:
73:47:4e:43:22:93:eb:55:bf:9a:fe:bc:0c:21:10:a7:c3:0c:
57:f1:e3:86:8e:b9:15:4d:a7:6d:41:0d:16:a7:77:18:fe:85:
b4:79:21:be:3e:64:a2:11:cd:cc:9c:59:86:84:5a:c9:e8:aa:
22:51:f2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client