Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
File: IytwMInjgA2e0pEkcx7LpOmrRU8.mft (raw, json)
Hash identifier: QWAVzGsfm04Ef47V5RUus4ZrM5HqzB0PcY8cDIvRbCA=
Subject key identifier: A3:CD:65:23:A3:87:AA:A3:A5:DF:38:7D:F1:5E:E3:2E:91:A4:E8:62
Authority key identifier: 23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F
Certificate issuer: /CN=232b703089e3800d9ed29124731ecba4e9ab454f
Certificate serial: 019D2771D2651B08F606AD89C6756953F517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
Manifest number: 0144
Signing time: Thu 26 Mar 2026 00:01:03 +0000
Manifest this update: Thu 26 Mar 2026 00:01:03 +0000
Manifest next update: Fri 27 Mar 2026 00:01:03 +0000
Files and hashes: 1: IytwMInjgA2e0pEkcx7LpOmrRU8.crl (hash: 5NUds+OgJDUaQ4ABS3ktufvn7aAP94JkDCilYl+WO3M=)
2: k-VO8ggs_LH1_UGXAjJl2qu3xAk.roa (hash: jtFttJWKX2PthCP7kr0cHeX5j6ZBysryPnwLyQmABY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d2:65:1b:08:f6:06:ad:89:c6:75:69:53:f5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b703089e3800d9ed29124731ecba4e9ab454f
Validity
Not Before: Mar 26 00:01:03 2026 GMT
Not After : Mar 27 00:01:03 2026 GMT
Subject: CN=a3cd6523a387aaa3a5df387df15ee32e91a4e862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:60:04:58:3e:97:01:de:1f:b7:5c:9d:07:
ff:04:8e:b7:4b:bb:39:88:91:92:3e:e4:11:5a:fc:
7c:24:38:01:bc:14:96:ee:8b:6c:f4:23:bd:64:07:
75:21:23:27:6d:85:ea:12:4b:e9:6a:1b:4d:57:b1:
74:11:8a:17:96:62:44:69:3c:da:77:01:75:15:c3:
81:11:93:71:d6:6d:20:16:77:6c:e1:b1:18:b4:7f:
6e:a2:49:f6:21:ed:fb:d3:5e:d7:7d:2b:96:d8:e4:
10:fc:6c:76:c5:a3:11:0c:2a:69:00:03:8a:28:73:
d2:03:6b:8a:bc:03:99:5d:bd:13:4c:0e:f2:3c:6e:
22:a4:79:72:a6:a2:f1:ca:42:76:16:ef:3f:da:c5:
95:73:fa:a7:a5:09:a7:33:f1:b8:a5:02:c5:26:fb:
8a:1f:5d:fb:a2:61:2b:77:11:0e:66:51:1f:83:88:
db:ee:7f:e6:13:a6:ff:ff:41:d6:85:03:ad:2e:00:
85:a8:3f:44:66:9f:d2:f2:ca:0b:d6:03:62:07:65:
56:0f:40:62:de:f8:6c:7e:d9:17:96:7a:0b:76:19:
25:97:31:22:49:cf:c6:7e:67:0b:33:56:30:02:43:
30:82:7d:e0:b9:86:25:9d:aa:76:9c:cc:41:6d:b9:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CD:65:23:A3:87:AA:A3:A5:DF:38:7D:F1:5E:E3:2E:91:A4:E8:62
X509v3 Authority Key Identifier:
keyid:23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6c:01:50:50:f6:54:1c:c9:27:de:97:74:01:a1:31:56:94:
e4:33:e8:6d:bd:31:af:59:2e:24:73:1a:ba:17:fb:00:04:a5:
df:84:66:c3:da:69:d4:71:0d:77:61:e2:83:53:f8:cf:58:f4:
1b:d5:ad:8c:3c:e6:99:16:2f:f9:4b:a6:7a:87:05:a1:c5:0e:
99:c4:1b:7a:c6:a6:f8:e0:83:a9:8e:eb:ec:67:f8:a1:bb:b2:
43:92:e2:c1:5d:d7:18:6f:af:6d:d6:0b:ed:4d:51:4c:72:f9:
53:7d:55:e3:6f:e6:43:8e:d1:7d:6d:2a:fe:31:30:a1:28:33:
f6:fb:58:32:96:3e:ca:c2:fb:ed:3f:a2:57:c8:48:22:55:22:
47:b6:63:a0:b5:3f:27:72:73:c8:b7:e9:a2:e3:54:5b:cf:05:
41:d3:25:d4:68:53:33:70:07:6f:26:6b:cf:69:12:45:da:93:
2e:04:35:52:8d:37:1e:7b:1b:19:ce:90:1b:70:83:33:44:57:
18:5f:b4:05:6d:ed:c5:03:b6:50:fd:a5:dc:ac:6c:60:ed:5e:
d5:54:94:dc:d6:f1:1e:aa:1a:49:07:02:e0:fa:87:7d:40:50:
c4:4c:93:b8:da:ab:77:bd:56:8e:e0:9f:2c:ab:95:43:93:18:
d5:59:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:20 2026 by rpki-client