Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
File: IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft (raw, json)
Hash identifier: pWBkYD71oloFkPltrm089rzB2fjPFyBZXjYTgN1xyF4=
Subject key identifier: 2E:86:26:6A:D0:A1:D7:32:1E:AA:3D:99:6E:64:60:38:9D:4E:0F:6E
Authority key identifier: 21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
Certificate issuer: /CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Certificate serial: 019E1F10D30F987D1A915E44BC0C9A2CECE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
Manifest number: 0294
Signing time: Wed 13 May 2026 02:00:56 +0000
Manifest this update: Wed 13 May 2026 02:00:56 +0000
Manifest next update: Thu 14 May 2026 02:00:56 +0000
Files and hashes: 1: IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl (hash: j9DNT6AP/J1WtOUs99uz/MK2xzvlrI7XRMJqZ6NPeD4=)
2: TJBNoqDJuDXadUHCaSsBuATOWto.roa (hash: gJS3wY/oZsaAW7+2UEGNOUq9JEb/eTtIedw6FlGOizU=)
3: l8MRszfSe4qexC-9JyLTk4XoVgk.roa (hash: 9EV7cJFTRMkileOYn43dLtuQWD4NKNC4K7WAWUwzDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d3:0f:98:7d:1a:91:5e:44:bc:0c:9a:2c:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2181c5b3cb7eeb1e49582155a1918ec612f95ac6
Validity
Not Before: May 13 02:00:56 2026 GMT
Not After : May 14 02:00:56 2026 GMT
Subject: CN=2e86266ad0a1d7321eaa3d996e6460389d4e0f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:95:f9:88:81:35:d4:76:75:b6:24:0b:3c:
2f:9f:b3:dc:84:6e:6b:0a:81:17:01:ff:dd:e4:64:
0a:04:cb:d9:ff:fc:8c:9c:12:d6:f1:0d:7a:23:0b:
e8:07:36:d2:cd:df:cb:d0:25:27:95:a6:35:3d:99:
e0:1f:82:07:32:cc:ef:a4:8d:49:a0:15:ad:1f:5d:
37:6c:81:ef:fa:df:77:81:8c:7f:d3:3b:eb:2a:82:
87:43:e2:93:44:d2:7d:5a:f7:51:04:7c:29:69:1a:
85:9d:23:9c:68:0b:83:1c:18:05:0d:eb:8a:c4:98:
d1:a4:63:06:00:ad:8f:6f:5b:21:31:a5:7b:7d:cf:
a8:34:33:da:01:9d:ed:ff:44:0f:88:96:f5:c1:97:
c4:e0:7f:66:f5:52:ef:88:e3:4c:0a:dc:fc:a1:cc:
ff:1b:a0:e2:f3:09:2f:ad:6a:7a:fa:40:b7:e2:21:
86:e4:d5:42:e3:13:53:e7:31:f1:65:99:7e:c1:9b:
f0:cb:ac:f2:78:10:2b:bd:76:21:b9:36:a0:0f:c7:
5f:85:e3:25:0e:4f:22:71:b6:58:a5:69:93:df:cf:
55:a8:5b:d5:c6:4d:ab:63:16:19:c7:49:5b:c4:66:
fe:35:48:8d:94:ee:cd:85:19:d7:a4:31:11:4f:c5:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:26:6A:D0:A1:D7:32:1E:AA:3D:99:6E:64:60:38:9D:4E:0F:6E
X509v3 Authority Key Identifier:
keyid:21:81:C5:B3:CB:7E:EB:1E:49:58:21:55:A1:91:8E:C6:12:F9:5A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYHFs8t-6x5JWCFVoZGOxhL5WsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dcd15e-eb12-4631-b220-0226d45a7532/1/IYHFs8t-6x5JWCFVoZGOxhL5WsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:6d:2a:ca:ec:f8:b5:bf:46:53:5d:27:01:8b:bf:f3:a3:
d4:f3:a1:9b:5d:99:42:2f:da:35:f3:aa:55:55:ed:16:b2:26:
f4:95:39:06:c6:af:dc:bb:79:69:70:5b:7b:0d:cf:da:ed:68:
f6:e7:61:00:f0:f8:72:6f:aa:fc:89:68:ed:81:13:03:6c:13:
a1:e1:2c:06:ad:62:7b:4a:01:7d:85:4f:8e:45:f9:24:79:36:
bf:4a:16:c9:ca:15:2d:0b:85:ed:4f:44:c0:c9:7c:c3:42:c2:
8b:5b:5d:dd:cc:41:60:76:47:82:fd:1f:32:7f:18:22:d8:bf:
e2:61:87:ea:0e:e9:41:b3:eb:c1:5c:1a:29:10:f6:dd:79:b9:
ef:99:02:ed:d3:73:22:ad:5f:13:aa:b9:62:8f:59:eb:45:1e:
3f:b5:9d:5f:47:dc:02:31:09:ea:65:be:e3:02:00:0f:ff:84:
b4:10:e3:e9:cc:da:19:25:54:a0:f2:b9:2b:2a:1a:a1:4c:fd:
7c:b3:8d:6b:db:31:f0:0c:c7:31:b4:63:d8:95:ae:d2:68:20:
b6:91:18:07:6e:f2:12:71:2d:6c:b3:f7:d5:a6:ed:9b:12:ac:
29:2a:da:84:2c:3e:79:40:d1:9d:bf:a0:c1:e0:0d:2b:44:46:
d2:9c:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:25 2026 by rpki-client