Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File: IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier: Z/90W7HGH4fcL45JNfE2gocftja6H4tDuWtoMkw6Y/Y=
Subject key identifier: C0:3C:EF:87:61:39:DE:7C:51:FD:0F:76:37:11:C7:74:85:41:8A:E2
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019D38D3B3924A0AD45359567056FD9AE580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number: 159E
Signing time: Sun 29 Mar 2026 09:01:31 +0000
Manifest this update: Sun 29 Mar 2026 09:01:31 +0000
Manifest next update: Mon 30 Mar 2026 09:01:31 +0000
Files and hashes: 1: 1-oqQDuXU3K5CZv2Qy4Ieua3t1Jo.roa (hash: R7GPYpVp1dyvlb0NN1rHpBA6geWOtPajE+4IU6AxFW8=)
2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: upjbP5jsEmssYJo2pbt6r1PxDsi3xJpi5mRLY6c6f8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b3:92:4a:0a:d4:53:59:56:70:56:fd:9a:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Mar 29 09:01:31 2026 GMT
Not After : Mar 30 09:01:31 2026 GMT
Subject: CN=c03cef876139de7c51fd0f763711c77485418ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:70:10:09:1c:e0:ac:4d:64:99:ac:fd:5d:
6d:9a:b9:9e:13:3c:54:72:69:c0:a6:94:ce:1a:dd:
f5:66:d9:4b:e5:73:73:54:99:5c:6f:46:fc:28:bc:
a8:e0:ad:95:18:ed:a9:62:d5:1e:26:a7:6d:22:46:
56:35:13:91:25:9a:c1:30:c2:07:23:ac:2e:8f:e7:
a3:12:56:65:0d:97:95:33:5f:16:14:bd:94:7c:26:
ed:0b:43:f5:ad:b8:38:de:25:0d:68:c0:9e:4c:b3:
d6:97:c5:86:65:32:9e:8b:2a:60:ae:6a:26:ec:0a:
04:ef:f0:02:1a:de:ac:69:e4:d5:55:ea:db:cd:30:
a9:b1:77:23:64:8a:2b:3e:37:e7:93:04:42:fd:3b:
ab:08:ba:e2:42:a3:e4:22:20:cf:db:c7:b9:e5:90:
56:d2:07:f9:de:fe:11:a4:fa:34:a3:3c:19:3d:fe:
58:88:3d:b4:3e:32:c9:26:4c:ee:2d:77:d4:14:f4:
8b:9b:36:38:36:cf:6f:bc:77:a0:38:2d:b8:6d:8e:
38:f6:b1:f5:27:93:83:df:44:39:e1:eb:5b:93:f3:
e8:53:ea:af:b4:fe:ea:96:04:fe:96:b6:17:b2:73:
32:30:30:f3:fe:ab:46:d8:b4:c3:ef:16:57:95:31:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:EF:87:61:39:DE:7C:51:FD:0F:76:37:11:C7:74:85:41:8A:E2
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0b:3e:9d:cd:72:3f:69:5e:79:aa:42:ca:57:2d:ff:3d:8b:
0e:2f:f1:97:e3:21:51:d7:f0:16:4a:2d:ba:70:08:ed:ab:de:
1c:33:fc:54:93:d2:ee:fc:02:22:79:7f:21:8d:2f:23:29:a4:
f8:11:b9:98:3e:31:fc:91:16:26:aa:3f:f3:26:ec:60:7d:32:
b9:84:89:07:92:95:a6:ca:d3:98:50:b6:09:54:55:98:10:61:
21:b8:9d:cc:34:1e:76:ef:ed:b3:24:9e:60:54:6b:9f:d0:d6:
f7:a2:7e:40:d2:f9:ce:af:3a:d2:53:43:ef:6c:71:a2:88:fe:
85:b2:ea:ff:c9:83:5f:01:a3:fc:d8:25:38:76:15:98:90:09:
b0:3a:14:e9:c9:48:4b:c8:92:eb:68:cc:a0:67:5e:e0:82:b1:
14:36:ab:b5:42:2c:00:79:70:6e:a0:02:f5:a6:da:82:db:f2:
44:e8:a5:fa:fe:b8:54:56:bd:9c:ae:61:2e:4c:f6:ac:46:3f:
7d:25:9f:64:a8:b2:0e:c3:97:d0:64:b9:27:40:70:7f:e4:82:
7c:14:e2:fa:f7:f0:0a:32:5a:c9:1d:d3:ab:2f:c2:2b:a8:10:
13:6a:ff:b7:c5:d0:9d:b9:91:27:fa:05:15:63:ce:ee:8d:fb:
5f:d2:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:42 2026 by rpki-client