Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier: Y+gL4wixUoZD+YlpZb8zFhfPU8ly61NQ7bKzZZ6dW1g=
Subject key identifier: E7:FF:66:86:6B:76:39:B8:ED:A2:D8:03:48:05:9A:58:B1:B8:72:0F
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 019D25843C1426A8AC3A5961F5222C6AA815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: 7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa (hash: sEaYDQdsiX4RB8VnPuUfSRtKLpLITXk4UddGS53dMkM=)
2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: QKArVirfasgiHKqMiOKs6wLuJIJrwMxmidUsQIERBR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3c:14:26:a8:ac:3a:59:61:f5:22:2c:6a:a8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=e7ff66866b7639b8eda2d80348059a58b1b8720f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:cf:0b:c7:70:84:a6:af:06:77:29:3c:2a:
b2:bc:4d:f7:b1:00:1b:ff:2b:e7:09:d3:73:d5:ad:
fc:9c:01:81:09:f2:f6:d9:9a:c8:94:2f:b9:73:0f:
1a:59:ad:b6:10:34:ba:fd:82:66:ed:b3:81:79:a7:
b2:04:c3:b5:1b:bd:94:4c:79:17:59:38:4a:99:ee:
bc:04:aa:28:09:83:68:60:e1:ca:cf:fc:5c:1f:fa:
be:f7:49:92:e5:8e:6b:67:9d:eb:2e:5f:c5:be:f8:
1b:e4:ca:da:76:da:1c:5a:6a:b0:f5:0d:10:8d:fa:
7b:85:94:60:53:91:07:6b:5f:63:69:76:3c:43:fe:
c8:c0:dd:bc:e9:f9:b6:e9:9f:75:de:f8:4c:b7:8e:
6b:83:ec:d8:68:6c:e6:3e:62:9b:ce:b7:84:fc:d8:
48:ce:69:24:ee:d0:cb:11:18:e8:e7:0b:3f:1a:f0:
db:dc:8b:07:df:01:5a:e7:69:76:59:9c:9e:3b:e0:
54:46:b3:54:6c:8e:e5:55:57:3a:af:a0:49:0b:6c:
b8:11:29:af:26:0c:8c:6a:c3:1a:d2:9b:1e:7e:f2:
d8:f2:e3:66:5e:0a:be:1c:6c:dc:f2:33:b4:24:5a:
b5:13:d1:65:0e:d1:83:bd:a6:de:e2:33:da:9d:14:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FF:66:86:6B:76:39:B8:ED:A2:D8:03:48:05:9A:58:B1:B8:72:0F
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a9:55:e4:fd:16:a7:27:e5:b6:02:35:c7:2d:85:56:0e:6b:
2a:35:32:96:21:fd:06:18:24:7c:fb:8b:86:43:13:bb:8e:9b:
bb:5f:f9:bb:ca:17:04:54:22:a6:44:82:2b:83:8f:18:71:98:
39:ce:1a:04:f4:43:73:01:69:99:37:a3:82:1e:1f:00:e0:c4:
d2:93:d8:2f:87:a7:15:bd:dd:f0:fe:4d:da:84:a7:ee:c0:ef:
2e:44:b9:55:3e:bd:fe:db:48:f1:a9:0e:12:89:cd:f9:7b:a4:
58:5e:9b:8a:cf:6f:e1:00:93:07:2d:9a:85:9e:52:d5:c5:4f:
86:41:79:92:be:d5:61:75:c6:55:6b:5f:b7:b4:6b:81:30:a7:
ab:0c:6e:e7:67:2c:f9:c4:47:9f:a9:cb:90:06:c3:2c:6c:f4:
f3:42:e8:57:fd:42:a7:c5:d8:a8:88:64:39:fd:b4:32:ea:45:
16:e5:db:04:28:63:9b:c4:c7:15:0c:2a:68:4c:45:72:14:9c:
ff:d9:f3:78:3b:09:b2:4e:0c:03:21:9d:2d:b8:b1:56:45:69:
23:f0:f3:fb:9d:29:7e:af:49:09:69:d8:2b:b3:53:b9:af:b0:
86:cd:51:40:01:36:e0:53:a9:cc:08:54:cf:03:74:db:8c:70:
eb:3a:a2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:27 2026 by rpki-client