Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
File: IY2yiCPzcIslWqEkum73QdET6vM.mft (raw, json)
Hash identifier: E7IOIHo7U0yQF2YHjVyv32xbsUAQR7BnMtQTZH/F1jw=
Subject key identifier: F3:82:D0:EA:6F:97:67:19:A9:D2:45:54:C6:7B:FA:F9:A5:A4:72:31
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Certificate issuer: /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial: 01A0EC661424F979ED9DC5F4847DFE6D3C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
Manifest number: 1275
Signing time: Tue 29 Sep 2026 09:01:47 +0000
Manifest this update: Tue 29 Sep 2026 09:01:47 +0000
Manifest next update: Wed 30 Sep 2026 09:01:47 +0000
Files and hashes: 1: IY2yiCPzcIslWqEkum73QdET6vM.crl (hash: g5cta9iZfXwIBqEsgt5lVhlnGTaCKIaZrOdXBMKSpvM=)
2: f7qLZUl_FwNxE3w_k0K8MDDnPE4.roa (hash: iT3SrQGihsPU4xD+7248AXf2sfstLnnSHt1kFE/x28E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 09:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:66:14:24:f9:79:ed:9d:c5:f4:84:7d:fe:6d:3c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Validity
Not Before: Sep 29 09:01:47 2026 GMT
Not After : Sep 30 09:01:47 2026 GMT
Subject: CN=f382d0ea6f976719a9d24554c67bfaf9a5a47231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:ba:e5:8e:7a:19:a4:4b:7c:e0:1f:bb:cd:
6b:a3:13:c9:ca:d1:1b:8c:c2:bb:a3:6a:46:74:2b:
7f:81:f0:bb:0e:11:3d:da:cb:d6:17:7c:b5:b2:19:
34:06:68:70:4c:58:fe:52:45:f4:82:d5:9f:3d:08:
aa:51:ba:fd:d2:dd:01:67:83:46:f0:1d:86:7d:f6:
20:7c:ee:a2:7c:a5:c4:c0:5d:18:6d:9e:24:da:51:
d4:1d:2c:34:dd:12:4d:8d:c1:4a:9b:dc:c6:66:2c:
5c:43:0f:96:36:a9:71:e4:f7:d6:ca:cb:7e:85:4b:
8e:94:17:05:a8:cd:1e:c0:92:49:83:6a:bd:2c:ac:
54:14:d2:1d:f4:ef:2c:d2:5c:0b:16:28:e3:c3:9c:
d1:b3:05:74:56:09:04:34:37:59:fe:c1:8d:a0:03:
06:ef:10:89:2e:cb:a0:49:ef:5c:83:04:ae:e8:f7:
0d:bd:81:80:37:8d:de:fd:dd:59:4c:5f:6e:e1:15:
a1:1d:3e:6f:73:15:59:95:d6:06:31:d2:38:02:8a:
51:13:bc:fe:b9:e5:17:1f:14:cf:9d:36:3f:72:37:
a7:a3:44:27:8f:f6:ea:a7:43:80:ad:17:04:f3:cb:
41:9f:02:86:3b:5d:e1:3b:e2:bf:c7:35:e4:0f:94:
fe:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:82:D0:EA:6F:97:67:19:A9:D2:45:54:C6:7B:FA:F9:A5:A4:72:31
X509v3 Authority Key Identifier:
keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:82:32:40:90:57:35:34:64:f2:4f:24:1c:b4:71:fb:c0:b4:
6a:58:35:38:d5:03:e2:d7:a6:44:65:d2:ba:7a:cb:d5:18:78:
8e:5a:10:96:95:f4:da:c0:1b:34:d3:d9:62:19:ef:ef:80:c1:
71:d5:f2:33:da:fc:a0:59:94:28:6e:80:be:93:98:30:f6:e1:
51:13:e0:59:a5:74:01:6f:b9:da:58:33:d4:de:1f:27:a7:96:
e0:a9:b1:b2:f0:8c:9d:b0:29:56:29:8d:4a:f8:8c:38:c3:cd:
62:fa:0c:3b:4b:f2:e2:0c:ea:3b:87:b8:c7:eb:6a:ae:44:a0:
9e:c9:aa:a8:e6:2d:c0:26:bd:e4:d0:78:78:c2:94:98:94:45:
f9:a5:a7:b6:ce:12:c5:78:cd:3f:b1:37:bf:1d:1f:98:f6:c8:
f2:e7:2b:04:3f:53:82:73:a9:2e:c4:be:1a:f4:c4:15:f6:5a:
86:f6:94:b5:8f:f1:28:4a:7e:4a:a6:9f:b9:2f:c4:db:a3:8e:
bf:bc:78:62:9f:58:af:37:7e:e4:bf:27:9c:73:f8:f8:3a:15:
45:b9:c7:98:5d:89:d5:cf:73:93:c5:a8:44:07:f9:3b:b1:dd:
71:d6:71:4f:1d:ad:fa:d6:a4:fa:e6:84:b2:e7:14:53:9d:85:
b9:3f:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:59:46 2026 by rpki-client