Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: rMmRmoYZLD+GZYwjcS+BNRK9j6dC3SfpW4cIVMHjaQQ=
Subject key identifier: 35:AD:A4:D3:90:2F:83:05:A0:1B:76:73:F5:61:96:23:2B:3C:D1:D4
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 019D2D3D335E6E4E0C4C794783D30B7ACD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1889
Signing time: Fri 27 Mar 2026 03:01:18 +0000
Manifest this update: Fri 27 Mar 2026 03:01:18 +0000
Manifest next update: Sat 28 Mar 2026 03:01:18 +0000
Files and hashes: 1: WJZilYaZAHsOAmj637C-MdulMxc.roa (hash: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: 9Q8YxVmfytDTYPcHEIQEj+Xh4sFPjxb8LiT7mwLAV7Y=)
3: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (hash: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:3d:33:5e:6e:4e:0c:4c:79:47:83:d3:0b:7a:cd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Mar 27 03:01:18 2026 GMT
Not After : Mar 28 03:01:18 2026 GMT
Subject: CN=35ada4d3902f8305a01b7673f56196232b3cd1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:10:b6:b2:bd:eb:82:27:22:e8:02:9b:db:
2d:90:e0:9e:00:90:e6:8f:db:1c:52:82:f9:89:f7:
74:aa:28:24:b0:13:0b:c7:ab:f1:db:7c:8e:83:10:
9f:0b:8b:e5:34:46:90:a7:ac:fc:8b:ae:55:f0:fe:
22:4d:43:35:06:e8:db:48:0a:bc:07:39:e5:3d:bf:
12:fb:cd:6d:ba:3a:2f:c6:26:5e:7c:07:82:ba:ab:
dc:be:59:f7:ff:76:d2:79:9b:e2:44:9e:53:7d:bf:
35:8c:fe:10:80:20:f7:21:69:ab:c1:e4:c9:0f:1e:
f9:cc:eb:64:68:99:e9:50:cb:06:90:c3:09:fa:31:
ef:e5:a3:49:ef:6c:79:34:f8:1d:7c:77:55:51:61:
ca:5f:e8:56:a8:3c:2d:7a:93:d2:15:e0:82:dd:ee:
8f:d2:02:df:f9:e4:7d:c6:71:7b:29:b1:49:9e:f7:
c6:da:a8:4d:6a:f0:f9:eb:55:08:87:ea:1d:7b:5a:
d7:4b:22:00:83:6b:95:3b:98:45:2d:61:6e:03:95:
0c:84:d7:34:f4:85:22:a2:80:21:f5:f6:49:7e:e6:
57:c9:31:71:1f:6e:4a:8f:94:de:a4:61:d9:2e:46:
98:80:ed:7d:08:74:56:4e:f2:84:b5:60:81:1e:de:
c2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AD:A4:D3:90:2F:83:05:A0:1B:76:73:F5:61:96:23:2B:3C:D1:D4
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:81:3d:d4:27:9c:af:f3:fe:d0:f0:ac:ea:2e:b0:a3:55:
d8:fc:d3:a0:81:73:1f:c2:b9:88:d2:bf:e9:0b:1a:71:5a:8c:
a0:c1:1d:8f:0d:2e:ca:12:4c:9a:6a:f1:85:52:52:71:28:90:
9e:82:72:04:d9:7c:f4:8b:23:ec:c3:2b:fd:e8:79:0c:35:34:
22:22:8a:01:9d:e1:07:a0:19:95:e2:8e:e3:be:38:ce:e9:26:
6b:33:bf:5f:ff:9b:dc:22:3b:45:67:1b:4b:92:12:ab:28:06:
cf:25:c8:5e:3b:77:63:a4:0a:0b:03:78:db:68:4c:b0:91:98:
90:d8:e0:b3:e0:bf:0e:b6:74:e8:96:1f:ce:c5:ed:1f:20:0a:
cc:ef:f5:36:49:63:62:3d:e5:90:64:72:8a:83:07:d9:5b:f6:
41:b1:39:4f:89:72:71:a2:93:f1:d9:67:27:5f:69:4d:a4:0c:
ac:f9:88:8c:7a:12:ec:ad:3e:6b:6c:dc:f3:14:54:05:b2:0a:
90:8b:d6:ce:67:ca:2e:3c:ca:20:93:6d:0e:45:55:a9:e4:a2:
e1:30:c9:29:f9:aa:a8:4c:99:18:a0:70:ee:07:69:e5:89:53:
49:37:d4:32:db:ad:f0:52:cd:24:1b:3e:73:52:9d:ef:4e:38:
2e:f4:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:25:53 2026 by rpki-client