Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: MPuO8dKbmGqz0Gcy2rA8mE3Rbvct8h3DXkDyGAP3OPQ=
Subject key identifier: 03:87:52:2C:B6:3E:E5:2B:91:38:03:1F:85:53:F3:32:27:77:26:90
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 019D26CD995B20CBC679C37C5AC82C8F0867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:41 +0000
Manifest this update: Wed 25 Mar 2026 21:01:41 +0000
Manifest next update: Thu 26 Mar 2026 21:01:41 +0000
Files and hashes: 1: WSoyFsUkPtTH5GPtVnmww05vFh0.roa (hash: xtuU58lDieJuv/Yy7w3S0c+KdkmwGfK0iLB0R2OEp6Y=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: mv+24vI1QhqEnjkNM730MZxDdT20UgyWnB3MaUWi4t8=)
3: tO-A92aPh-c1kbPiiGTELi4pWsI.roa (hash: VYiMeDkb56YkXPTmAgRa9xezBuKdyWi7Fakxz9UBLlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:99:5b:20:cb:c6:79:c3:7c:5a:c8:2c:8f:08:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Mar 25 21:01:41 2026 GMT
Not After : Mar 26 21:01:41 2026 GMT
Subject: CN=0387522cb63ee52b9138031f8553f33227772690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:87:c2:59:6f:cc:09:b8:d1:fd:73:f0:f5:
00:df:de:56:93:30:a5:f3:3d:f1:dd:a9:81:94:b7:
5a:a1:a6:da:ca:0c:44:91:6d:0b:5d:84:24:b8:10:
5a:a1:15:26:dd:94:96:9c:d1:a4:8a:06:d7:a9:31:
73:34:66:ba:ba:19:96:44:ff:c2:ed:6e:23:bb:57:
b3:8c:b2:e1:eb:77:a5:94:03:bf:d6:cd:c2:95:3e:
cc:47:91:f2:34:96:ac:35:97:a4:a5:0d:28:5e:0c:
f5:73:ce:a9:91:a1:6d:52:bf:c3:79:b5:78:a4:8a:
06:3c:fe:cf:c1:a4:6c:82:9a:c4:7d:c5:46:b1:c9:
32:81:75:cf:b6:0f:35:c3:e6:e6:d6:4f:c4:cb:fe:
90:b4:a6:ff:1a:30:ec:d3:46:59:6f:42:be:60:f3:
9c:81:9d:69:9d:b1:8f:19:e9:53:e5:fe:33:c7:7d:
32:4d:f4:60:39:a5:de:13:a9:07:8c:24:d7:a2:75:
15:40:28:c6:36:f3:61:a4:f6:84:fc:19:b9:56:95:
a1:a1:93:ff:30:fb:38:2f:8b:58:e5:e6:31:f5:69:
dc:21:fb:b0:d1:da:3c:15:cf:5a:29:1c:a0:ad:bc:
f7:a4:0b:54:50:41:20:48:9a:ed:23:7a:9e:30:06:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:87:52:2C:B6:3E:E5:2B:91:38:03:1F:85:53:F3:32:27:77:26:90
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:01:ff:17:70:f9:22:0d:d7:06:7a:52:fc:9a:82:75:27:34:
15:e1:12:48:f8:14:e4:5e:cd:4a:ca:dd:ff:a8:12:e4:7d:11:
6e:5d:63:db:da:8d:fb:27:36:df:55:4c:a7:e9:2d:14:ac:05:
46:1a:e6:98:aa:f8:20:2d:e3:aa:7c:50:a4:6a:3c:b0:17:c3:
b9:6f:b8:4e:b6:ba:67:78:97:96:57:4d:6d:6c:e3:7a:0f:e2:
7c:fb:bf:6a:4c:51:96:ee:71:c5:4f:d8:88:ff:7e:63:ac:83:
ff:1d:80:a3:b6:e0:d0:bf:74:23:9f:96:25:d8:2d:a1:1d:f0:
e5:99:9e:d4:2b:50:3d:cf:86:6a:44:03:37:b0:c4:14:ac:b2:
af:8e:ee:ca:f7:01:39:87:8e:5c:b4:be:d9:9a:e5:a9:ef:22:
5d:e2:b1:6b:30:2a:81:99:47:b9:18:c6:e7:53:b8:bb:60:66:
da:2f:7a:96:10:fd:da:e7:a2:1f:19:4a:44:e0:d5:fe:4c:e2:
95:bf:2a:ac:fc:2b:ff:c3:9a:f9:88:3e:c1:60:cf:52:3a:2f:
8b:b3:df:9b:2f:7e:fe:73:68:f6:06:ea:cd:1c:ce:af:17:6e:
0c:a9:b1:39:dc:4e:b3:ce:59:6f:81:54:dc:db:f0:f2:4e:95:
1f:7f:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:24 2026 by rpki-client