Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: Y/Ivcxo7ZLqD8otCGnQV6pv0bYbVR32SbchzcjOhdZ0=
Subject key identifier: 27:0C:F0:95:DA:19:E8:C6:89:09:C9:B9:62:7A:BA:CC:5A:12:4C:23
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 019D25BAA80DBEBFB65546A42546A01A8726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 042D
Signing time: Wed 25 Mar 2026 16:01:22 +0000
Manifest this update: Wed 25 Mar 2026 16:01:22 +0000
Manifest next update: Thu 26 Mar 2026 16:01:22 +0000
Files and hashes: 1: CJHjJvBxO_A1o29RU77bYDobb1Y.asa (hash: OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=)
2: ZsGtqMxH4nL8S3-yctBXEQDc62g.roa (hash: +ZsU9QUE73+Gn9nFEGhVwL2RW/GlaE2Pf3U5DjyGOtE=)
3: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: quzNEQgyUPc2GnoEmX4aAF/Maw89KDknke89NJ6DOQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a8:0d:be:bf:b6:55:46:a4:25:46:a0:1a:87:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Mar 25 16:01:22 2026 GMT
Not After : Mar 26 16:01:22 2026 GMT
Subject: CN=270cf095da19e8c68909c9b9627abacc5a124c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:c3:89:98:55:37:12:a1:1f:31:c2:8a:fa:
74:e9:b0:80:0d:92:96:8d:90:98:de:b6:2c:e8:8e:
cc:2e:93:84:e8:df:bf:e6:d6:fa:ce:e0:5b:ed:d6:
56:10:6a:3d:85:e8:0b:50:d2:63:7a:a1:ad:12:26:
d7:d7:c6:5a:a0:d9:90:49:70:c3:51:a4:33:3f:e4:
40:b3:6e:8d:49:52:b8:3e:51:4b:10:ea:48:61:c2:
c4:a2:8c:64:4d:9c:c4:f4:ed:b7:ff:8d:c4:9a:ed:
d4:c2:4a:e7:1d:ac:9c:17:ed:b7:0d:26:98:2c:63:
1d:ca:1d:38:ef:3e:e9:8c:0d:0e:79:44:89:55:cd:
2d:88:31:19:9a:2e:03:99:2a:69:7e:f3:24:ce:9d:
01:3e:42:03:66:a9:ec:e8:1f:07:a0:8b:00:01:d6:
29:59:d6:d0:5a:0e:ce:a5:5e:b0:ea:e0:9f:e2:b2:
7d:14:67:b8:0c:3c:7e:03:3d:2f:95:b5:bc:8e:e4:
73:39:39:59:07:c3:63:f7:24:71:c8:12:11:15:b7:
10:28:b1:ed:29:08:fe:d5:15:9a:a9:27:35:d5:0a:
fe:e0:71:c9:40:3f:d3:45:0d:aa:67:ce:59:34:2c:
68:f7:18:b8:be:4f:58:39:69:26:7e:30:d5:90:08:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0C:F0:95:DA:19:E8:C6:89:09:C9:B9:62:7A:BA:CC:5A:12:4C:23
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:04:c5:bf:ac:6e:94:d0:79:57:56:c7:91:d7:9f:80:a8:
86:7a:88:c0:a8:14:83:eb:ca:76:f9:96:cd:cd:49:76:43:a8:
90:e6:b2:2a:6c:2b:e4:32:f6:a6:b6:9d:68:ee:fe:1f:94:23:
69:ea:61:ce:d2:91:ab:8a:8a:af:b5:fa:1e:72:40:44:d9:07:
f4:07:7b:e0:ff:cf:6c:52:69:64:65:09:70:89:90:14:d4:f8:
50:b6:c8:91:83:0b:18:ad:94:7a:98:02:ff:93:98:57:26:91:
04:34:a0:69:2d:f1:60:9e:9e:bb:7b:19:08:57:28:fc:f9:59:
ef:fa:88:7c:e7:64:2d:6e:cc:1e:35:2f:2d:b8:95:6e:fb:70:
34:17:ab:17:66:f3:66:af:ba:1d:4a:df:53:79:71:a4:40:c0:
23:2d:55:ee:c5:17:71:fe:b1:f4:6e:b2:3f:88:4f:b1:21:98:
36:86:ad:cd:46:86:7e:79:97:43:1f:7a:19:a8:7e:4a:91:15:
07:21:b6:f8:2d:1e:71:fe:6e:62:5f:8f:87:27:f5:2a:4c:92:
dc:ae:ef:ab:e5:84:69:15:38:6f:0f:f8:47:55:05:86:f3:f2:
3b:c4:12:7b:47:f9:fe:b4:31:f9:f9:b9:7f:8e:55:27:fa:55:
6a:0f:3e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:09 2026 by rpki-client