Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: Xj2zyAIidMhudBmn+89eehDQBmA/BB3sBZWbCLCPP8o=
Subject key identifier: B7:8C:CE:E0:98:2C:92:04:4F:32:C5:B5:CC:62:4A:EB:67:FB:FC:D9
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019CC9AC9AE2CDB324FCF96286CD14936A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1854
Signing time: Sat 07 Mar 2026 19:00:58 +0000
Manifest this update: Sat 07 Mar 2026 19:00:58 +0000
Manifest next update: Sun 08 Mar 2026 19:00:58 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: K0wU/xbl18WxguOzcsNknt27lKc+TjAtaAnD8hQ6y2c=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:ac:9a:e2:cd:b3:24:fc:f9:62:86:cd:14:93:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Mar 7 19:00:58 2026 GMT
Not After : Mar 8 19:00:58 2026 GMT
Subject: CN=b78ccee0982c92044f32c5b5cc624aeb67fbfcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:41:db:98:87:31:07:88:1c:fe:40:ce:1d:
95:80:33:0c:45:44:67:cc:f2:95:de:98:44:72:32:
a0:4f:c7:53:89:7c:6b:78:ac:f6:6e:5e:d4:30:7c:
8c:45:46:56:f1:97:79:3a:c1:80:63:82:f9:b5:8f:
ce:5b:7d:f5:63:ff:c2:93:da:5e:36:d1:d1:f1:c6:
b9:7a:c0:80:56:06:9d:72:0b:b8:6f:fa:fa:7d:5c:
67:1a:59:89:98:ee:9e:35:b0:a5:28:a5:8a:22:bd:
d4:1a:54:51:65:a9:2e:a2:4c:d7:8c:f0:e7:33:b1:
1b:31:48:5c:d7:9f:bb:63:c7:87:a8:39:88:45:08:
84:da:84:7b:c2:fc:82:7e:de:3a:a5:4d:8a:bc:f6:
6e:ac:3b:57:60:36:1e:13:d2:02:1e:05:48:77:8b:
16:66:3c:fb:8d:a4:5d:41:f7:b8:bc:f5:26:45:fe:
3d:81:3b:c0:9c:a3:7a:10:47:0e:cd:a5:61:5c:2d:
d6:b4:26:6f:c4:e3:da:23:fd:80:f6:19:7d:69:40:
95:7a:8a:4e:20:44:69:1b:30:ee:b4:6d:6d:0a:38:
7c:cd:42:44:17:62:bf:9f:86:e5:6f:c5:34:1a:58:
7d:ad:77:e1:54:25:85:24:1b:62:55:d0:0c:db:4c:
a9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:CE:E0:98:2C:92:04:4F:32:C5:B5:CC:62:4A:EB:67:FB:FC:D9
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:30:28:87:27:ec:37:b6:fa:87:ed:c9:67:28:0b:52:6a:
dc:b5:67:a4:8a:e6:42:1f:f8:a5:c9:07:0b:c6:40:6e:ff:76:
73:ae:84:ca:fd:63:94:4c:59:bf:e8:67:56:dd:9b:f9:1f:3b:
60:f4:10:cd:67:e2:25:34:7c:d2:29:a9:2f:0f:c7:2d:a7:54:
89:d2:4e:66:2f:63:71:ac:71:1f:9a:88:58:dd:24:cc:47:86:
8f:31:1b:39:f1:d7:c8:0a:29:5d:10:8b:0c:2b:91:bc:21:84:
18:51:26:87:ce:3f:26:8d:f7:ce:b2:54:c4:a5:88:d0:b7:80:
3e:6d:5d:d9:2e:c2:dd:bb:bf:5b:5c:09:dc:b2:48:14:44:b9:
77:3f:ba:38:b9:60:97:27:55:6e:55:88:61:13:bd:3a:13:2e:
05:ce:05:3a:44:19:d2:2f:22:b7:69:43:fe:52:e2:84:4c:a9:
5a:18:66:5c:bd:a0:07:20:4b:47:65:13:4f:51:b0:6a:24:4f:
30:d2:a0:05:9f:b9:3d:ca:02:86:6a:30:ba:8c:1e:bd:29:16:
00:e8:9f:1b:27:9e:94:42:a9:04:b4:14:d0:99:16:bb:e9:18:
67:93:4b:91:df:e2:55:b7:af:a5:cf:23:a7:47:73:af:ba:cd:
80:a8:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:15:05 2026 by rpki-client