Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: vlcSFIWXPsf0+JfSTvm9yUt4NjiP2FF/JGiEwSeISwg=
Subject key identifier: 65:58:A6:C9:16:33:7D:17:FC:0F:23:91:B7:55:2C:F5:0D:77:A2:81
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 019D38D326119B070BAC66C5083C6DB708BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 0BB0
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: NVkcJFPunBFNiEYn7D4gfF5bH57des1SjUF/xbbwRLY=)
2: X5cruhSfs-bcqraXt11JGdkkWoM.roa (hash: ZSQ2DG8b3yrrUNbqmElYxiRoLHUdomd9OU/pi5rywfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:26:11:9b:07:0b:ac:66:c5:08:3c:6d:b7:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=6558a6c916337d17fc0f2391b7552cf50d77a281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:e2:9f:98:83:c4:bd:b3:c0:a0:03:cc:b0:
f2:f8:d2:d8:12:25:d1:8f:44:3b:41:3b:25:2f:9f:
28:a6:4b:cd:52:68:20:63:30:33:d9:ce:a8:7e:52:
bc:b9:09:f7:8d:ac:e3:c3:92:e5:2d:dd:01:a6:3c:
d0:ef:86:6f:0b:e4:34:bd:1e:f3:28:55:2f:ac:ec:
72:87:42:91:1c:59:95:6f:13:5e:fd:00:a4:7b:e0:
67:75:c5:c1:ca:11:ea:2a:0b:11:32:73:5b:84:ea:
99:55:e6:64:68:a1:f9:3c:38:43:d3:81:2d:9a:f6:
78:ad:81:95:38:7b:ce:d6:14:43:af:ec:81:ec:77:
1d:7b:35:df:86:ac:c4:f9:78:74:90:cb:09:70:9a:
41:56:d1:c2:55:d4:aa:37:5d:94:19:ff:4d:55:b1:
79:34:97:b2:96:07:75:91:ac:58:2b:c5:0b:0a:df:
2b:51:00:46:90:d8:19:2f:08:ec:1d:53:2b:42:69:
26:c2:85:e7:9e:6e:1e:30:cf:a1:1b:3f:18:aa:f8:
38:f5:c4:d5:04:97:08:56:ce:15:3e:31:9f:94:ea:
7d:69:89:67:a5:98:91:e7:85:84:70:68:3d:a4:46:
66:25:8a:5a:6d:f0:be:02:06:63:11:66:6f:6d:67:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:58:A6:C9:16:33:7D:17:FC:0F:23:91:B7:55:2C:F5:0D:77:A2:81
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:24:fe:de:1f:34:52:81:7e:2f:7b:ba:35:3b:b7:09:dc:
c9:17:98:78:9d:57:a8:32:77:27:eb:8f:97:67:3f:70:26:68:
ca:c5:d3:12:c4:bc:60:11:82:e0:2b:44:75:68:8e:96:48:5d:
32:05:2b:dd:89:83:17:07:9f:99:4c:51:cc:78:af:a8:d0:f5:
b4:4d:a8:9c:76:1d:02:57:8a:83:d9:ab:47:a8:1b:f4:c9:7f:
d3:a2:1e:0b:50:e9:e8:ff:43:5a:8a:02:6c:4c:fa:55:ab:15:
f2:77:ba:4a:5a:15:ba:b3:e8:a3:1b:74:d1:bc:6c:f2:53:64:
fe:a6:9c:50:55:b2:f6:93:06:1f:a8:ad:32:44:cc:b5:f9:3f:
0b:b3:a7:b0:76:d4:10:4e:67:0e:4b:84:d1:f0:96:b1:bc:24:
59:cf:29:43:3a:f2:2a:2d:43:77:19:56:88:cc:4e:6d:59:12:
76:93:a3:af:7b:ac:4c:1a:5e:db:bb:dc:62:e9:e2:0f:37:56:
14:29:04:e2:78:f9:6f:d5:ce:7a:e9:f4:78:24:71:7c:89:e9:
2c:10:b9:8f:12:27:05:69:b3:dc:26:26:c2:12:84:2e:7d:0e:
49:bc:40:b4:ba:32:b2:65:40:d0:78:fd:0e:5c:95:1e:d7:a4:
5b:80:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:20 2026 by rpki-client