Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: 1LTgYWbsORcO2ElnDkmGumgCnqL9Z/QwUwzU7f5wybM=
Subject key identifier: 97:0F:3E:61:2C:FC:E6:76:0C:1B:1A:1F:5F:CE:DF:09:EA:20:97:A4
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 019D265F4865045CDD24E45C8A4D71F0A8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 0C94
Signing time: Wed 25 Mar 2026 19:01:11 +0000
Manifest this update: Wed 25 Mar 2026 19:01:11 +0000
Manifest next update: Thu 26 Mar 2026 19:01:11 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: 0XnUuf7pmWx07V2KsXy1/f433Fq2eS/qcKU9rx4coUM=)
2: QYubj67eZ8ZorgZWcyR0X_HUbzM.roa (hash: GVuksMw4RXBkiUYZQ7HEuKQK0Heik3VOAWsjoU7Pgug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:48:65:04:5c:dd:24:e4:5c:8a:4d:71:f0:a8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Mar 25 19:01:11 2026 GMT
Not After : Mar 26 19:01:11 2026 GMT
Subject: CN=970f3e612cfce6760c1b1a1f5fcedf09ea2097a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fe:0b:ee:ee:5d:e0:8a:f7:5e:76:7a:97:d2:
61:91:0d:a5:47:8b:f4:7a:34:1c:19:5e:2e:ab:9a:
a3:cb:ce:22:6e:73:82:c6:02:ba:4e:9e:13:64:f9:
1b:c8:d5:2e:02:99:40:38:39:3f:9e:0e:49:bb:26:
23:ba:d5:4c:c5:98:5a:3e:08:22:0f:5d:85:17:d0:
74:b6:db:7b:be:3e:0a:07:a9:c7:7f:ed:2a:4c:30:
9d:69:c8:15:57:02:d0:68:6a:e4:46:d7:0b:95:eb:
0f:8d:8a:b6:c2:0e:01:0e:5b:2e:57:73:8a:34:c6:
71:12:2b:8d:67:e2:1e:13:ff:9a:eb:70:c6:e4:db:
25:bd:cf:7a:48:c4:47:2a:0e:f5:a6:45:ff:7f:67:
7b:3d:75:2c:6b:5e:79:2b:ee:92:4d:db:c2:c0:6e:
c0:a0:7d:d2:7c:2f:a7:83:7f:d9:a9:52:d4:8d:03:
73:f7:03:e1:76:32:de:44:55:d0:b7:49:16:8a:2a:
d7:43:c3:b9:fb:c7:3a:7d:a0:75:fc:61:b3:b1:18:
f6:85:12:17:ae:db:a4:65:ac:e2:43:fd:93:09:91:
90:aa:f0:d6:ab:ee:5a:3e:81:ee:f4:19:47:b6:39:
c6:fb:cc:52:09:5f:6f:26:67:f9:39:48:ca:85:89:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0F:3E:61:2C:FC:E6:76:0C:1B:1A:1F:5F:CE:DF:09:EA:20:97:A4
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:6b:dc:a6:47:a2:06:55:1c:f8:ce:cb:d1:03:cd:5e:37:
32:98:c9:c1:ee:f5:6e:12:54:63:22:f8:f6:5b:7b:ac:d2:40:
0c:f6:90:0b:01:d4:41:5f:db:2a:0c:1c:28:e5:1e:b3:a5:eb:
57:83:c8:ed:50:22:dd:04:1e:a5:b2:92:9f:9b:f7:6e:c0:30:
41:02:a2:0c:a1:aa:9e:f8:d1:c1:e9:b3:90:59:b7:04:7e:74:
fa:d9:ec:96:46:c1:a8:12:d6:dc:f7:12:55:ef:83:27:81:09:
a6:a6:6c:c4:ce:c6:62:f1:54:e0:58:b4:1d:36:82:e0:8c:ce:
a0:eb:50:1d:74:e7:11:2e:6f:26:75:88:26:68:5d:c0:e2:ae:
5d:5c:4d:9d:01:2b:f3:ac:13:68:c3:32:5c:ca:ac:3d:bf:48:
e5:f3:28:d4:c5:7e:19:18:fb:d0:15:cb:2f:5e:3f:64:b3:ce:
89:50:45:84:32:05:c6:8c:eb:93:55:bc:39:45:18:49:53:cc:
11:de:1e:6e:2f:d2:89:6d:75:28:b7:d5:58:cd:0e:13:f1:ae:
a4:91:43:db:20:97:9d:21:c7:74:64:98:7b:e6:9b:fc:c6:f0:
b1:9c:b9:cb:82:f4:b5:b1:61:b5:48:1a:4f:55:a6:98:64:8f:
67:f3:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:12 2026 by rpki-client