Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: p08TbuLc++WE3sNza8Ad8wuB5fAE0RdRqNJutYBir9s=
Subject key identifier: 5A:38:E4:A6:58:EF:18:BA:4D:E2:BD:64:08:78:E3:71:7B:64:F8:59
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 019D2816AC4FD5E4F6411FE57FB15B436437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 1596
Signing time: Thu 26 Mar 2026 03:01:07 +0000
Manifest this update: Thu 26 Mar 2026 03:01:07 +0000
Manifest next update: Fri 27 Mar 2026 03:01:07 +0000
Files and hashes: 1: WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa (hash: DSIGTtOOJTOd6v4lSY+KI5Vvun5FIwwizdppUGcnQf0=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: l4Os8s7OaxS/4YGJTzxQCR4OEY++nD1/IN2ucPqCNAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ac:4f:d5:e4:f6:41:1f:e5:7f:b1:5b:43:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Mar 26 03:01:07 2026 GMT
Not After : Mar 27 03:01:07 2026 GMT
Subject: CN=5a38e4a658ef18ba4de2bd640878e3717b64f859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:30:3e:5c:88:57:a2:16:1c:dd:1f:7c:36:
95:82:a5:7c:c6:06:48:8d:bd:65:db:24:3d:7c:7c:
cc:f5:9e:2c:72:48:78:1b:7a:b9:f5:98:fb:3f:39:
5c:d9:ff:9c:3f:63:ce:1c:61:f3:6a:e8:17:60:b8:
65:f1:bf:4d:0e:ca:94:1e:f2:f3:21:ee:7e:e3:1d:
3f:a3:f5:67:b0:a4:4c:28:d2:b0:8c:6c:4c:03:01:
c8:29:17:a3:94:97:18:2d:c6:22:3e:19:fe:04:11:
c3:96:72:aa:63:ec:0f:21:77:72:4c:c1:98:48:ea:
2d:78:df:e9:2e:c1:c8:70:4e:55:de:07:a6:c4:ed:
c5:e2:86:c7:e5:7d:31:f5:0a:81:b2:69:22:98:c9:
e9:f7:32:b8:35:bc:85:44:78:53:c4:f2:50:ab:5c:
a8:64:43:3b:7b:c8:bd:e9:8d:00:00:8c:03:75:89:
7d:ef:7f:06:87:b4:d3:bf:90:87:ff:d7:98:db:c7:
2d:74:e9:60:82:a2:4b:fc:9d:d8:95:4c:38:bb:f1:
9a:61:0f:c7:b8:40:09:38:28:ab:4b:94:5f:a0:60:
80:05:cb:10:0c:a7:df:35:28:c6:8a:2a:78:fb:0e:
93:ba:70:14:bf:72:d0:86:90:cf:64:bc:e7:07:70:
c9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:E4:A6:58:EF:18:BA:4D:E2:BD:64:08:78:E3:71:7B:64:F8:59
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6c:ff:7e:fd:06:69:15:70:85:4f:94:3e:64:4d:2b:5c:93:
0c:9a:c6:ba:82:12:dd:59:93:36:91:ea:97:b8:86:73:35:f8:
0b:5c:f8:85:c9:3e:a5:a6:80:00:4f:68:4f:b8:f2:ec:92:c8:
57:75:f9:f9:76:20:34:fa:cb:e8:da:02:93:67:f2:0e:ce:e6:
97:16:9a:3f:99:bb:bf:23:34:7a:63:9a:86:33:44:17:29:a8:
85:1e:63:af:12:04:03:e5:b6:0d:56:45:38:ea:d5:a2:0b:da:
c1:e1:ba:82:31:5b:12:39:5e:57:20:bd:44:73:b5:df:5d:07:
34:e2:6c:8c:0f:24:14:ec:de:c5:40:6c:98:8b:5e:f3:12:56:
49:08:17:c4:1b:48:ff:2e:00:c9:2b:62:33:9f:8e:b2:0b:1f:
49:76:85:11:e5:05:a6:c6:35:2a:69:b8:aa:3f:cc:67:1d:2e:
2f:0c:ab:c9:cc:a8:97:93:79:82:5c:3e:41:04:b0:41:ff:fd:
db:ea:91:48:21:7a:b5:30:aa:ad:2f:cd:c5:c6:f0:b7:e4:be:
96:dd:97:48:44:a2:1e:aa:9d:7f:73:bd:70:b9:bf:e2:8b:8c:
af:d9:97:b4:30:fa:9b:60:38:9f:49:3c:55:2b:84:84:f8:9c:
ce:25:b5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:18 2026 by rpki-client