Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier: w4hsW+m/IlMgqg12H+7oik/nIYMcfDe6+4i8ux9FeKk=
Subject key identifier: 0E:DC:4F:DB:6B:7D:35:DB:E1:39:76:2C:67:D1:FF:74:35:81:1B:B4
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial: 019D27A8AA5B43DCDCA37355A9E688058FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number: 0487
Signing time: Thu 26 Mar 2026 01:00:58 +0000
Manifest this update: Thu 26 Mar 2026 01:00:58 +0000
Manifest next update: Fri 27 Mar 2026 01:00:58 +0000
Files and hashes: 1: 4d_WqSozvRDgvNRTpqu3pf1ycY4.roa (hash: SqhKCGRxDbWcKm2BqLr4W8c+6qQLakyn5pnLEeUZ7oQ=)
2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: 5BU64tzroly9wpLemiQaPjvGOsq+BPpRoGZtRjSR+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:aa:5b:43:dc:dc:a3:73:55:a9:e6:88:05:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
Validity
Not Before: Mar 26 01:00:58 2026 GMT
Not After : Mar 27 01:00:58 2026 GMT
Subject: CN=0edc4fdb6b7d35dbe139762c67d1ff7435811bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ab:f2:92:72:85:a6:b0:87:19:16:86:f8:03:
1b:f0:38:71:92:35:fd:41:bf:9f:a2:c5:3e:1b:e7:
e3:7b:db:b3:ef:7d:59:b1:e0:07:65:a2:0e:47:1c:
58:b7:6b:f7:b2:b2:6a:38:68:67:a4:91:88:86:29:
ba:63:b0:61:e4:a4:8e:60:02:15:ec:26:1b:07:a9:
7c:c6:85:ae:26:47:e4:1c:06:9f:52:96:b8:b5:de:
2d:94:46:80:b7:e0:d6:7d:a8:65:b8:7f:b2:74:4f:
62:32:29:6e:bf:3b:07:d2:1d:88:b5:5d:fe:ef:23:
78:ee:20:9d:cb:09:1c:14:b8:da:f3:d3:3f:cc:f9:
db:2c:1a:b4:f9:80:57:0f:52:34:5e:19:5b:80:89:
d9:e9:33:c4:a5:15:b0:90:db:fb:08:72:3f:ec:07:
35:62:5c:aa:e3:6b:e7:56:83:06:55:6c:dd:5f:a0:
14:70:b7:a3:2a:89:fe:75:63:1d:57:00:9f:8b:9d:
b2:23:6d:8e:95:47:8b:c5:a3:cb:db:a8:45:5c:ce:
de:09:af:c2:b2:e0:0b:aa:c9:0d:10:e1:5f:50:c4:
38:53:77:c1:91:cf:5c:3a:59:cd:3a:a2:18:99:ca:
6b:8e:30:92:bb:78:85:8e:66:a0:62:21:a2:d7:d8:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DC:4F:DB:6B:7D:35:DB:E1:39:76:2C:67:D1:FF:74:35:81:1B:B4
X509v3 Authority Key Identifier:
keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:16:66:50:6f:73:20:ba:4f:37:73:d0:78:ee:38:d8:4a:35:
a6:40:d2:ab:6f:4d:64:f2:af:3e:68:7c:bb:c1:66:69:71:5b:
b4:89:a5:b1:51:9f:52:1f:81:a9:e3:ea:89:18:20:84:40:42:
ea:ec:5a:96:97:d1:72:9e:8e:c7:b1:83:dd:4d:3f:57:a3:c4:
6c:4d:dc:50:1e:b1:48:1f:17:74:cf:f6:1a:c7:27:46:b5:5c:
dc:1b:92:96:bd:e9:3a:98:53:fe:cf:4f:20:9d:7a:03:f6:e9:
eb:b0:26:0b:40:87:36:40:47:51:9c:6e:d4:ab:a3:b9:57:8a:
38:54:31:9f:16:ad:48:73:90:99:01:ea:d7:df:41:c6:1a:44:
96:a4:3f:05:09:27:3e:b7:f9:a1:fb:a1:f3:4f:14:4a:d4:25:
4a:d0:99:fc:23:ae:0f:c2:90:f6:1f:86:7e:aa:78:6b:80:85:
72:e9:c0:ba:9c:c7:64:c8:51:3a:87:05:11:78:22:5e:c5:60:
f1:95:74:40:85:17:7d:94:9d:8b:d7:3a:41:76:c4:d2:57:62:
b8:0f:f2:b9:06:c5:bb:87:d6:04:70:8d:58:5d:a8:b0:0d:a2:
fd:87:6a:a4:57:c2:ed:95:b6:fd:f5:1d:5d:ad:fe:b9:63:99:
bc:d9:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:07 2026 by rpki-client