Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier: O/6T+NlGY6j14nLuyULbZg5vkii6tI+oB6rhvG91FAQ=
Subject key identifier: 3C:74:27:1C:06:72:80:21:0C:17:89:D5:F8:26:08:03:EF:E8:47:24
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial: 019D265F1F7AACFA87C0D676086A5E450CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 19:01:01 +0000
Manifest this update: Wed 25 Mar 2026 19:01:01 +0000
Manifest next update: Thu 26 Mar 2026 19:01:01 +0000
Files and hashes: 1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: D5mvp0afNIPEr1r8NTwtJZ3sAtUju4CdLHlyk3S7zGg=)
3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1f:7a:ac:fa:87:c0:d6:76:08:6a:5e:45:0c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Validity
Not Before: Mar 25 19:01:01 2026 GMT
Not After : Mar 26 19:01:01 2026 GMT
Subject: CN=3c74271c067280210c1789d5f8260803efe84724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:8f:8f:65:75:33:ba:46:ee:96:9c:ae:fc:
6c:67:a5:7d:76:26:54:e9:1b:87:49:22:3c:be:31:
53:18:aa:4c:76:40:2c:5e:76:64:9a:76:ec:e4:ba:
3b:3b:6a:05:fc:1f:42:71:e0:3e:8c:00:ea:5d:fd:
98:4f:23:87:e3:55:77:a5:75:25:e6:a8:bc:6e:e1:
6b:c5:0b:79:24:5a:b2:e0:9b:fc:11:9d:e0:06:a6:
de:9d:37:dc:a4:60:50:a2:98:33:d5:86:3e:e1:c1:
9b:10:33:47:13:19:13:d1:f7:92:8b:10:b8:00:36:
27:ab:35:b0:48:aa:93:df:dd:86:9c:0b:12:cd:92:
78:64:19:fe:35:9e:21:73:10:f2:20:9d:d2:58:de:
ec:c2:69:a1:d4:43:51:18:0c:2f:1b:3b:b7:37:9b:
88:97:30:be:48:b4:88:5b:af:12:8d:5f:ba:14:0e:
bb:76:9e:f4:fb:22:6c:f9:41:eb:27:d8:5e:e8:ec:
31:00:ca:6d:f9:06:dd:8f:5c:79:bc:90:e8:8a:9f:
d5:74:70:a9:17:74:27:a6:54:c5:ac:70:ce:cc:59:
d4:b3:74:c9:e5:f3:cd:2c:a3:b0:87:a1:d8:d3:18:
63:c2:34:15:a9:cd:e9:0e:3e:af:2e:e1:ee:da:29:
db:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:27:1C:06:72:80:21:0C:17:89:D5:F8:26:08:03:EF:E8:47:24
X509v3 Authority Key Identifier:
keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:69:51:ed:aa:99:62:27:eb:d4:34:75:a5:f1:04:7c:18:
cd:0d:3e:a3:7e:1d:0f:3a:4a:5e:35:21:20:9b:ac:bd:05:85:
13:3d:d4:ae:cd:a9:1c:7e:a1:25:a3:e6:8f:d6:14:63:9a:c7:
6a:f4:98:89:dc:6e:b7:2b:64:1a:b2:74:7d:56:2c:60:0c:91:
86:f5:82:94:b4:a1:81:4b:00:36:39:15:8a:01:e8:d1:cf:51:
b3:cf:b0:8f:14:e5:87:48:96:96:d7:10:ca:c2:1b:c2:84:63:
4a:fc:5c:80:72:0f:ee:29:be:c4:00:7b:67:9b:b7:a6:c6:e0:
f4:a4:a0:08:5e:bf:df:63:d6:96:84:5e:e7:b4:bb:4a:2a:35:
59:17:19:c0:43:12:3e:92:08:53:6d:42:61:af:3f:71:ad:f2:
3f:9b:7d:9b:54:df:b5:99:cb:4f:e9:25:73:6c:07:7f:53:1a:
d9:cd:bd:24:2f:20:83:77:15:bc:25:4a:82:4c:99:d6:d2:39:
24:3c:37:5a:31:47:6d:94:58:3d:d4:9c:71:36:65:f6:9c:ac:
eb:f1:fc:f3:3a:5a:df:a6:ba:87:2b:5f:36:69:5b:d4:e4:34:
0d:82:3c:5e:3b:8a:39:45:36:eb:bf:b5:68:38:ba:71:2c:84:
66:76:de:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:20 2026 by rpki-client