Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
File: IJejEXyhwdYpKuUpEbTwyk-OkBk.mft (raw, json)
Hash identifier: HI8BT9jmZmj5rhg5b1Tx7f3w7waigQuxmZ/WPqt9WdA=
Subject key identifier: 13:A2:8E:6B:2A:69:E5:B2:39:2A:8D:63:D1:0B:71:CD:40:1E:7D:6A
Authority key identifier: 20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
Certificate issuer: /CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Certificate serial: 019D3A1C5B21BADB6B8E777C13E442D696C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 15:00:30 +0000
Manifest this update: Sun 29 Mar 2026 15:00:30 +0000
Manifest next update: Mon 30 Mar 2026 15:00:30 +0000
Files and hashes: 1: IJejEXyhwdYpKuUpEbTwyk-OkBk.crl (hash: Ui+Y+lTwqJMGGrLwEeL+aZDPDhcBh2S+xdqWBg6H780=)
2: KA5g_HNHUEKe_cvpril1qZT7WME.roa (hash: h+IZFf9Go1iBnD4l0ji1OQ+Otog1vzczX/D4h1/qh78=)
3: d7CeX97gO-ipX3QBzFbXz8P0wTI.roa (hash: Qut1PV0++44yG4RR3eDPMqfYLiMgZvD3UqCPDmMsQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:5b:21:ba:db:6b:8e:77:7c:13:e4:42:d6:96:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2097a3117ca1c1d6292ae52911b4f0ca4f8e9019
Validity
Not Before: Mar 29 15:00:30 2026 GMT
Not After : Mar 30 15:00:30 2026 GMT
Subject: CN=13a28e6b2a69e5b2392a8d63d10b71cd401e7d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:72:87:15:fb:3c:76:1f:08:3b:2a:8a:05:97:
85:cf:a6:49:41:dc:3c:0c:c2:29:df:aa:5a:8e:e9:
61:01:32:65:2d:ca:28:9a:29:e4:2a:38:22:25:f3:
97:70:bd:fe:41:bf:9a:e9:a8:56:45:fa:31:81:90:
40:f3:a2:34:8a:62:1d:0f:08:b4:88:eb:49:a1:e0:
7a:0c:c2:c8:b6:ab:da:1f:dd:3b:bd:9e:c5:2f:64:
cd:49:f8:23:37:b2:86:2d:9e:d5:19:00:ce:28:d0:
ee:6a:be:eb:a9:f5:8d:4f:49:16:67:76:2a:0e:8f:
a9:2b:9a:da:4e:93:75:ec:a7:4d:5b:b2:0f:df:73:
c4:d2:fb:28:a1:c7:6b:26:ec:06:36:a5:6e:ca:1f:
07:a9:ac:73:93:5f:2e:59:ba:73:9f:c8:99:2b:df:
61:61:4d:c9:ca:6b:35:3b:55:8b:f9:62:62:d1:4d:
14:ae:ad:de:ed:8e:87:31:c1:73:b8:df:82:15:f2:
3b:49:bb:4a:93:d8:0b:80:d0:6d:69:18:4a:37:1a:
28:cc:0d:19:e7:ce:8a:6e:2d:21:bd:25:f6:aa:51:
74:6b:fd:63:ad:4b:84:de:d6:06:8b:49:d4:72:77:
19:b8:49:7a:e5:f3:09:c2:84:d0:67:b5:e4:fb:28:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:8E:6B:2A:69:E5:B2:39:2A:8D:63:D1:0B:71:CD:40:1E:7D:6A
X509v3 Authority Key Identifier:
keyid:20:97:A3:11:7C:A1:C1:D6:29:2A:E5:29:11:B4:F0:CA:4F:8E:90:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJejEXyhwdYpKuUpEbTwyk-OkBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7f9a4f-e7e3-4973-b039-755e3b96d5ed/1/IJejEXyhwdYpKuUpEbTwyk-OkBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b9:f9:d6:36:cb:fb:fd:ae:91:1d:3a:f0:33:4c:c9:19:bd:
2a:4f:9a:3d:81:02:7e:c6:ae:71:f0:b5:a6:aa:6e:d5:2f:28:
25:e5:93:db:28:ce:04:84:84:73:b6:d7:7f:32:b1:22:15:35:
de:6e:d3:aa:c0:63:f0:64:0d:0d:05:f7:e2:38:e7:41:95:c7:
10:98:e1:73:cc:e0:f7:b0:e0:62:41:7a:80:c9:1f:67:b9:db:
36:65:f4:8b:e6:56:f2:39:8e:2c:d8:1e:32:d0:5a:f2:7f:cc:
dc:b5:cf:63:5b:31:16:29:80:42:50:4e:b0:65:b9:68:c1:c9:
ba:11:8a:2d:61:21:99:9e:75:e8:14:41:31:9b:f2:d4:d4:11:
5f:bf:7a:63:46:e8:92:45:96:83:f3:20:6c:ac:52:1d:34:ce:
96:bc:72:c1:bb:fe:ed:6f:de:99:2d:58:41:77:24:fb:15:2f:
d2:ee:21:22:ac:21:9b:36:48:de:13:09:63:0d:62:e0:9f:15:
1a:e2:24:ce:5e:99:95:13:38:aa:12:bb:cb:66:b6:92:86:08:
9a:7e:44:0e:bd:35:ee:69:83:6b:54:0e:ff:7d:0a:96:f0:67:
bd:c2:c2:1f:91:ad:4f:fb:c0:cf:0e:72:21:b9:09:ea:1c:a7:
0c:04:30:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:40 2026 by rpki-client