Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: 3n6SE6uS9ZSig6aPrH1L3QhgJWxzqruQgVUSI5ZaC/M=
Subject key identifier: 0B:F3:E8:3A:D5:8A:A4:9A:6A:7D:D5:20:57:21:00:EE:44:9C:6F:0A
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 019D2A72D0047582636177991B918F1C1676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 155C
Signing time: Thu 26 Mar 2026 14:01:00 +0000
Manifest this update: Thu 26 Mar 2026 14:01:00 +0000
Manifest next update: Fri 27 Mar 2026 14:01:00 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: DmLx5UFHBlwCMvnLp5uZfYZnNnI1dCUJZ3wB3+exvZw=)
2: c9DEUEWEQPqrGgYUimiiQviSMgM.roa (hash: wakxrbqHUtPpN1M0QZFEdKnthWi1t40kvnk8QYdL7EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:d0:04:75:82:63:61:77:99:1b:91:8f:1c:16:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Mar 26 14:01:00 2026 GMT
Not After : Mar 27 14:01:00 2026 GMT
Subject: CN=0bf3e83ad58aa49a6a7dd520572100ee449c6f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:71:e4:8c:f2:71:91:e8:d6:a0:9b:aa:14:
b7:42:22:fb:b1:e6:fb:76:94:fe:ea:dc:f7:13:ad:
f7:87:1f:44:67:ac:ce:44:a6:0f:ec:79:e3:48:9c:
bd:92:f6:19:ef:68:4a:1e:49:52:2c:45:d9:8f:4e:
51:3a:a9:53:b9:e2:ee:53:c3:b6:4f:71:c4:ac:ba:
67:6d:be:c9:c3:37:fe:4c:0a:77:0e:9c:5b:46:a5:
62:87:f1:84:e5:ab:79:e9:c9:a0:bd:8d:2a:48:4d:
1a:6b:88:0e:58:84:ae:b4:a7:18:bc:53:48:50:54:
57:50:a0:31:43:2b:b7:d4:85:7b:62:d6:50:cc:de:
07:23:f4:6f:7d:0a:c3:20:3b:99:da:5e:aa:0a:30:
1b:b7:48:b1:1a:7a:5a:a4:39:68:66:02:22:f0:7e:
01:1a:25:cd:81:e5:e9:69:36:14:ab:6b:c2:44:34:
64:28:3b:34:7b:24:e8:99:14:e7:3b:f9:36:5f:aa:
15:a9:3c:01:09:ae:d2:ac:22:07:d8:d2:93:2e:ac:
b8:36:05:82:eb:6d:60:88:4d:d5:c2:30:b3:de:e1:
8d:d6:c0:a4:26:0b:7e:9b:76:b5:78:6c:b4:7a:8f:
34:21:23:f3:39:3c:86:a4:a9:f8:42:13:d3:bf:7a:
6a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F3:E8:3A:D5:8A:A4:9A:6A:7D:D5:20:57:21:00:EE:44:9C:6F:0A
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ab:59:ba:bf:08:6b:d3:ef:dc:01:00:1e:49:97:55:29:4a:
7e:17:5c:60:66:af:ab:af:30:df:b6:10:4a:b3:57:0f:07:fc:
52:11:70:6d:4e:ed:01:30:af:db:8f:54:51:b1:1b:ce:af:17:
01:b6:4c:e0:fa:86:dd:7e:0c:e1:7c:d9:f0:42:e6:bc:27:38:
5c:e5:8d:b5:ca:5d:fb:29:8a:6d:c2:aa:a1:c9:22:54:14:53:
fd:30:96:96:02:f4:f9:0a:3f:45:62:3e:ec:2e:39:84:93:82:
96:64:b2:82:1a:2b:46:f8:e8:06:03:37:bb:88:88:5c:03:6e:
4a:98:f4:e6:66:a2:b5:43:c8:64:1a:6c:8f:e0:98:14:07:5c:
f0:94:05:81:d6:1a:03:d2:17:3f:3d:e1:be:39:2d:a9:1a:62:
3b:27:c5:e0:e3:d9:8e:38:29:3b:f1:f6:d1:4e:a3:34:b9:66:
13:67:c9:9b:d9:15:ca:17:1d:46:4d:be:f1:92:a1:c4:c6:22:
dc:30:87:da:2f:c6:94:b6:f3:fb:50:57:ea:ce:cc:05:35:b6:
59:56:e9:6a:00:31:49:37:26:cf:ad:dc:2c:bb:73:16:94:fa:
6c:a6:74:21:17:b1:94:d2:b7:d5:dd:69:eb:17:36:e6:ac:37:
ff:3b:79:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:52:16 2026 by rpki-client