Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: 9y9jeWcXguyv0fujzvBsBcNtsOVJUK31mqR8P1FJtJk=
Subject key identifier: 93:79:6D:17:B7:F5:B0:01:CD:11:20:33:28:48:2B:88:FA:4F:52:48
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019D299775C7722590756AC404FC0B0BBB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 06D1
Signing time: Thu 26 Mar 2026 10:01:24 +0000
Manifest this update: Thu 26 Mar 2026 10:01:24 +0000
Manifest next update: Fri 27 Mar 2026 10:01:24 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: OpVob2HzZHJE/VruYqrHci9kd+wkBp80do97D/mNOIs=)
2: uLD67uNvCc4ky2TYfWAY_NstWnE.roa (hash: J64Q9GWUgcn8Guex3fYi7oSiRMd56hoswqyttiC77H4=)
3: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:75:c7:72:25:90:75:6a:c4:04:fc:0b:0b:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Mar 26 10:01:24 2026 GMT
Not After : Mar 27 10:01:24 2026 GMT
Subject: CN=93796d17b7f5b001cd11203328482b88fa4f5248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:91:d2:eb:96:79:8c:dd:7c:e2:1b:50:f2:
a7:cd:de:d2:de:47:53:54:31:85:6a:9f:b0:75:f6:
46:85:d1:13:49:89:60:45:ab:ef:5b:42:74:79:71:
e3:f5:f3:66:e4:f3:4c:22:c8:89:70:5e:3b:93:c7:
4e:99:1e:62:15:40:13:b5:91:23:28:af:5d:8b:5c:
d3:96:1f:c4:09:44:49:92:9a:ac:1a:60:75:43:87:
4d:06:aa:bf:1b:0d:3a:66:cb:f9:5c:7c:fa:d2:dd:
7a:d2:66:17:c9:fc:1d:4f:aa:02:be:63:1c:c3:ca:
c0:c8:e2:b3:e7:ef:89:c9:d2:3b:24:d8:21:5b:75:
59:69:fa:88:60:ed:23:db:93:ac:59:e7:f1:70:99:
f6:d6:1a:46:ab:5e:4e:97:95:da:2e:9d:4a:18:63:
b6:93:9e:8b:af:82:08:a2:16:c4:d8:42:58:2f:2e:
b7:4d:7d:6a:a0:7a:3a:5e:07:6f:bb:07:dd:54:64:
1b:67:ec:cd:7c:dc:38:18:4a:e5:08:28:08:d0:61:
c3:13:5b:8f:d0:45:bd:21:af:db:7b:d7:05:d9:89:
43:72:a5:24:0a:7f:ed:c3:28:50:68:62:5b:32:88:
b7:81:62:39:7d:ab:59:e5:57:e0:0c:7a:bc:6d:52:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:6D:17:B7:F5:B0:01:CD:11:20:33:28:48:2B:88:FA:4F:52:48
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:62:d4:f4:82:15:23:4c:2a:45:ac:24:a6:69:60:db:38:27:
0e:cc:59:d5:3d:97:98:58:99:4d:67:0d:7c:06:f9:d2:6d:a0:
6a:24:e4:97:cb:c1:1f:7d:e8:f8:44:31:6a:e0:d9:c8:e4:e3:
06:42:2d:0d:2a:99:12:24:86:59:9d:8a:07:15:e6:c7:8f:5e:
df:64:9a:5d:ef:1b:18:a3:ee:e3:de:05:97:72:16:b0:71:34:
bd:34:dc:f9:3a:74:70:7b:58:04:bf:29:9f:2d:cc:18:f8:9b:
1f:f8:78:09:a6:30:f3:08:ad:43:c2:7e:ca:a8:16:64:a1:a8:
6e:c5:55:69:d4:c4:db:52:68:c7:4e:7a:80:1c:22:fc:be:98:
02:32:df:37:8b:67:8e:43:d6:f3:a4:68:26:38:be:1d:0f:6c:
37:47:70:95:4c:22:f4:eb:70:75:b6:2e:f6:0c:c4:92:de:a2:
22:5a:d0:a7:c8:36:30:03:7f:90:8c:83:1e:4d:dc:de:2c:e9:
26:a4:a6:c7:63:57:22:c7:a1:b1:86:25:e7:79:fb:bc:32:bb:
d7:cb:77:66:d7:19:33:fb:b6:c0:ad:d4:99:45:b6:eb:bc:06:
d1:cc:57:78:99:24:69:82:18:cc:44:62:ef:f9:43:6b:85:99:
23:18:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:35 2026 by rpki-client