Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: WE7byvUyM75kND1Wfv+XDIE0+fMKJ/SpPO726B3Q7l4=
Subject key identifier: BF:42:2B:3B:9B:CD:6E:AB:78:A0:80:B9:D6:93:53:5A:10:0E:A7:5B
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 019D27724A3E39AA03C48F6D997508A31CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0B9E
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: KpjaUyl9QAtsFZ4qhaeQfhGOj9pdWkkVvfu5mGUFBZg=)
2: lf_obYLkdv0nF0_npBLfEGEUr5g.roa (hash: SJ8whxb+V86Y+QBEXZUDuhEOcL67d4x2EIlsWGzE0Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4a:3e:39:aa:03:c4:8f:6d:99:75:08:a3:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=bf422b3b9bcd6eab78a080b9d693535a100ea75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:dc:45:e9:5a:2f:84:a8:45:9c:a3:d2:55:
cf:bb:f7:fe:5c:96:4d:f5:e1:1e:9b:c2:ef:1b:93:
5a:98:98:04:f8:dd:b6:1d:b6:37:c2:a4:e4:37:31:
3c:66:8d:3e:d9:80:f5:58:c0:8e:58:72:12:3e:56:
fb:33:c8:c3:00:b2:18:4c:08:40:9e:c2:d3:a2:a6:
c9:47:38:3c:b5:11:1c:cb:61:ae:1c:b5:d0:36:72:
c5:26:24:d4:03:2f:ad:6e:e1:8e:d9:9c:52:e4:b8:
e2:5a:a5:d2:ba:00:04:f7:83:13:ec:6b:4a:75:16:
d0:ef:53:be:4a:96:4e:02:4f:0a:ef:36:53:cb:b4:
3f:07:ec:72:de:ad:06:2d:89:2c:fb:0c:23:49:8e:
ad:4c:57:60:d5:bb:a4:f7:94:40:de:7e:00:7c:9d:
e5:79:38:7a:09:39:8d:9f:9e:ed:94:ab:5e:72:3d:
87:07:c6:95:f8:ca:cf:53:c1:74:1a:72:ce:0f:54:
ba:eb:3e:49:4c:d4:a1:46:3c:cb:7d:c2:c2:ec:4c:
20:13:08:0d:ff:6d:31:9c:dd:51:96:4c:54:3c:62:
8a:13:ac:c9:2d:66:17:4e:4e:02:0f:40:9d:62:f4:
08:ab:5c:3c:c1:0e:05:59:f1:10:5e:30:c7:be:fc:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:2B:3B:9B:CD:6E:AB:78:A0:80:B9:D6:93:53:5A:10:0E:A7:5B
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:f8:11:c2:43:6a:5c:ac:34:0e:d6:0a:63:58:77:8d:da:8e:
4f:e9:92:45:f6:f7:f1:de:9e:4b:8a:27:10:c7:91:1c:9e:1c:
1d:2b:66:ce:1c:61:2e:c5:25:79:83:c3:23:f6:c4:f8:66:01:
9b:7d:17:d3:16:08:2d:59:17:d0:93:3b:a2:a3:ec:52:82:20:
22:ad:fe:dd:b5:d9:a3:9d:23:09:0e:79:fa:b9:ae:61:ee:b3:
90:82:4a:ab:c5:1c:bb:ec:02:b5:a4:3f:69:cf:d0:39:79:e4:
06:28:57:e7:41:37:41:d7:23:a7:ff:f4:eb:08:7c:4a:64:27:
ec:52:ff:de:30:63:cc:53:c5:25:64:dd:66:8b:36:50:9a:9c:
d1:d0:65:7e:d4:5f:92:65:cc:8c:a0:91:35:35:5d:28:9d:de:
fd:81:b0:a1:20:17:59:b9:6a:23:8c:72:2b:5b:06:90:99:fb:
0a:e3:89:04:0e:34:dd:e0:f0:87:9b:84:a9:86:06:ed:e0:52:
e1:52:41:1c:97:c6:d5:d1:6e:29:0c:9f:29:11:55:40:ed:74:
71:6f:f7:76:fb:2b:26:33:fa:84:e0:fb:f6:29:cd:b2:46:fe:
66:33:50:1d:f2:39:1f:b1:d5:5c:af:64:30:22:11:eb:79:7a:
e3:40:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:03:44 2026 by rpki-client