Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: Ce29vkGBAe1Bi11hc2ifWFakK6h1HMcEevqNz45s908=
Subject key identifier: E2:1E:AE:47:3B:50:A5:01:A0:A4:DB:7D:B1:76:70:80:28:90:13:4B
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 019D2772BA0A26870C4F2725BED3445B1A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 12EE
Signing time: Thu 26 Mar 2026 00:02:03 +0000
Manifest this update: Thu 26 Mar 2026 00:02:03 +0000
Manifest next update: Fri 27 Mar 2026 00:02:03 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: miro4C6Z8lutd7TATgw9H7tBMj18CHWbLq6yVUFLkDA=)
2: nTEEldQ8JCgNsqd4JSKs5KuINYY.roa (hash: wrpYC3RNdpnmBhTWlWj1deW4zKEmR7xx0r4eatbfdyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ba:0a:26:87:0c:4f:27:25:be:d3:44:5b:1a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Mar 26 00:02:03 2026 GMT
Not After : Mar 27 00:02:03 2026 GMT
Subject: CN=e21eae473b50a501a0a4db7db17670802890134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:ca:3a:da:c6:c8:cf:68:0e:35:0b:77:d9:
cd:c5:0d:d0:fa:7c:a5:8a:13:57:00:e4:5e:a9:be:
19:2a:cc:11:bd:98:68:c6:39:72:71:ae:0c:97:83:
f2:19:ef:9d:35:90:74:0b:cb:29:21:09:1a:aa:c0:
a7:18:d9:7c:af:af:34:ae:bb:32:f0:3d:ef:c2:e3:
9f:13:1a:ab:a0:23:4e:af:7e:8c:9f:d4:93:14:03:
67:23:00:e6:3b:55:32:d0:cd:27:1d:52:7c:e6:d1:
24:7d:8d:cd:a1:86:dd:b9:1a:89:6a:05:9f:24:4f:
a6:cc:bb:00:cf:92:8f:4e:4e:54:f2:26:1e:b2:f6:
48:36:3e:d6:1c:50:3c:01:64:77:c6:e2:db:00:09:
1f:5b:4c:d2:a7:c2:c4:cf:bb:2f:51:6d:d4:8e:f6:
62:07:ca:f5:d3:24:e8:03:b9:fe:c2:a7:89:96:1c:
95:77:ab:2f:32:9c:ff:76:9e:5d:74:e5:34:08:ed:
78:86:ee:40:20:b5:e8:44:98:0c:81:b7:8c:00:79:
a7:05:f6:10:34:ac:08:cd:be:ff:b2:73:0e:1c:81:
c0:a5:43:e1:88:98:ee:1e:97:77:f4:0c:27:1a:fb:
38:cd:0d:ea:a3:4a:9a:ec:dd:45:d8:f7:bf:70:c9:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1E:AE:47:3B:50:A5:01:A0:A4:DB:7D:B1:76:70:80:28:90:13:4B
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a5:b0:8d:a6:0d:96:20:6d:0f:e1:22:6e:ad:5a:28:28:14:
cb:67:17:e9:e0:cb:f7:ea:ff:91:5f:67:9f:ee:30:ef:8b:d1:
89:60:a1:46:7a:48:19:60:9c:93:3b:84:c3:df:b7:3c:39:f7:
f1:ed:2d:34:03:52:67:14:d4:03:d9:1d:f4:ca:89:52:a2:46:
f0:57:1d:75:35:cc:80:15:6e:93:02:07:3c:e9:ac:dd:f4:e9:
f5:06:69:9b:29:39:7e:01:6d:f8:f3:0b:12:38:b9:5c:35:e3:
eb:eb:cf:84:12:65:7f:bf:07:dd:d7:09:ca:3b:26:70:ec:c7:
a0:14:b2:75:7c:83:a9:49:db:a1:00:74:b9:ba:dd:b8:d6:d9:
22:ca:79:43:b7:37:fe:35:8b:ae:31:93:de:37:19:ed:4b:ed:
dc:c3:2a:c9:ff:7f:d5:bc:37:1f:88:03:c0:f5:a6:23:f4:aa:
b8:22:54:ed:28:80:4c:d8:bb:ab:bf:f5:00:c6:7a:a8:f0:12:
c0:0a:a2:f7:62:fd:59:0a:33:e4:50:e3:2f:f0:58:81:e8:2d:
0f:f8:3f:74:9b:1d:4a:d2:cb:ee:75:cc:99:1d:e6:c9:c9:4b:
bc:0b:cd:66:26:30:3e:10:74:62:6c:75:10:0f:fc:ff:1d:fc:
e3:f0:a0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:13 2026 by rpki-client