Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: 3iJ1ikf6uy/U6oyplkGSolHoFrFyM1gT6Awp/WczFak=
Subject key identifier: DE:B8:67:EF:B8:A8:70:68:80:C2:7F:3B:B7:C4:16:CB:89:0C:21:71
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019D29CE849E58CEE2C282077D43161837D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 11:01:33 +0000
Manifest this update: Thu 26 Mar 2026 11:01:33 +0000
Manifest next update: Fri 27 Mar 2026 11:01:33 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: hcxc0m/0a+Q2gkH55a0tlxeUMHwWQWX1h4hJkOyh5kQ=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:84:9e:58:ce:e2:c2:82:07:7d:43:16:18:37:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Mar 26 11:01:33 2026 GMT
Not After : Mar 27 11:01:33 2026 GMT
Subject: CN=deb867efb8a8706880c27f3bb7c416cb890c2171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:47:7d:0e:63:da:de:b9:6a:6b:75:73:60:
99:ba:85:27:0c:07:6d:b5:e5:ab:d2:85:b6:52:f9:
3e:b4:68:ed:86:02:e9:01:b0:ab:20:16:c7:e6:fb:
2e:9d:75:49:9c:ce:ab:e1:47:4d:bf:65:80:ca:cb:
e0:cf:6d:81:52:d1:b5:e3:a9:98:c2:a3:0a:1f:5b:
87:80:9d:b1:10:89:7b:59:ef:21:f7:2e:41:30:ff:
bb:f3:d2:04:f7:51:6a:bb:69:0c:88:e7:8b:da:85:
1a:90:c9:a4:0f:07:a1:49:a1:82:03:86:ed:90:3b:
f2:67:32:04:5e:41:38:5e:17:e2:11:72:bf:f9:05:
89:0a:69:15:71:42:68:0e:3c:a1:35:c6:51:ea:ba:
cd:00:b1:3d:9b:9a:b8:1e:67:7c:25:12:d0:4d:10:
a0:41:f8:24:2a:aa:7c:0a:ae:87:52:1d:f9:9b:3e:
ec:aa:a8:cd:b6:40:37:9b:b8:37:e7:3c:cb:8a:d0:
03:eb:8e:13:d4:71:a5:0c:8b:2f:89:09:03:32:01:
d7:c9:d7:9a:2a:47:19:fa:91:76:64:7d:57:ee:ef:
81:b0:dc:7a:b4:45:7e:28:18:81:ed:da:3e:c4:30:
84:70:be:38:7b:8e:00:ec:a1:e9:ac:fe:e7:87:fd:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B8:67:EF:B8:A8:70:68:80:C2:7F:3B:B7:C4:16:CB:89:0C:21:71
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:29:5f:18:c0:ae:75:48:60:ec:9c:90:ff:5d:ba:76:b4:84:
ae:f8:a1:0a:bf:b8:fa:8d:16:68:c4:d5:89:9c:b4:e9:e2:16:
21:3c:16:da:8b:a6:82:bb:47:aa:e1:8a:35:62:0b:37:f3:e9:
d3:44:27:c9:eb:86:5b:5d:79:6b:77:1e:3b:2d:4a:30:8b:94:
ef:bd:9b:64:e1:9f:5f:33:f7:97:db:a8:fc:85:0a:43:5c:ce:
de:a3:57:e1:b3:eb:0e:7a:17:2c:22:e1:ea:d7:70:bb:1f:a3:
a9:64:ec:1b:24:fe:c7:67:72:2b:0e:55:14:5e:d3:00:7d:07:
18:02:50:59:e5:ee:0c:2c:1b:79:8c:d1:1f:01:1d:c0:09:91:
a3:69:b5:13:28:87:31:30:1a:1f:10:d5:34:3e:02:d5:26:c0:
27:75:4a:87:c2:ae:7b:14:cb:c7:f4:3c:fb:eb:18:6a:fa:cb:
3c:dc:35:0b:ce:78:d0:bd:ff:7a:ab:5b:db:96:1e:6a:05:0e:
d7:47:27:d4:68:dc:a3:7a:9d:48:6d:bf:f2:54:34:48:04:de:
c3:02:73:61:e7:3a:38:e4:13:04:d7:3b:04:41:b1:9b:8d:33:
fd:9f:f5:ca:c4:5a:e4:1a:09:a1:8e:57:ec:2e:93:b0:30:fd:
59:52:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:15 2026 by rpki-client