Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: m1KP+0E8LY62GqJ0vqibjLMArnygN6EHlx8I/Kb1GIU=
Subject key identifier: CE:18:E9:4B:3F:7A:33:C7:2A:A0:B8:DE:8E:DA:B9:1F:B7:8B:AD:C0
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 019D25F126EFEF56A7A916A2283482E56C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 1025
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: r4zrZqfgHgE6UUbnYSpAMdZWoqGdD0I2BBIUE33+3Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:26:ef:ef:56:a7:a9:16:a2:28:34:82:e5:6c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=ce18e94b3f7a33c72aa0b8de8edab91fb78badc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:bf:3c:fd:d7:dc:42:7d:61:44:2e:af:95:
ea:41:1b:08:54:6a:d3:4b:4c:e7:a4:98:03:a3:07:
62:12:cd:25:08:2a:77:9b:70:e3:98:11:d4:30:b6:
ce:c0:ec:5f:47:52:7b:3c:55:c7:e3:48:d9:20:b7:
6a:8c:7e:c7:8b:8f:65:bc:7b:9d:b9:d9:d6:bb:9c:
15:1f:34:13:73:c4:0b:18:21:ba:29:c7:95:a9:ac:
df:0d:ef:f0:ff:4a:99:b0:40:38:6e:9c:80:ea:22:
13:ff:2a:0d:71:54:55:26:2b:fe:92:db:ad:4a:3c:
23:cc:0d:21:98:0b:86:d2:ca:eb:39:4c:62:2a:9d:
69:25:72:01:73:d9:3f:44:9c:8f:aa:c0:cf:3f:a9:
94:b9:50:d1:e4:a8:9a:61:76:fe:54:a4:0e:b7:a0:
9d:b6:07:3a:65:45:50:84:d9:b3:d0:51:02:99:15:
12:68:be:8d:e6:55:bd:a8:ed:5d:14:37:a7:f5:0a:
39:b5:52:25:1b:42:9d:92:f0:d8:6c:5a:94:c4:56:
f8:db:ba:f0:b7:d3:bf:3e:f5:e2:1f:6d:d7:30:04:
1f:c2:13:35:01:74:1e:19:90:b5:c2:49:c1:14:67:
fe:fe:40:09:7d:39:c5:6d:65:ba:99:3d:e1:91:85:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:E9:4B:3F:7A:33:C7:2A:A0:B8:DE:8E:DA:B9:1F:B7:8B:AD:C0
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a3:89:07:20:d7:db:49:a4:3a:ca:53:38:10:c8:c7:fe:c9:
53:22:b1:7a:53:a8:92:4f:20:f2:46:52:a5:ef:5a:fa:2c:11:
f3:8c:4d:47:e2:aa:cb:05:2c:d9:a0:d8:10:be:28:4d:93:eb:
a3:f9:67:4c:07:1f:80:47:b4:27:d7:87:08:f2:8e:71:9e:24:
ed:2b:53:8a:7e:0f:39:4b:fa:d1:03:d8:3e:99:9c:53:47:aa:
5f:5a:94:ac:36:51:fc:3a:d1:cd:6e:88:d8:e0:1c:aa:c3:53:
13:1d:d9:00:d5:12:75:da:c0:06:b6:5e:47:9e:e6:28:6d:1d:
52:07:4d:7a:4d:ee:cb:47:f7:63:cf:90:0d:a9:ba:cc:0a:41:
bd:7a:ef:41:ef:0d:96:64:a0:57:fe:fc:a6:1a:c6:0a:d8:14:
a7:84:82:fe:9f:f6:32:aa:e1:93:49:62:3d:15:67:2e:e5:4d:
d9:d4:91:bb:33:f3:c2:4f:13:18:99:8d:2d:f5:ef:54:06:e5:
11:c3:4c:c8:48:cb:4a:c8:f7:8a:e6:3c:f9:e8:da:c6:8f:c5:
9a:49:a7:bd:97:ad:2e:68:ba:df:a6:c8:ac:ef:c3:45:b8:14:
5c:6b:30:de:73:05:fd:53:20:fb:3e:da:e8:18:c7:7f:90:31:
54:64:18:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:01 2026 by rpki-client