Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: w752UBanW9dDgf8sHziam5TxkNCF9CeMB5ss0oNA/j8=
Subject key identifier: 6B:D1:4C:24:99:22:8C:8D:93:B7:33:78:45:04:01:8A:61:E1:99:54
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 019D2772A64E8994BDB2E7F89B2C0B978FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 00:01:58 +0000
Manifest this update: Thu 26 Mar 2026 00:01:58 +0000
Manifest next update: Fri 27 Mar 2026 00:01:58 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: JLtq0NYEQ7uk021lzYx2o9UpfmFtLSLBr7v4CbMDogs=)
2: sgqR4WMwXjyOfh_rWVUf5MMjM8s.roa (hash: spwljFTg//vIfCs+4AV5oovDbFK1ooetV57V5ssw4qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a6:4e:89:94:bd:b2:e7:f8:9b:2c:0b:97:8f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Mar 26 00:01:58 2026 GMT
Not After : Mar 27 00:01:58 2026 GMT
Subject: CN=6bd14c2499228c8d93b733784504018a61e19954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:2f:1b:94:15:40:f7:02:22:e5:8d:c3:a3:
8e:d8:4d:48:49:d0:db:c3:58:d7:b1:47:b2:e3:f7:
bd:42:fb:ec:5b:ca:57:9b:09:a5:d1:4d:4f:cb:d6:
7e:d4:95:f3:b4:4a:ab:9e:2e:e8:68:b9:5a:31:a6:
d1:57:d9:ef:3d:f3:a7:d6:59:55:5c:38:68:d4:8d:
77:fc:b2:6f:e0:cb:93:cd:ee:58:0b:d3:dc:7d:64:
f7:72:a9:f7:e4:c1:92:be:67:cb:0f:a9:aa:bc:54:
e0:0c:26:a7:c3:ee:8f:c8:0f:dd:26:30:dc:7d:27:
80:e1:6d:ff:ca:01:c1:df:04:a2:c8:88:99:73:83:
60:7a:08:4c:bf:88:a6:fa:7e:cd:6f:ed:dd:95:56:
a0:bc:0b:bf:06:83:01:72:4c:18:b0:49:1d:a7:f8:
b1:4d:5c:01:74:82:d1:75:4d:c3:36:5c:af:a8:0f:
38:7c:bb:a3:1c:17:ce:f2:73:c3:17:76:1f:9d:e3:
68:e2:b1:5f:f0:ca:2b:e8:d8:de:10:5a:8f:30:29:
57:87:69:8c:6d:fb:2e:b5:b3:56:75:31:53:e3:3f:
ea:d1:94:86:54:d5:50:a8:09:c7:77:f2:26:91:b8:
e1:4e:61:2b:17:4d:59:a2:58:fd:88:a5:e6:d3:b3:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:4C:24:99:22:8C:8D:93:B7:33:78:45:04:01:8A:61:E1:99:54
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:80:a5:b5:f3:28:00:1f:3f:37:0d:cc:4a:93:06:f9:98:7b:
00:a6:d4:f4:49:97:7b:52:45:18:fe:ea:0d:fe:45:7d:2a:6b:
0f:d3:6c:3c:ef:d5:ee:cf:60:6c:92:2c:7f:c8:81:7d:6d:1f:
d9:0e:09:ce:b0:69:c4:cc:89:5b:f2:b4:d9:3e:e4:da:c5:0f:
d1:14:52:44:97:7d:df:89:93:24:e2:01:ac:ea:51:0c:68:bd:
83:41:33:c6:a0:61:32:42:aa:d0:65:2c:35:c6:90:df:2e:6c:
d3:5f:f7:c1:b9:ea:49:b8:0c:b4:ec:c1:8b:2c:14:09:11:61:
23:cd:f5:e2:de:1e:4f:8a:e2:72:2e:68:51:05:52:30:a7:58:
f3:0c:10:da:a0:6b:b8:d9:39:42:29:02:2e:72:f7:b9:65:77:
74:7b:b0:34:2f:a9:5f:72:7d:b8:56:ad:e5:76:a5:88:53:9b:
fb:00:8e:d3:76:67:7a:6c:d4:10:33:c8:82:4b:3e:4b:43:5f:
d7:ec:33:bd:4b:ad:8b:8f:bc:26:39:98:2a:b5:a5:bf:4a:d6:
52:32:7b:f5:2f:c4:97:22:5f:82:e0:7e:b4:c3:cb:a1:26:7b:
6e:8d:9e:a7:ea:69:30:26:83:a4:fa:15:06:1c:fc:05:d6:36:
05:d0:2d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:02 2026 by rpki-client