Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier: AypT8Dz54U7x59EKw5bhGOURUdRBqdZ7sk6S7lly0fk=
Subject key identifier: D5:6F:89:84:E8:07:F7:63:D5:5A:6B:79:31:1A:96:DA:AD:8D:B9:7A
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial: 019D25612EF15F4096E7E6D2BC697CA459AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number: 0FA5
Signing time: Wed 25 Mar 2026 14:23:39 +0000
Manifest this update: Wed 25 Mar 2026 14:23:39 +0000
Manifest next update: Thu 26 Mar 2026 14:23:39 +0000
Files and hashes: 1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: aQy0BJNlGZR5mZedJeK5MkEq8lKasnveq40OEuCX1M4=)
2: S_236S6LrjgT0CjMBoHTME1HmNg.asa (hash: 8731wnWHxsVljJafZl3JaKEFPo0YrlA4VvFytptnVGw=)
3: b-LGQlL8LzZm4UGWUiPrtbF_a1A.roa (hash: FK35y/gUkNUiIhgZhYId2WxExylNkVhtjFm+uxSpPqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:61:2e:f1:5f:40:96:e7:e6:d2:bc:69:7c:a4:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
Validity
Not Before: Mar 25 14:23:39 2026 GMT
Not After : Mar 26 14:23:39 2026 GMT
Subject: CN=d56f8984e807f763d55a6b79311a96daad8db97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:4a:84:6e:84:46:31:fc:36:d7:0c:f1:52:
30:91:e7:a6:bc:27:01:26:07:e1:7f:a8:83:70:16:
4c:89:25:e4:e1:c7:db:03:5a:da:4d:9c:b0:d9:1d:
ca:f4:eb:d9:70:23:6b:b3:d4:a4:b4:4f:aa:ad:20:
2c:e4:96:ed:8f:b0:3e:0f:ec:b4:f0:6a:33:7a:05:
12:1a:b4:0a:1b:4a:93:4f:dc:67:dd:6e:33:85:11:
22:9b:a4:2a:a3:c1:74:d5:20:5c:6e:35:c8:4e:a6:
da:ed:9d:fc:2d:e7:61:15:aa:32:26:85:df:0a:66:
37:74:22:fe:9b:12:b1:ca:df:91:85:b1:7b:5a:a2:
a5:d2:33:dc:17:32:d1:fb:83:d6:4f:7d:d7:60:0e:
11:a8:48:10:c1:00:d9:02:02:1f:c2:c8:71:5c:b5:
11:99:0d:2b:bb:06:23:97:ba:5a:b7:c5:17:88:fa:
20:39:60:46:3c:5e:e5:07:3a:3e:45:4b:34:1b:cb:
47:9b:b5:c6:84:f7:dc:75:e9:a9:39:1d:f2:c4:94:
88:d1:d7:47:ae:b5:89:8d:7e:bd:a1:3b:3e:a2:a6:
b4:5d:df:6a:ab:fb:f0:27:e5:27:4e:bc:50:f3:74:
21:c4:3b:4a:64:a7:8b:f6:05:b1:0f:95:ad:31:24:
b3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6F:89:84:E8:07:F7:63:D5:5A:6B:79:31:1A:96:DA:AD:8D:B9:7A
X509v3 Authority Key Identifier:
keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6e:f7:0f:36:bd:07:55:d4:5f:09:8a:cd:ae:2d:fc:56:ba:
a8:52:f6:38:54:ca:75:8f:81:7c:52:11:19:06:0e:ba:92:4f:
ab:11:36:d5:ee:61:6e:b9:83:3c:78:e2:06:8b:b8:51:b7:a5:
f7:72:e2:45:24:99:6f:16:9a:b2:d5:d8:6a:be:86:ae:63:f7:
33:91:2d:46:2c:53:a7:b5:3a:fc:e0:e0:60:8e:07:f2:e8:4a:
67:fe:24:0a:d6:99:b3:0e:78:0e:7f:a1:47:fc:5c:d7:1e:a5:
e0:d5:76:1d:31:00:47:0c:0d:f5:20:fb:0c:e7:f3:d6:d6:80:
b4:90:3d:f0:bf:02:e5:df:cb:fb:1c:3a:25:1b:85:54:d8:94:
e1:d9:52:2e:12:93:b7:4a:75:de:ba:96:f9:1e:4e:c1:94:aa:
70:8a:51:05:cf:08:ff:31:1e:ea:20:d4:9f:2c:78:9c:ed:d3:
2e:4c:23:41:ec:80:22:8e:8b:86:f5:98:43:39:fd:ad:0b:a8:
c5:5d:b2:a6:c3:94:07:38:d0:1f:f2:07:a7:a7:79:53:7c:9d:
7a:b4:c9:db:25:32:f3:14:91:69:c7:34:24:2a:71:5b:49:34:
8f:f7:ff:ed:b9:2f:dd:4e:ca:3c:c2:6c:61:46:69:2a:a8:5c:
7c:2f:64:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:39:23 2026 by rpki-client