Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: gswyg9+12VVNe+tm3LQQdmNJRNGsUdpe8ciZbzyr2Jo=
Subject key identifier: 5C:4C:20:CF:AE:5D:88:2F:4D:93:DB:52:C8:C7:CD:4F:B5:FC:1F:9C
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 019D2A3B579F49319DBE0ED74081C9FC67D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 14AB
Signing time: Thu 26 Mar 2026 13:00:25 +0000
Manifest this update: Thu 26 Mar 2026 13:00:25 +0000
Manifest next update: Fri 27 Mar 2026 13:00:25 +0000
Files and hashes: 1: CAMjcl2HiSdI0pS1UvD5u_OKX10.roa (hash: 3ezIC14oieGL5XhJBO1eJbl4cT1odhjw1Ygh4ZROgXE=)
2: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: /F9BbLWRwwT2D/RO+vXLTucDX3C9T0ak6kHfQUuORkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:57:9f:49:31:9d:be:0e:d7:40:81:c9:fc:67:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Mar 26 13:00:25 2026 GMT
Not After : Mar 27 13:00:25 2026 GMT
Subject: CN=5c4c20cfae5d882f4d93db52c8c7cd4fb5fc1f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:04:bd:4f:e3:9a:64:31:94:19:84:a1:af:
1a:cb:9d:91:ab:7c:bd:8b:0e:fb:08:9e:99:f8:97:
86:6d:53:7e:49:51:40:bb:17:eb:5b:98:9c:14:67:
8d:db:68:17:6b:21:5e:1a:a9:45:8f:09:18:9d:23:
b9:d9:f8:10:2c:19:93:ae:40:a2:46:4e:a5:a9:cd:
24:13:2b:30:ae:80:1b:e1:9d:a7:96:ce:73:7e:08:
ee:97:56:b4:65:d5:ac:1a:75:61:12:66:d6:cc:11:
b2:49:35:c9:31:70:8d:64:83:93:3f:28:31:b4:8b:
90:93:3f:fc:62:71:30:92:a7:2e:a3:b4:70:95:76:
cb:ba:eb:fd:71:dd:db:71:36:d4:04:e7:11:90:6d:
8f:e9:3a:1c:13:97:ff:01:6a:7b:ba:35:0a:a0:7d:
3d:bf:58:3b:2c:59:88:54:3a:52:5c:f9:f9:1f:b0:
a5:53:df:89:bc:8b:b5:9f:65:0a:66:49:6a:8b:a0:
3e:f2:39:9f:a1:ab:aa:6e:51:ad:06:f2:a2:5b:4d:
08:cb:1e:9e:a0:19:c2:c5:57:39:e0:fd:e5:d2:fb:
77:b7:1f:61:35:27:1a:41:44:a5:c0:d2:96:4a:ac:
04:ec:cd:8f:9e:89:9d:36:7b:bc:22:2e:f7:ff:4f:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4C:20:CF:AE:5D:88:2F:4D:93:DB:52:C8:C7:CD:4F:B5:FC:1F:9C
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:6c:55:97:43:fa:22:18:11:07:f6:37:a6:b4:90:b7:55:
f8:e0:26:2f:fd:04:b2:ec:30:fd:09:2d:17:1c:b3:8f:bd:4e:
a0:08:c9:ba:22:d7:07:31:e3:7a:ff:7a:c1:d1:15:ee:04:6b:
62:84:6c:e4:c6:f0:9f:ac:d0:75:2a:09:8b:6f:6f:47:a5:fa:
ae:30:d7:a4:24:d5:c2:94:6f:d5:cd:85:3c:c7:e7:3e:fa:a8:
79:d1:3b:1a:6c:86:20:1e:48:2e:b9:6a:41:8c:02:71:1a:87:
e8:dd:db:87:46:55:25:aa:5e:81:bc:eb:5b:16:6d:fe:b5:90:
81:b6:96:74:3a:1c:2f:ff:5a:05:b7:d8:4e:85:99:fb:ea:75:
eb:3f:8a:19:0c:bc:79:3b:10:f0:5d:43:26:2d:a5:66:f9:0d:
aa:00:8f:b3:55:96:a8:f1:39:b4:91:89:03:be:dc:d8:fe:a6:
25:e1:4c:82:ed:60:43:57:11:44:b2:c0:a3:40:d1:91:9d:5f:
c8:a4:78:70:c3:23:d5:0c:71:fd:27:fe:77:30:95:c4:8e:7b:
2a:8e:64:7a:e4:a5:8f:ce:33:33:fc:79:15:17:18:de:5d:a7:
43:17:11:f2:d6:6b:46:d3:88:ac:59:15:f1:e1:d4:68:ca:38:
f7:05:53:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:50 2026 by rpki-client