Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json)
Hash identifier: EIdKsulh1x5w/is8AFrN8Hf8xQGzURMHJsc3RoB7flA=
Subject key identifier: F3:21:8D:43:96:5B:D2:65:CF:A5:FE:0E:A8:F6:74:3A:CC:86:53:7A
Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98
Certificate serial: 019D2884502FC26D482FEC18C5889E1B29EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
Manifest number: 05E7
Signing time: Thu 26 Mar 2026 05:00:53 +0000
Manifest this update: Thu 26 Mar 2026 05:00:53 +0000
Manifest next update: Fri 27 Mar 2026 05:00:53 +0000
Files and hashes: 1: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: 5p/h0WpSsJ10qbUBpMKh3UKg+9gaCMfMVj1foT4P4rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:50:2f:c2:6d:48:2f:ec:18:c5:88:9e:1b:29:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98
Validity
Not Before: Mar 26 05:00:53 2026 GMT
Not After : Mar 27 05:00:53 2026 GMT
Subject: CN=f3218d43965bd265cfa5fe0ea8f6743acc86537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:cf:c2:ce:3f:ff:5d:ad:38:30:d3:f4:f0:
66:6d:ba:ee:a8:fa:3e:57:67:4b:8b:7a:75:55:83:
69:3a:ad:5e:a6:29:b4:e3:da:dd:33:c5:b1:3c:0f:
98:3a:5c:5b:39:5f:d9:af:ff:da:a2:3d:26:d0:e5:
c9:59:44:15:aa:f4:cb:ef:0b:00:cb:8a:79:70:1f:
ab:f1:cb:fd:cc:b3:72:ec:84:08:48:c9:47:95:48:
b9:dd:c4:64:09:9d:7b:fc:89:cd:e1:12:67:f3:3a:
4f:94:f3:89:6f:08:b0:c5:32:b8:65:e4:47:6c:e2:
72:36:6e:cc:73:21:34:b4:d2:1a:3f:c9:24:91:bc:
5a:88:2b:01:a7:f8:70:84:a2:58:75:c9:e2:27:88:
7d:61:0e:f8:23:d6:b5:65:97:c1:94:d0:f9:7d:e7:
5f:fe:e0:ba:23:46:e2:1c:6d:c8:25:5a:67:5f:10:
70:cf:4f:e0:86:2c:85:79:98:51:97:91:98:07:20:
46:76:c7:5c:51:89:ab:65:ba:30:1d:75:25:08:eb:
56:a3:69:43:8e:a5:7d:76:6c:2e:80:05:8d:ae:79:
08:66:fa:1f:79:f5:86:5d:05:9c:23:4a:44:d0:62:
2e:a3:29:7e:34:7d:f0:1f:9e:fa:84:18:56:c6:2f:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:8D:43:96:5B:D2:65:CF:A5:FE:0E:A8:F6:74:3A:CC:86:53:7A
X509v3 Authority Key Identifier:
keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5a:e0:fb:80:6a:97:b6:12:25:45:7a:50:1b:7e:84:06:aa:
2c:29:96:96:e7:f0:7a:9d:7d:c4:08:6e:d9:4b:3f:46:88:3a:
ba:df:ef:b4:96:2a:a7:8b:95:44:75:8c:b5:57:51:6a:60:d9:
2b:d1:fd:06:3b:3b:58:63:e1:9b:4b:86:6d:5b:ac:bb:c7:b6:
20:5d:ec:c6:7e:68:a1:3d:ee:c8:6c:1a:0f:a0:8b:e0:d0:ea:
51:b1:24:0f:dd:f0:1c:a0:d5:e6:f8:90:43:76:7c:58:ae:52:
26:35:fb:03:0c:5f:e0:3a:9b:5a:71:80:ed:7c:37:77:a0:ee:
4a:40:6f:7a:f5:8b:e9:45:f0:36:d2:d6:00:8b:da:12:74:8e:
33:f6:c3:b4:8c:55:ed:38:57:ab:07:c9:b4:ac:44:2b:2b:f6:
60:22:97:39:cf:fe:90:a6:a6:84:f8:b5:bf:ad:4c:54:df:3d:
d1:4c:78:08:81:b1:b4:8b:15:76:f1:f9:5e:eb:aa:1c:ce:d1:
3e:6c:b8:cf:27:e9:73:3b:43:48:e3:d0:fa:4a:45:00:6a:dc:
c2:7c:80:92:92:2d:87:ec:f2:15:7a:54:b7:5e:80:5e:f5:1a:
43:7d:1d:17:5d:6a:88:b6:c7:f2:52:cc:c3:b2:49:b7:61:7c:
b5:c6:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:05 2026 by rpki-client