Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: DD+RwGImYewJaGC6Nt8V6F3t6SevM5b8MUAqd/l0H2E=
Subject key identifier: AB:79:FC:E0:4B:59:15:32:F5:A3:A8:C9:74:9B:A6:D7:45:48:18:5A
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019D273AC983A6FF5FF45E02DA97F2798944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:00:57 +0000
Manifest this update: Wed 25 Mar 2026 23:00:57 +0000
Manifest next update: Thu 26 Mar 2026 23:00:57 +0000
Files and hashes: 1: 0wgf23tvdSjDuy36oum4E_5sBcQ.roa (hash: DMJE3y5rVfgLLy+PLJs0X0RhRoSjVQhQBLKFeetfmGY=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: G8dkOf7VZU1ofkvYfqGUBc3NyQJcwYx4yvLRctsyonw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c9:83:a6:ff:5f:f4:5e:02:da:97:f2:79:89:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Mar 25 23:00:57 2026 GMT
Not After : Mar 26 23:00:57 2026 GMT
Subject: CN=ab79fce04b591532f5a3a8c9749ba6d74548185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:68:03:a9:66:52:3f:f3:77:ff:ae:6f:1a:
52:53:da:38:5d:1c:f2:91:50:42:c1:c9:a4:57:b4:
12:98:1f:d6:7c:50:5b:ec:cc:fa:86:19:69:9b:5b:
5d:5c:05:0d:ab:6a:2c:d4:c7:dd:7f:54:33:a0:2c:
21:dc:39:6c:33:e4:86:ee:2e:af:5a:fe:76:82:10:
b9:46:2a:c4:a8:67:c0:af:a2:bf:f5:7f:2b:ff:8f:
b2:c3:4f:a9:6c:84:c9:e7:e7:32:b5:94:57:ed:aa:
c9:66:7a:03:d2:a8:69:66:e4:ff:a6:bf:85:b8:2c:
92:32:91:82:48:97:d6:d2:e7:28:c5:0a:aa:4e:fa:
88:72:cc:84:7d:c2:c7:da:2f:9a:ba:85:30:01:24:
cd:bb:14:ed:8a:3e:70:24:fc:fa:0f:04:92:ac:0f:
04:a7:34:f0:8d:09:32:e0:a4:99:ba:d1:a1:1a:a6:
f1:b6:5b:d0:e5:b8:29:33:a3:30:d6:56:30:f6:83:
69:9f:e8:bd:59:91:14:d9:6d:7f:cf:74:18:27:b6:
2d:08:21:fa:ac:5c:f5:87:a7:55:a2:e0:ad:b5:51:
44:f4:f5:98:54:45:2b:f6:da:6e:b1:71:cc:1a:21:
4a:5a:a4:c6:0a:cd:65:dd:0c:95:b8:4c:f6:a2:ab:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:79:FC:E0:4B:59:15:32:F5:A3:A8:C9:74:9B:A6:D7:45:48:18:5A
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:31:10:f1:15:d8:f1:1e:d0:40:54:1d:b7:69:34:40:f3:cf:
62:a2:e8:fb:cc:c5:e4:98:40:16:e6:4e:7a:b5:fa:0e:e9:64:
fe:50:14:47:0e:4e:2b:64:b1:d0:5e:a0:02:29:12:e9:29:dd:
42:63:92:b8:a1:ae:0a:5b:82:82:1d:b9:64:50:ef:a3:31:78:
ef:50:3b:aa:2e:1c:9d:8f:be:94:85:06:47:2d:d8:96:19:0e:
b6:12:5c:d6:38:dd:84:8c:02:af:dd:cb:1b:6b:1c:82:63:ff:
5c:6d:98:10:b0:fc:31:b6:ca:35:2f:73:9c:3e:57:88:eb:99:
fd:54:aa:ed:d0:64:35:d0:a0:4b:b1:f5:7e:c6:29:fc:1f:14:
b4:51:31:6e:5b:5b:24:86:0b:cb:7f:4c:04:fd:17:35:79:a8:
6d:56:bd:13:ca:47:b7:18:a4:73:a1:b5:2f:ca:0a:9b:3a:86:
2e:8b:99:29:b5:df:8c:3c:ec:a1:ee:25:be:16:f7:46:41:6d:
b2:07:11:70:37:b2:f4:13:35:21:87:5f:e0:f0:6e:c2:54:c2:
24:71:ec:a3:75:de:8b:e9:33:2e:c4:7c:23:89:25:0b:16:d6:
cf:88:cb:1c:8d:f5:61:cf:ec:2c:48:55:6b:35:4a:78:20:f9:
2c:45:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:54 2026 by rpki-client