Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: WkEokQMrc++3Fkf0Zwn4FxfEgX1iUA7QpFYoyGdQMMM=
Subject key identifier: 69:9B:07:D7:16:15:D2:57:C5:99:D5:17:C5:25:8E:F6:19:13:C6:CA
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 019D273B30E4ADF300B319170763B99729AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 1593
Signing time: Wed 25 Mar 2026 23:01:23 +0000
Manifest this update: Wed 25 Mar 2026 23:01:23 +0000
Manifest next update: Thu 26 Mar 2026 23:01:23 +0000
Files and hashes: 1: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: c/eg63jzdsInJvdmBdZtRIhyBb++x15tGJYTnOeXvOI=)
2: TERNYPeRZxuJ6NCrmwP9jvXvdl4.roa (hash: ezcjhFsSIFuUl+K0MedDme7brzKUDk5NDojpmlSW4ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:30:e4:ad:f3:00:b3:19:17:07:63:b9:97:29:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Mar 25 23:01:23 2026 GMT
Not After : Mar 26 23:01:23 2026 GMT
Subject: CN=699b07d71615d257c599d517c5258ef61913c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:cc:35:d5:5f:84:e1:37:ad:de:23:52:1d:
b1:59:63:86:4b:42:b8:3d:94:e3:74:db:d3:b4:41:
f2:76:6e:1a:51:c4:8e:05:61:ca:28:03:8c:61:2a:
5a:c0:99:f4:8a:2b:86:30:d8:09:cc:34:7e:0b:d3:
77:55:41:cd:77:fd:10:95:32:b0:f9:82:73:27:15:
ff:04:07:6a:43:1e:a1:52:33:3b:20:b5:f1:c3:20:
f7:c2:26:2f:da:18:76:99:c2:06:89:73:a9:4c:89:
69:e1:63:00:fc:64:98:20:6f:9f:ef:aa:0b:74:c1:
bf:0c:17:37:d5:05:85:6d:55:f1:20:f9:8c:9b:b7:
4a:85:82:80:52:c9:59:8c:09:4f:e2:9f:59:98:76:
dd:7d:91:a8:98:82:8a:1a:a0:82:e9:40:2a:19:a7:
a8:37:d6:2b:8b:59:64:8b:c1:4e:f2:f0:3a:da:df:
2d:54:22:fc:3c:bf:47:ff:57:41:60:d8:3e:f6:c9:
85:28:7d:2a:c6:f1:6b:06:c3:d5:20:09:ed:e7:90:
64:c9:8d:f4:77:7f:52:82:18:f2:df:51:e3:7f:df:
33:a1:75:a9:15:1c:fb:1a:d6:4e:55:57:c9:e2:a5:
52:0e:30:86:a2:a8:09:89:47:b4:18:fd:b6:a0:e9:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9B:07:D7:16:15:D2:57:C5:99:D5:17:C5:25:8E:F6:19:13:C6:CA
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:6f:5f:f2:d0:41:f9:3a:44:d4:4f:8c:4e:c1:b1:18:09:
7a:3a:93:50:a0:24:8f:72:f0:94:43:80:a4:07:c1:7a:28:a8:
13:e2:47:a1:d2:7c:c6:a9:f0:39:78:46:7c:dd:b9:a5:41:44:
b0:6b:90:d6:07:38:e9:04:2a:61:59:e7:93:fb:c1:aa:2b:dc:
79:1a:39:b1:d4:8b:c5:a2:2a:da:ba:9d:8e:f6:c7:0c:cd:4a:
f0:16:7f:01:f1:b5:f5:c7:37:59:8e:0c:da:79:c0:c5:3d:7e:
1f:7a:5c:07:7f:cd:17:4e:74:fe:08:1a:da:e2:c0:6b:53:b7:
0b:a1:ad:d1:10:32:12:1b:a7:ce:eb:d2:95:72:a0:a6:26:79:
d2:7f:08:0a:f8:0a:af:b0:7e:3a:61:be:b6:9b:d8:ab:05:85:
9e:c2:f8:b6:ad:c0:c3:8d:0d:1c:b5:c0:6e:7f:7c:12:35:07:
00:35:cf:56:4e:d8:d8:f6:47:07:6f:1f:48:52:98:56:e7:b5:
54:84:32:64:a0:c0:0f:54:66:64:43:46:6f:b1:4a:d9:53:19:
b6:8f:47:3e:00:9b:26:c3:93:3c:a6:e5:26:39:7a:60:7c:27:
1f:75:3a:1f:0e:67:36:a5:82:47:e0:a7:97:8a:73:3c:ec:01:
85:94:7f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOzDkrfMAsxkXB2O5lymsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNDYzNjczOTAyMjRhMDc2ODRkNzk3N2Y5MTY1YTA5NTBm
MDNkNTQwHhcNMjYwMzI1MjMwMTIzWhcNMjYwMzI2MjMwMTIzWjAzMTEwLwYDVQQD
Eyg2OTliMDdkNzE2MTVkMjU3YzU5OWQ1MTdjNTI1OGVmNjE5MTNjNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1HMNdVfhOE3rd4jUh2xWWOGS0K4
PZTjdNvTtEHydm4aUcSOBWHKKAOMYSpawJn0iiuGMNgJzDR+C9N3VUHNd/0QlTKw
+YJzJxX/BAdqQx6hUjM7ILXxwyD3wiYv2hh2mcIGiXOpTIlp4WMA/GSYIG+f76oL
dMG/DBc31QWFbVXxIPmMm7dKhYKAUslZjAlP4p9ZmHbdfZGomIKKGqCC6UAqGaeo
N9Yri1lki8FO8vA62t8tVCL8PL9H/1dBYNg+9smFKH0qxvFrBsPVIAnt55BkyY30
d39Sghjy31Hjf98zoXWpFRz7GtZOVVfJ4qVSDjCGoqgJiUe0GP22oOkctwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmbB9cWFdJXxZnVF8UljvYZE8bKMB8GA1UdIwQY
MBaAFCBGNnOQIkoHaE15d/kWWglQ8D1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgt
YzhmYzYxNjM5NDJiLzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9mODYwMTMtZmUxZC00MWJlLWFmZTgtYzhmYzYxNjM5NDJi
LzEvSUVZMmM1QWlTZ2RvVFhsMy1SWmFDVkR3UFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9lvX/LQ
Qfk6RNRPjE7BsRgJejqTUKAkj3LwlEOApAfBeiioE+JHodJ8xqnwOXhGfN25pUFE
sGuQ1gc46QQqYVnnk/vBqivceRo5sdSLxaIq2rqdjvbHDM1K8BZ/AfG19cc3WY4M
2nnAxT1+H3pcB3/NF050/gga2uLAa1O3C6Gt0RAyEhunzuvSlXKgpiZ50n8ICvgK
r7B+OmG+tpvYqwWFnsL4tq3Aw40NHLXAbn98EjUHADXPVk7Y2PZHB28fSFKYVue1
VIQyZKDAD1RmZENGb7FK2VMZto9HPgCbJsOTPKblJjl6YHwnH3U6Hw5nNqWCR+Cn
l4pzPOwBhZR/5w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:38:27 2026 by rpki-client