Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: 3s3utYJOGhaDEKIzLKfRSncBYDQB9VRVfbXLWhORwZc=
Subject key identifier: 34:62:67:99:D9:DC:34:53:77:25:C4:D5:C6:C4:83:91:07:F2:AA:64
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019D329AE9D850CA479104B66F4E4A128AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 09C5
Signing time: Sat 28 Mar 2026 04:01:46 +0000
Manifest this update: Sat 28 Mar 2026 04:01:46 +0000
Manifest next update: Sun 29 Mar 2026 04:01:46 +0000
Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=)
2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: t6VSmfeZmSf2+NSUQBr2mlYcDUmVWUzqUE3Y/BdeljY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:e9:d8:50:ca:47:91:04:b6:6f:4e:4a:12:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Mar 28 04:01:46 2026 GMT
Not After : Mar 29 04:01:46 2026 GMT
Subject: CN=34626799d9dc34537725c4d5c6c4839107f2aa64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:05:89:2e:fa:38:f8:13:00:0f:97:46:d7:
55:f9:1e:6a:96:5a:52:56:4e:dd:22:ab:f8:1e:0f:
c9:69:7c:85:ec:ea:fd:ec:c8:30:bc:7d:92:99:3b:
c9:fd:20:f0:b8:f3:83:e3:22:0a:53:7b:60:75:48:
86:37:d0:d1:56:d7:68:37:d0:2d:57:b0:ea:23:4c:
bb:82:c3:1d:31:94:d6:72:c5:fc:6e:51:28:28:fd:
d0:fc:ba:c9:e0:82:2f:bc:97:57:5f:de:82:f1:3f:
ed:1d:73:83:1e:fd:0b:83:cd:3d:d7:a3:c2:89:cb:
72:89:90:1f:e8:7e:35:25:bf:50:db:e8:f4:30:a6:
ae:4a:0a:ce:a7:85:11:a6:fe:e9:4f:41:5e:d3:fc:
2c:3e:b3:d7:44:5a:2c:16:ce:cc:d1:b7:d9:50:6e:
28:8b:3f:54:3a:97:39:2e:af:fa:4c:d3:cc:14:54:
93:5b:cf:3a:4d:a9:c0:3d:97:3b:a4:41:9f:c3:58:
40:e6:62:ff:c8:31:df:70:71:93:d2:9c:f5:7e:2a:
56:dd:ff:c9:80:5c:35:3d:ed:d0:ea:68:d9:a3:d5:
ae:5b:ed:88:bd:ad:7f:24:9a:0c:b6:d8:00:87:70:
46:c3:e4:00:b8:5d:05:e5:fb:72:c4:b8:b1:6d:06:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:67:99:D9:DC:34:53:77:25:C4:D5:C6:C4:83:91:07:F2:AA:64
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ab:74:0a:23:e3:39:e9:39:a8:f8:7b:a5:d9:c8:ba:cc:c6:
3a:9f:82:74:76:3e:a5:75:14:a1:24:d5:30:ae:e9:4e:12:02:
16:bb:8b:9f:6e:3e:73:ea:cb:f5:19:ea:03:5a:a1:c7:e6:56:
75:36:e5:fe:08:65:ce:e0:6b:59:6d:e9:71:bc:cf:f0:60:61:
5b:1e:9e:6c:a7:12:5d:67:24:5e:1f:99:72:18:e2:5a:1e:b7:
8b:c8:ab:0d:1f:a2:ad:57:8b:5c:3c:f1:84:1d:49:2c:f7:29:
ac:c6:19:05:2d:86:9e:95:98:0f:57:b9:36:1b:60:3b:1f:a9:
7f:cd:d4:1d:61:73:29:cd:65:21:2d:97:b8:5d:64:4f:75:8b:
12:17:29:72:83:37:19:5d:da:ae:79:e2:48:22:00:98:06:bd:
d8:c6:2b:9a:0e:f6:c3:d0:8d:9c:48:d6:7d:dc:33:df:f7:92:
7e:68:0c:cd:58:7c:56:f8:66:d6:12:e6:c0:9f:b2:c0:d5:57:
5a:c4:bc:10:9f:22:aa:04:28:4e:a2:a8:30:56:be:3d:35:95:
45:4b:bf:8f:82:d0:4e:7b:3f:da:31:af:36:c1:25:c2:d0:21:
a1:e7:24:2b:1d:a7:d8:f6:09:bb:84:c6:d6:01:21:68:3c:a4:
24:6a:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:07 2026 by rpki-client