Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: VO9KvUEkjvB223uqVj4yn9IL2xDMr3tMZa5BxruFWk4=
Subject key identifier: F7:96:3F:18:B6:D7:E7:DC:E6:3B:A9:0C:5F:25:8D:60:EF:3A:7B:B4
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019E1E35172F1DF12A4EEFE8D1AD679A71B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 0A3F
Signing time: Tue 12 May 2026 22:00:56 +0000
Manifest this update: Tue 12 May 2026 22:00:56 +0000
Manifest next update: Wed 13 May 2026 22:00:56 +0000
Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=)
2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: vXbl6W/NfEIyORl7EG1cis183/RoW47PcrRmUQn4TvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:17:2f:1d:f1:2a:4e:ef:e8:d1:ad:67:9a:71:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: May 12 22:00:56 2026 GMT
Not After : May 13 22:00:56 2026 GMT
Subject: CN=f7963f18b6d7e7dce63ba90c5f258d60ef3a7bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:8e:1e:c7:6b:a4:62:d8:92:a4:28:fe:90:
09:9b:83:59:eb:54:3f:53:60:14:16:35:a1:b8:e7:
e1:be:b5:97:7b:6c:d5:b3:cc:68:f9:9c:95:72:d1:
21:ed:b6:2b:c6:bb:66:6d:0a:15:66:0f:87:0d:8b:
9e:f4:95:28:1b:a3:cd:ca:e3:fb:1c:f4:78:e1:ef:
46:13:72:8d:7c:10:aa:7d:95:73:bd:54:32:30:26:
2f:1a:98:2e:46:34:6c:da:01:c0:31:9f:d9:2a:60:
9a:a6:88:0c:c7:ed:7e:45:24:62:19:6a:da:8e:57:
81:a7:c8:1b:03:e0:77:e5:1b:fe:b5:4d:8e:1e:a5:
44:ca:26:02:1a:ba:90:f2:c4:9a:98:79:82:0a:4b:
04:12:d3:65:ed:2c:8d:c3:48:9f:ce:6b:d5:08:e4:
9a:19:c2:8c:6d:d8:98:29:33:0d:7c:f6:e4:b7:ae:
07:0d:73:96:79:d0:0e:e3:3e:f0:e5:18:b1:db:53:
73:2b:34:f9:59:cb:5c:bd:e8:0e:31:50:32:11:a1:
ed:68:fb:e3:c9:a3:33:0c:02:9a:9e:b2:d1:fc:32:
1a:2a:1f:b5:4e:9b:fe:f4:cf:e1:ff:02:9f:76:25:
77:5e:82:10:b5:d2:4c:dc:35:63:ef:d8:1a:59:e9:
17:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:3F:18:B6:D7:E7:DC:E6:3B:A9:0C:5F:25:8D:60:EF:3A:7B:B4
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:2b:34:b7:14:a5:be:41:51:76:78:8c:2d:c0:5d:c7:de:
d1:22:3a:80:86:e1:c4:cb:a3:7e:0e:60:5d:d2:5e:f8:77:90:
af:fb:ac:38:6b:ae:fb:1e:d1:c7:9b:ea:73:e5:30:fb:c3:39:
10:bb:51:80:a1:69:c3:75:7e:ae:e1:2f:95:64:01:d2:11:a2:
d4:f8:ba:ce:15:b5:1d:fc:b7:43:19:ef:ee:8a:13:e3:96:17:
84:fa:87:1c:0c:d5:11:d5:e6:24:d0:80:f8:c5:5b:fc:6c:0c:
96:c7:42:f1:e7:7a:d8:4f:34:f2:26:75:7b:23:7f:09:a3:f5:
42:8d:fe:ed:a3:5a:c7:45:77:f3:e5:57:a0:50:86:e6:0f:ba:
8a:96:a1:63:80:69:fa:de:85:d8:f0:b4:c4:85:5f:68:db:93:
69:e5:b3:86:d2:fc:65:84:d0:24:f5:a5:91:9b:b2:0e:b9:cc:
4d:f8:96:4d:42:ba:6f:98:8a:25:8a:37:3e:82:73:e0:f1:f7:
f7:ff:db:c3:ff:65:e6:54:63:45:43:4d:79:d7:d0:57:ab:98:
86:b0:2c:5f:a9:65:b1:fc:36:4f:39:a5:0b:3d:5c:8d:1d:2a:
e7:da:01:70:74:89:49:9c:06:64:52:fb:64:61:dc:b6:fe:ca:
a0:17:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:16 2026 by rpki-client