Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: /uMqC4U8amcaAx/Onle15oiabM1roBdhnW7p67nT1nY=
Subject key identifier: 54:F7:AF:17:15:DF:16:AF:5A:F2:6F:3F:14:15:E0:C5:86:7D:C9:E1
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 019D2583E227123635F5FF27D0C1EB16A2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 15:01:33 +0000
Manifest this update: Wed 25 Mar 2026 15:01:33 +0000
Manifest next update: Thu 26 Mar 2026 15:01:33 +0000
Files and hashes: 1: _96Euvo05bQiTFxZBzxImx3S1Qo.roa (hash: 8USkhhFs2laMuIgluBHy8qGwUIcnnc8iCXVDlvT0OTc=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: FvMkRAQ80jZaJUATl2u1kxqdTbA6HXdBdflmWiaToJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e2:27:12:36:35:f5:ff:27:d0:c1:eb:16:a2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Mar 25 15:01:33 2026 GMT
Not After : Mar 26 15:01:33 2026 GMT
Subject: CN=54f7af1715df16af5af26f3f1415e0c5867dc9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:1f:46:94:5b:7d:3e:70:21:39:b4:45:52:
69:4c:f6:50:b2:d4:ba:ff:df:1e:c6:7b:f4:32:d1:
ee:ea:07:fb:54:ac:c2:37:84:26:b1:ef:9a:41:f6:
05:95:b3:02:41:35:74:69:aa:82:23:56:ed:79:c0:
84:e8:25:3d:f3:9e:00:82:25:8c:23:65:13:14:50:
3b:69:b0:2a:a6:28:46:07:9d:c2:dc:4a:df:73:dc:
a8:2b:cc:1f:56:19:be:24:87:fb:fa:d5:75:6f:b3:
ff:3c:9f:c6:ff:a0:b7:73:f3:04:cc:7d:ce:a2:68:
2f:10:a7:36:fe:2d:eb:32:77:1a:11:c2:f5:aa:d8:
07:bd:de:e8:2c:cb:3f:6e:76:cb:cf:db:9c:ce:4f:
ab:63:1c:9d:67:a2:bf:07:08:01:b5:75:c9:fc:87:
7f:d8:88:68:9d:3d:8b:d1:c3:41:36:47:a5:60:29:
f9:53:36:d1:cd:06:7f:07:5b:53:10:f6:6a:01:49:
fb:c5:99:0f:f4:74:d0:81:5e:9b:b8:cd:5c:9a:5e:
a3:22:f6:12:e3:56:d6:05:2b:28:91:e7:5e:71:3a:
a7:ec:d6:47:0f:2d:05:8c:cf:ca:bb:ba:b6:c9:a4:
45:aa:e7:32:4c:c2:51:54:66:19:73:02:a5:f0:ee:
b3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F7:AF:17:15:DF:16:AF:5A:F2:6F:3F:14:15:E0:C5:86:7D:C9:E1
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:e3:fc:71:67:0f:15:5a:e6:7c:da:e8:0a:01:79:1a:31:
2d:5e:95:e0:f6:5c:a9:ca:23:a9:62:0a:37:7d:50:f2:b5:ac:
c5:ea:be:f6:60:cb:01:d7:dd:62:b3:12:55:67:0c:b1:6b:53:
cb:71:83:5c:fd:cd:b3:3a:d0:c2:81:4e:39:6f:91:42:df:fc:
5e:d3:a1:c6:a9:cd:e5:00:33:cc:fc:a8:1d:ba:4e:1c:ce:56:
2b:28:9a:59:30:90:88:2c:23:ef:f1:b8:19:02:01:e4:17:39:
e4:e9:e8:a2:6b:4a:23:50:fa:9d:db:b1:26:02:43:07:61:71:
a2:94:7e:82:a5:d8:34:6e:b2:54:a5:62:e5:8a:a8:72:eb:3b:
86:90:ce:e1:88:61:f2:81:59:70:80:f8:43:21:8d:48:38:d1:
4c:71:40:ea:c1:99:d3:24:ed:b1:12:8c:d2:34:33:41:2d:19:
3d:2e:b2:5d:a4:0c:0a:f6:25:10:0c:bb:35:31:53:cf:a1:52:
7c:7d:8c:8e:ed:13:5f:e1:75:65:56:31:4f:5d:50:79:5a:42:
69:3b:84:8e:6d:19:b5:a9:74:b7:d5:70:cc:3e:ad:aa:86:96:
e1:3b:1e:ba:d0:ed:b5:b2:72:fc:e1:70:51:39:c6:cd:74:59:
3b:e2:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:33 2026 by rpki-client