Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File: iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier: yCAb6umZLoctuFrWLZoG+L0E17B4/oBP4jyG3gkBYro=
Subject key identifier: 3C:3B:0E:58:53:6F:71:0F:D4:0C:2E:EF:7D:1F:A0:74:D5:38:A1:A2
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019D254CDD29622484D9DD22739EEEED49BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number: 1683
Signing time: Wed 25 Mar 2026 14:01:27 +0000
Manifest this update: Wed 25 Mar 2026 14:01:27 +0000
Manifest next update: Thu 26 Mar 2026 14:01:27 +0000
Files and hashes: 1: AFQC7jHnRlCUVKp9-Y8DclCs6sw.roa (hash: K8ES0stF0B9nVEj6mDlZTMrk2WtUAQbBdwAem6tOZGY=)
2: V3G71UC8xUJzfEK-hF2a1Yy949k.roa (hash: yY9pBQvp1vLjACvkKNCIEskOtDHt2fp1vqTKV4RgjCM=)
3: ZgTKdwUh3SurmRUa8dm-u_MWcXw.roa (hash: qRP4wuFNa16Ds9pfHaXqX+aH3Ub6klNpQNjHeuFx6D8=)
4: fzC-AcNh2yOJ_5dGUvrvfw9vsok.roa (hash: tSTIZaYoRGt64j2os/R+JCN+/UAvU/awUqy9sBJwtAc=)
5: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: 1yvZxgnn95bYk2+am+xxKK3IUbspysxO0Cso7QWVgz8=)
6: tLU7_bzaau1tfdnsi8rr9NFZ168.roa (hash: 6yuhsyZZqvngC1bxHOsVAKXHySf91v1PlvKK7/v6/Ik=)
7: xpN5zraKiIDTkd918KKze_PLUR4.roa (hash: NFN27n7LM3oXIoVyd7siXk3IhtAWZMYT7ZhRr4tRlec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:dd:29:62:24:84:d9:dd:22:73:9e:ee:ed:49:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Mar 25 14:01:27 2026 GMT
Not After : Mar 26 14:01:27 2026 GMT
Subject: CN=3c3b0e58536f710fd40c2eef7d1fa074d538a1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:1f:a4:57:f6:d9:3a:2a:f0:aa:95:b7:e4:
e1:26:bc:b7:ef:6b:f1:51:19:c1:5d:9c:3e:7a:97:
b1:9c:bb:97:50:61:79:19:1a:ac:5e:80:b7:85:d3:
11:df:65:31:0b:a9:4f:79:24:06:6d:f4:f9:3d:f4:
de:ac:64:96:f0:3c:06:5f:b9:c8:b6:26:4d:1b:25:
91:ab:4a:db:3b:67:47:1a:94:71:39:1c:42:0f:ab:
35:f9:cf:53:9e:f3:94:17:4c:1a:27:33:c7:bc:c6:
3f:1c:22:c2:ec:1b:b3:4a:02:ad:f4:ce:c5:bc:82:
5e:50:32:02:24:a8:c4:25:00:6a:89:50:fb:28:91:
c2:cd:9f:6d:e3:d8:7a:a1:a4:0f:b1:0c:93:3a:97:
87:4e:f7:f5:e3:0e:e4:d8:30:30:d5:85:6d:2d:d5:
74:88:8b:b4:ab:91:e5:44:ae:42:52:29:91:98:ab:
5d:80:c5:c9:88:4b:86:20:e1:e9:05:28:91:24:e6:
c6:e1:d3:b9:eb:14:61:c4:f0:65:8f:d6:c8:52:70:
19:ac:8d:be:78:30:e9:eb:ad:88:cb:23:fb:bd:90:
5f:ab:df:30:5b:82:b8:83:99:a0:54:83:91:09:20:
cf:82:ee:96:62:a4:6b:70:56:9c:08:ee:76:99:83:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:0E:58:53:6F:71:0F:D4:0C:2E:EF:7D:1F:A0:74:D5:38:A1:A2
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:ae:12:fb:9c:c9:50:d0:22:4f:24:ca:87:8b:34:e2:bf:
f0:64:a6:e8:dc:0e:5d:48:60:86:be:25:95:2e:26:b3:c0:eb:
a5:bf:fb:36:fa:5e:5c:95:3b:cc:d2:38:e4:61:5a:ec:0c:b4:
83:1f:d7:94:6f:1c:a9:7a:a5:5d:58:3f:92:71:04:65:5a:d5:
e2:80:a7:ec:4a:c6:ec:d3:3f:6a:30:3b:39:b1:21:e8:ed:b7:
4c:5a:b9:69:73:bf:7e:84:9d:e1:6e:f7:f3:bf:17:dc:49:63:
6d:f5:37:8f:98:8f:d4:a3:36:54:87:74:1c:bd:84:d9:31:93:
7f:22:e6:36:ee:70:38:93:3f:81:ca:1f:37:99:ec:e4:05:d6:
60:29:f0:18:43:01:0a:ea:54:22:06:c2:31:ad:47:d0:67:b4:
57:96:40:02:73:be:ba:aa:23:8f:cb:05:84:0b:98:25:32:18:
ba:ec:5a:a0:cb:1f:bf:ae:e3:26:d0:4a:9c:45:c9:e1:5e:79:
a0:63:94:57:91:56:43:75:49:fa:d7:04:8c:d1:2a:ab:86:59:
00:a8:89:ad:80:4e:8c:ad:52:bf:f7:4a:3b:54:ed:9a:05:07:
ea:7c:69:27:67:d4:3b:58:b8:b1:92:f2:05:52:d2:06:8a:36:
e6:49:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:01 2026 by rpki-client