Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: B677vTgtT7PvRA8zrnxUJxs/V+M8iPt3vrnADXug0X4=
Subject key identifier: D8:31:97:E2:24:DD:DF:68:6B:AC:34:5C:81:80:CD:35:87:1E:09:75
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019D27A8F30A283E4A38E1DDA15C5535CFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 16A5
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: zRFLovz1GiMje9J1JvQakajxI5MspvBJtHaZ8AbbBUg=)
2: Vhdyvlmm2QhYL_DxOw7zRtqN9Zg.roa (hash: Fgu5qryHdVy6pShgsQWdQm6ItENpj8eEaKZ2+YL90F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f3:0a:28:3e:4a:38:e1:dd:a1:5c:55:35:cf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=d83197e224dddf686bac345c8180cd35871e0975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:ac:1c:c8:c6:28:77:64:02:2e:ae:27:16:
39:64:df:5a:1c:09:df:04:b5:ab:72:c0:95:ad:d1:
04:05:a2:f9:cd:81:b1:7e:fe:12:fb:72:be:92:b0:
c7:ba:46:0a:3e:bd:da:df:57:6b:62:0e:19:ca:20:
4c:84:bc:d4:31:c2:8a:a2:53:21:57:19:c7:00:e3:
d7:e0:8e:f9:33:7c:fe:0f:23:19:05:25:29:e3:04:
6c:09:00:1f:d5:c4:5a:74:40:d0:99:58:f3:ee:ab:
0c:92:f2:e1:94:40:f3:9c:34:2a:31:7a:8a:82:71:
da:49:88:b8:5e:3b:f6:6f:d6:f6:9c:e7:5e:e6:c4:
f8:6b:e6:c4:89:b1:4e:f6:2e:69:0c:b9:c9:85:7d:
0b:8a:f8:96:64:33:50:85:96:45:3a:5f:69:e6:60:
dd:e7:fa:b9:9c:10:65:4f:40:0e:24:6a:49:53:40:
1b:4c:58:fd:f1:ed:2a:08:e5:0a:c0:e9:c0:cd:7e:
06:38:9e:9a:55:9b:5b:23:bc:b2:e2:69:56:61:07:
0e:d5:5a:ef:69:36:38:17:27:03:ad:c0:51:80:6c:
1b:04:2c:29:09:bd:95:2c:de:9c:b0:f7:70:9f:66:
27:a6:2c:71:fd:82:bf:8c:62:44:ee:a3:7f:a6:c6:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:97:E2:24:DD:DF:68:6B:AC:34:5C:81:80:CD:35:87:1E:09:75
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ff:b0:d6:00:24:0c:37:b5:bc:22:b0:83:f1:a9:08:26:d1:
d8:b8:01:34:dd:e8:9a:80:1a:c0:00:0d:61:5f:72:71:b9:23:
95:a9:7c:75:fa:42:ee:dc:23:5d:a1:15:05:a5:74:ea:ba:64:
0a:59:f0:44:69:63:30:8f:36:dc:74:37:f1:88:55:4f:40:18:
ea:09:a8:1e:7c:27:bd:e1:f2:ae:59:66:2c:12:ee:77:1f:04:
20:e8:30:ca:41:46:97:9a:d5:1b:36:4f:53:be:20:21:73:cf:
c3:d7:47:d9:07:7d:e8:45:0f:bd:b9:3e:c3:cc:0e:d3:60:84:
75:e9:7d:cf:c7:23:8f:9e:bd:7d:36:f2:ee:5e:bf:53:b0:1a:
3e:15:61:b2:15:65:7a:82:3f:b0:0b:e5:db:a6:ea:5a:2d:d5:
10:47:41:80:e4:cb:89:42:68:f7:21:3d:95:e7:39:38:da:f2:
47:63:7b:41:75:2e:02:26:2a:3b:f8:a4:64:78:49:b4:9a:0b:
8d:3a:e1:96:d1:92:df:08:e7:3c:ce:b1:1e:25:47:77:34:b8:
88:74:6e:f4:81:ae:ba:75:3f:a2:f9:5c:15:4f:c8:db:84:cd:
90:7b:27:3b:42:a7:a4:9b:e1:24:e6:73:fd:3f:d8:3a:e8:e4:
bb:38:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:49:29 2026 by rpki-client