Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: Sn84igIekSyYevbV7uR5HxeRwMThz23LKX54H/kUTGU=
Subject key identifier: AF:DC:FE:82:17:B7:38:E7:1B:0C:86:C3:73:F0:8C:B2:FC:3D:B0:EF
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019D2695BB9124CB3768E2FA2EABD0CA51F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 15AB
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: 4nJD6h_AT_Jm3vuCDyt9q7O_3CQ.roa (hash: GQ/gs01dnRvZL+8O2A61zDdVjrGTgR7MaIk+wMIYhGg=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: Zrs277mwa28WOTY+C1AsRk21w0V8HQORFtlU2gGsCzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bb:91:24:cb:37:68:e2:fa:2e:ab:d0:ca:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=afdcfe8217b738e71b0c86c373f08cb2fc3db0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:35:36:d9:ff:53:13:e2:74:95:28:06:9c:
56:0d:71:4d:85:b0:c2:46:dd:e0:82:92:33:68:64:
c3:df:93:f1:d8:6d:97:46:ba:06:99:5a:ab:8a:15:
d9:ee:1e:d1:f7:18:23:29:8f:78:72:06:03:f5:f9:
d6:99:4b:a2:a4:2d:38:22:49:db:f0:8b:f8:c1:6d:
fe:fe:4c:76:ab:7c:45:3a:24:f0:18:15:4a:04:3a:
3c:7b:8e:54:88:0a:c6:8b:9e:01:05:e3:8d:a1:e1:
6c:cb:df:fb:38:41:57:70:f7:48:59:04:73:7c:84:
60:17:c4:b7:8b:3b:5c:b5:3d:d7:8a:d2:7c:5a:e1:
1e:85:f3:ad:4c:83:b3:f3:03:1e:df:0c:24:36:28:
d1:85:95:2b:1a:ee:88:94:0b:60:a1:89:4c:e4:54:
e5:ff:68:76:03:53:a5:da:01:ac:5f:bc:27:5d:aa:
44:b2:f7:f1:03:31:e0:47:70:16:99:a9:d6:e5:df:
1d:3f:76:6e:44:64:57:c7:1e:a0:da:2d:3e:48:e1:
84:21:6a:61:eb:e3:b0:0d:4a:05:6c:35:10:4f:ac:
59:59:75:d4:36:1d:f0:88:ef:e4:4e:46:d1:d3:73:
3c:45:a6:01:3c:a0:77:95:23:e4:50:85:47:99:29:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DC:FE:82:17:B7:38:E7:1B:0C:86:C3:73:F0:8C:B2:FC:3D:B0:EF
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:92:39:38:c9:c2:96:1d:e5:7b:48:db:98:28:0e:c4:da:83:
53:c1:1f:3d:91:10:db:1f:60:dc:6a:bf:89:b8:15:d1:73:65:
aa:a1:e4:cb:90:1e:b1:af:96:0d:78:7f:ba:fd:27:fe:14:40:
77:e6:82:8e:38:3f:b1:b3:0f:17:bb:71:11:45:b6:c0:c5:b4:
00:6a:92:14:d9:69:dc:e1:b3:4b:31:33:d3:6a:73:77:71:ee:
94:f1:37:3a:2b:72:75:3a:0a:29:91:55:40:8c:bd:50:ec:39:
94:dd:ec:a8:48:c6:3d:24:2f:47:36:6f:07:1d:cf:18:8c:a0:
d0:63:fe:e9:a8:d7:70:aa:b4:75:89:02:a6:58:49:14:1d:e9:
59:82:73:c9:f2:12:25:4f:6c:09:f2:c1:79:d1:64:3a:80:3b:
73:fa:bd:0a:ad:12:4e:5d:06:15:cf:de:fb:de:e3:23:65:26:
ca:07:7c:c1:06:a9:95:89:b6:91:b8:a9:81:8a:c4:1b:03:d3:
06:90:0b:fc:4a:b6:a7:5e:22:18:ea:2e:6a:66:00:97:88:9b:
81:0d:f3:fc:06:37:b3:55:e5:8b:c0:35:03:b2:3b:e4:d9:38:
ca:5f:0a:f8:fd:32:8e:18:3c:2b:e7:1e:47:cf:12:94:13:d9:
14:27:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:18 2026 by rpki-client