Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: jNpoKnMZVFl+rQ8KtTAh8QGzbJJH7wfjukVObiYCTvI=
Subject key identifier: 3D:24:EF:DC:53:55:12:F4:D6:01:CC:72:45:B2:6E:E9:1E:4E:78:87
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019D258326088C6A6757C8DC0CA9CFED6573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 1575
Signing time: Wed 25 Mar 2026 15:00:45 +0000
Manifest this update: Wed 25 Mar 2026 15:00:45 +0000
Manifest next update: Thu 26 Mar 2026 15:00:45 +0000
Files and hashes: 1: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: jOMPn5a0CVfsmITxZf6cYnncfygzWwmHQTAGh6RBZgM=)
2: h1EMUyyZAAzRRRYxM5oEAQyKbqc.roa (hash: ab51Arxngi98phPFWNZggcRVUoPdKMJSwBp4EQAAf+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:26:08:8c:6a:67:57:c8:dc:0c:a9:cf:ed:65:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Mar 25 15:00:45 2026 GMT
Not After : Mar 26 15:00:45 2026 GMT
Subject: CN=3d24efdc535512f4d601cc7245b26ee91e4e7887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:05:ed:ca:14:1d:0d:51:0d:0f:38:32:62:26:
f5:95:d5:cd:ac:d6:d7:b1:28:b7:ea:01:8f:af:da:
62:c4:07:df:81:9f:51:ab:17:19:95:5b:cc:76:c2:
a9:cc:62:17:d0:aa:75:5d:f1:31:be:c9:97:00:d2:
4c:71:f5:2e:38:e8:32:99:0e:80:59:48:76:a7:38:
ac:00:8f:9c:8c:51:a2:00:11:f0:86:36:27:3e:eb:
4f:16:b9:59:3f:cb:7f:24:fd:2d:c0:27:89:ce:fd:
a0:2b:43:71:86:dd:7a:f3:29:46:48:31:43:db:f7:
b0:8a:ed:bc:14:e6:09:cb:d3:af:f3:7e:ad:d5:10:
a0:d0:3c:34:8e:09:01:87:34:40:04:cf:af:fa:8c:
95:a6:8c:fa:7c:48:c6:6c:6b:af:bd:cf:fa:0e:01:
5a:7a:de:62:92:82:04:ed:5f:98:94:15:8a:5c:1b:
20:20:dc:c1:77:d9:97:82:9e:1d:bc:a9:7b:12:e3:
86:f3:9c:21:54:7e:08:3f:90:03:27:55:c2:65:ce:
79:18:58:b5:49:32:e3:9d:ec:91:aa:a4:46:d4:b4:
60:7a:7a:2a:0f:be:ca:72:90:3e:c2:b3:49:68:ae:
58:62:ab:6f:db:e9:09:f0:c0:65:e8:23:9d:6a:0a:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:EF:DC:53:55:12:F4:D6:01:CC:72:45:B2:6E:E9:1E:4E:78:87
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6c:3e:16:7c:4f:d9:2d:7e:9d:21:c9:85:04:a6:e1:ce:2f:
6f:61:0d:ef:c7:99:44:ec:fe:e4:5a:d4:f7:13:0e:76:73:db:
39:f6:66:de:cb:84:92:77:13:e5:a0:e4:12:d1:18:94:14:2a:
d8:60:5f:fc:01:de:9f:10:d9:d7:f8:ae:ec:89:bf:a9:71:50:
79:db:ac:ff:6c:25:44:7c:35:8e:cf:74:59:55:f5:32:a7:a2:
cf:1b:32:84:bc:fd:2d:d9:bd:d7:55:f1:33:9f:36:8f:6a:5d:
80:e6:25:0a:e6:5c:bd:96:43:03:56:b4:2b:2b:0a:bc:79:2d:
98:8f:33:62:72:aa:d3:e9:c9:5d:92:ae:93:0f:1f:0d:76:e3:
62:25:d9:16:85:7c:1f:6f:44:4f:58:22:6a:bf:2c:02:9d:18:
3d:72:30:57:a8:84:0c:c5:2f:ec:24:12:43:56:2d:76:2a:2a:
45:08:6b:32:57:7a:cf:11:eb:b0:09:b6:72:57:37:61:aa:8e:
27:89:ae:2c:2b:a8:cc:de:f5:74:4d:5f:38:ad:cf:17:c3:7f:
00:27:e3:9c:d4:23:01:25:b6:3a:3b:4c:01:8c:93:ab:49:51:
fd:91:a6:25:7d:54:9e:d0:e1:0b:17:16:1d:a2:7b:94:25:3e:
8a:f3:74:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgyYIjGpnV8jcDKnP7WVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjQ2MmM4YzAwNjVhMGE2Y2VhZjI0Mzk4NWI2OTdjZjEz
NTdiZmIwHhcNMjYwMzI1MTUwMDQ1WhcNMjYwMzI2MTUwMDQ1WjAzMTEwLwYDVQQD
EygzZDI0ZWZkYzUzNTUxMmY0ZDYwMWNjNzI0NWIyNmVlOTFlNGU3ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AXtyhQdDVENDzgyYib1ldXNrNbX
sSi36gGPr9pixAffgZ9RqxcZlVvMdsKpzGIX0Kp1XfExvsmXANJMcfUuOOgymQ6A
WUh2pzisAI+cjFGiABHwhjYnPutPFrlZP8t/JP0twCeJzv2gK0Nxht168ylGSDFD
2/ewiu28FOYJy9Ov836t1RCg0Dw0jgkBhzRABM+v+oyVpoz6fEjGbGuvvc/6DgFa
et5ikoIE7V+YlBWKXBsgINzBd9mXgp4dvKl7EuOG85whVH4IP5ADJ1XCZc55GFi1
STLjneyRqqRG1LRgenoqD77KcpA+wrNJaK5YYqtv2+kJ8MBl6COdagrgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0k79xTVRL01gHMckWybukeTniHMB8GA1UdIwQY
MBaAFCFkYsjABloKbOryQ5hbaXzxNXv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEt
NTZiYzcwOTY3ODg1LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9mZDkwYzUtMTgzYy00ZDY5LTkyZjEtNTZiYzcwOTY3ODg1
LzEvSVdSaXlNQUdXZ3BzNnZKRG1GdHBmUEUxZV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2w+FnxP
2S1+nSHJhQSm4c4vb2EN78eZROz+5FrU9xMOdnPbOfZm3suEkncT5aDkEtEYlBQq
2GBf/AHenxDZ1/iu7Im/qXFQedus/2wlRHw1js90WVX1MqeizxsyhLz9Ldm911Xx
M582j2pdgOYlCuZcvZZDA1a0KysKvHktmI8zYnKq0+nJXZKukw8fDXbjYiXZFoV8
H29ET1giar8sAp0YPXIwV6iEDMUv7CQSQ1YtdioqRQhrMld6zxHrsAm2clc3YaqO
J4muLCuozN71dE1fOK3PF8N/ACfjnNQjASW2OjtMAYyTq0lR/ZGmJX1UntDhCxcW
HaJ7lCU+ivN0oA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:09 2026 by rpki-client