Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: t53AIWUzkyeRl8r0dGuuAUycPvgPTOpPUyrNwjaKEbg=
Subject key identifier: FF:CD:37:D3:1B:CF:5E:13:3E:01:A3:00:16:17:1E:71:52:5F:D0:52
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019D284E40B4F26303CB911429C8E1815FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 070C
Signing time: Thu 26 Mar 2026 04:01:50 +0000
Manifest this update: Thu 26 Mar 2026 04:01:50 +0000
Manifest next update: Fri 27 Mar 2026 04:01:50 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: HrTS+9ahtWL6Z3RSlJ9Hab/lfh90AAO54cmoDQdiSyA=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:40:b4:f2:63:03:cb:91:14:29:c8:e1:81:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Mar 26 04:01:50 2026 GMT
Not After : Mar 27 04:01:50 2026 GMT
Subject: CN=ffcd37d31bcf5e133e01a30016171e71525fd052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:2f:e8:6f:a3:8d:3c:e4:3d:d0:e4:82:d9:
83:e0:f1:16:43:b4:9b:ef:f8:11:59:40:9c:69:0a:
d3:b6:1a:89:b2:70:a8:b4:df:7c:0c:7d:05:1b:b7:
5c:89:dc:b5:9b:1e:e8:ee:75:e5:48:bb:4b:11:ec:
6b:e0:57:6a:d8:fd:4c:bc:c0:8f:66:4f:d3:b8:cf:
e4:87:ab:af:1c:e2:15:f8:d9:a3:8b:8c:9a:05:2b:
3a:49:4f:4a:57:e2:92:82:17:38:1c:39:4d:59:9e:
c3:bf:3f:7a:23:96:6f:81:e8:8b:b5:3f:51:79:1e:
1d:e1:f6:2a:cf:6a:e9:8a:b3:5c:9f:05:4c:35:08:
b0:f5:32:a1:26:dc:35:3b:27:bb:50:dc:25:10:e5:
94:eb:6e:b5:08:ca:2d:82:34:b1:a4:6e:f5:43:f1:
da:17:17:24:52:85:32:fc:08:ab:0b:72:a8:03:f2:
4e:6f:09:c9:ae:d5:1c:29:8b:72:b7:54:2d:9f:8d:
3c:81:56:d0:81:04:94:c3:06:7c:7c:3f:a6:fb:9c:
e3:65:99:00:9c:f1:3b:52:a8:2c:4d:b8:17:27:b1:
d4:ee:8f:51:e4:47:e9:8d:b2:c0:17:c4:66:0d:46:
9d:f2:40:d7:fb:02:1c:d1:ba:26:9d:bb:9c:d8:8f:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:37:D3:1B:CF:5E:13:3E:01:A3:00:16:17:1E:71:52:5F:D0:52
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ec:62:a7:92:b2:1f:38:b3:c8:60:13:1f:68:c7:27:6e:b5:
8f:04:ad:05:dc:fd:14:09:9e:ef:44:cb:ef:0d:93:6d:b6:91:
54:95:10:da:93:94:35:b8:0b:f6:5d:53:e1:a1:5d:15:cb:70:
2f:52:42:f8:20:64:14:92:07:c4:5b:18:18:aa:5e:df:da:ae:
c5:48:38:33:7d:cd:48:80:1a:c8:98:e9:fb:44:ec:15:32:b5:
e2:eb:56:7d:d6:10:92:17:bf:2f:97:bb:51:32:d8:b3:c2:3f:
88:8c:c4:88:6b:45:13:7f:da:93:28:9e:16:32:49:f1:d9:ea:
8e:44:eb:48:d3:84:54:2d:76:92:db:b7:46:37:80:0c:f9:ff:
78:e8:49:96:8f:59:04:12:dd:1c:97:b2:8b:c6:eb:d9:fa:82:
d5:06:ce:9c:74:33:96:c5:a1:1f:2a:47:35:b4:ac:3c:a8:61:
68:11:52:14:f9:40:56:3b:08:0f:f3:97:18:8e:45:28:9c:57:
bb:2e:cd:0e:12:d6:f8:8f:3a:33:78:c5:78:44:f3:b6:c8:08:
d9:16:60:1d:36:c3:0d:6a:3e:b7:c6:10:c9:9e:01:96:d8:67:
95:61:b8:d3:4a:ea:26:b5:9a:43:43:19:7f:cf:e1:00:11:73:
a9:8b:45:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:54 2026 by rpki-client