Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
File: IuKOVQMUE4-dg6KLLWZum4dEtRA.mft (raw, json)
Hash identifier: l5/xaqnAqSE3fbTTwdbtPF8eBVWYG4XHPuckolIexnY=
Subject key identifier: 9C:BA:F5:B5:64:CE:C2:78:B6:5B:7A:0D:0B:13:8F:AE:91:20:4C:1D
Authority key identifier: 22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
Certificate issuer: /CN=22e28e550314138f9d83a28b2d666e9b8744b510
Certificate serial: 019D25F1AE3455F88F52E77CE7AADFBFF193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:28 +0000
Manifest this update: Wed 25 Mar 2026 17:01:28 +0000
Manifest next update: Thu 26 Mar 2026 17:01:28 +0000
Files and hashes: 1: IuKOVQMUE4-dg6KLLWZum4dEtRA.crl (hash: YQUac+y8KQGl+XA2DzNZMlm4gluSnr3xlFqR8Dhk+eQ=)
2: zYkjl96qhuSKPjhR9FJ_SMLo0wo.roa (hash: 6MFml2JMis3B7T1zy1tlmB3r3uzT/y8AN0S/oyRhlxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ae:34:55:f8:8f:52:e7:7c:e7:aa:df:bf:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e28e550314138f9d83a28b2d666e9b8744b510
Validity
Not Before: Mar 25 17:01:28 2026 GMT
Not After : Mar 26 17:01:28 2026 GMT
Subject: CN=9cbaf5b564cec278b65b7a0d0b138fae91204c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:34:18:77:e0:96:f6:c5:7d:27:24:65:26:
ef:cd:4c:78:45:bc:95:b5:21:6f:4b:26:14:2d:40:
d3:c2:13:ed:69:68:8e:e1:b1:b0:44:4f:cf:f8:66:
b5:30:48:75:ca:a4:d4:0b:9d:de:65:95:02:ac:2d:
37:e8:d3:36:fb:88:cf:b7:c1:37:39:a3:1a:59:48:
86:7e:a9:00:e1:c9:52:81:eb:8d:88:0d:57:dc:63:
bb:2e:cb:20:0d:6c:b9:75:80:e1:8d:03:0c:04:88:
e8:e2:a6:fc:17:96:31:36:bd:2b:2e:bd:1d:6b:db:
f1:14:70:0a:0e:e5:8e:76:48:d7:12:1d:a6:16:ef:
65:3e:3d:e4:5d:7e:85:a8:cb:43:83:8d:75:90:05:
8f:5b:47:15:50:61:3a:da:5d:c2:b2:12:91:cc:6b:
7a:10:7e:2b:9c:22:2e:65:b7:c6:15:3d:92:1b:00:
9e:06:92:b9:48:41:60:32:6e:e3:3c:af:ce:a7:d3:
52:04:96:62:80:4f:88:3a:0f:ab:94:b0:d8:bd:68:
8d:a2:c8:a0:54:90:3e:18:e0:82:ec:72:66:fe:f9:
7a:a4:29:d5:74:15:83:6c:30:8f:bd:4e:e6:97:cc:
ea:fa:bf:be:2a:5b:25:06:53:4b:25:1d:49:bd:e1:
ce:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BA:F5:B5:64:CE:C2:78:B6:5B:7A:0D:0B:13:8F:AE:91:20:4C:1D
X509v3 Authority Key Identifier:
keyid:22:E2:8E:55:03:14:13:8F:9D:83:A2:8B:2D:66:6E:9B:87:44:B5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuKOVQMUE4-dg6KLLWZum4dEtRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/336a6f-2b89-4b32-89f6-4d209c3288ab/1/IuKOVQMUE4-dg6KLLWZum4dEtRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:39:af:d9:20:29:55:84:1a:11:d5:96:17:9c:2b:58:47:8b:
14:75:1e:76:27:6d:9c:39:6b:15:b3:dd:96:c3:94:c7:18:3b:
da:e2:b5:9f:e5:12:d7:bb:81:f2:9c:54:ee:bc:cd:d5:d2:e8:
ca:fa:3f:2a:b8:be:e7:a1:7d:e7:79:e2:dd:e2:c1:e6:23:46:
65:76:78:14:a7:4a:6d:66:d0:b2:e2:ef:79:39:7e:df:fd:0b:
f4:4c:ff:11:ec:59:45:e6:25:68:7a:83:5b:77:3b:45:83:1b:
76:ca:f7:29:68:0a:94:68:82:0c:24:70:48:5c:35:0e:e6:5d:
99:d9:2a:a3:83:78:58:eb:f3:37:01:32:13:6f:7a:08:6c:5b:
44:ec:08:0c:49:6f:05:02:14:e2:24:22:72:86:73:ae:42:61:
b1:1b:b7:56:b7:07:b6:d0:8e:7e:24:b6:f5:de:52:54:bd:d2:
0d:22:24:2b:fc:61:b7:ce:6e:3b:2a:a0:fd:03:8a:72:6d:fd:
1a:20:c5:d0:6c:fd:1a:9f:03:a4:df:41:e9:f6:81:25:a5:63:
e3:0b:98:89:b6:57:59:44:84:22:6a:ea:a8:a0:86:3c:b3:0f:
27:4e:24:eb:7c:60:4d:87:44:25:60:26:09:58:ac:f7:83:d4:
10:f1:35:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:20 2026 by rpki-client