Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft (raw, json)
Hash identifier: EsDRCnbuu6HN2RZeQdcqkfKf+NwWvc03lbP/mvzB6Dw=
Subject key identifier: 78:57:E5:14:56:F7:91:61:97:B8:66:3D:E5:21:03:D8:0A:7B:41:D3
Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Certificate serial: 019D27724CBD4121FE57B7660C5A923A0293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
Manifest number: 0213
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl (hash: Kc/C1Mgh4rgM5yzlk++it7WRO+eG5VqEoPyGyI8EJQc=)
2: l8MRszfSe4qexC-9JyLTk4XoVgk.roa (hash: 9EV7cJFTRMkileOYn43dLtuQWD4NKNC4K7WAWUwzDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4c:bd:41:21:fe:57:b7:66:0c:5a:92:3a:02:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=7857e51456f7916197b8663de52103d80a7b41d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:b8:01:00:f6:a2:73:ae:01:fc:68:7c:60:
ef:88:90:b0:21:59:31:92:14:82:eb:e0:46:eb:50:
92:7b:90:55:3c:2f:4b:1a:96:ed:94:94:a1:ac:9b:
b8:2a:d0:2d:8b:60:26:1e:a8:a2:f7:df:ed:d1:38:
59:9b:74:d4:e2:ee:2d:99:a2:eb:2a:ea:12:a2:69:
20:79:fb:a9:dc:f3:d4:15:20:d9:d9:f3:a0:cf:69:
48:50:35:cc:af:22:d1:4a:58:03:27:86:a2:7b:44:
d9:6d:66:12:01:42:eb:33:bf:23:fc:64:3f:89:5b:
1b:dc:86:75:bc:e9:8d:f7:80:ea:3b:63:9d:88:63:
ab:64:e0:02:19:8c:f3:e2:ca:5a:cb:a3:bb:77:31:
54:61:3a:ec:46:3b:81:23:cb:b1:c7:a7:47:57:d2:
69:fe:ad:18:15:1e:7a:3e:6e:9c:5c:22:ef:f9:e5:
94:11:35:09:85:6c:49:42:3e:53:15:3a:9f:da:9b:
7f:e6:80:0f:23:ab:6b:46:54:05:89:50:0c:21:17:
89:c9:fa:b2:bd:ea:1a:93:b4:f1:a7:d6:00:ad:83:
ae:39:e9:9f:0c:de:14:26:d2:32:df:c1:5f:00:8e:
fa:c6:b3:39:c3:81:c2:99:46:4a:b8:99:ac:14:42:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:E5:14:56:F7:91:61:97:B8:66:3D:E5:21:03:D8:0A:7B:41:D3
X509v3 Authority Key Identifier:
keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:23:e8:d2:6b:9d:27:b4:a2:52:eb:5e:40:f5:70:8d:6a:b1:
63:0a:7b:b6:8a:28:f4:9d:6c:13:7e:16:28:7f:34:73:c2:74:
e7:94:a5:65:31:86:1f:3d:5f:e2:3f:fc:a0:7a:36:49:4b:ab:
43:a7:4e:10:c2:68:c3:4b:12:f7:f7:2b:2f:eb:54:fa:7f:7a:
0a:63:9e:d2:97:4b:49:1d:5a:7a:a4:5f:7d:88:0d:68:fa:5a:
66:17:0f:6e:24:10:a2:53:a9:dc:98:76:c5:a9:7c:41:c0:44:
d2:30:95:43:b2:16:aa:73:d0:a9:ee:94:a7:f6:0a:be:80:a8:
56:27:a1:4d:4f:af:2f:f5:86:22:bd:3d:ff:19:39:13:c3:01:
4c:bc:5c:3b:04:6b:73:91:bd:05:3d:9d:6d:2b:17:dc:98:13:
b3:f0:f2:66:4f:5f:99:65:c7:e0:23:fc:6c:ef:ed:2f:9b:52:
8b:e1:78:c3:38:24:ac:9e:ae:b6:46:76:6e:eb:a0:6c:04:bb:
bb:6c:84:d4:d9:2a:4a:15:b6:83:7c:96:62:be:66:ef:b1:b9:
3b:16:7f:06:5d:be:9e:62:d6:df:03:3a:cf:77:f8:3e:fa:83:
5b:4c:53:93:69:8c:3c:0c:e1:da:78:38:fc:ca:7f:18:27:cc:
33:73:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:04 2026 by rpki-client