Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: fn37hACAqDweDXo3B8tUUTIs16IXqgOgp/OczWywTdI=
Subject key identifier: 76:8C:0A:1D:AC:55:57:F6:4B:49:EE:72:D1:87:2E:69:EF:5E:8B:80
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019D25BA03A64E1E6F39E9CC909A3EDFB272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1310
Signing time: Wed 25 Mar 2026 16:00:40 +0000
Manifest this update: Wed 25 Mar 2026 16:00:40 +0000
Manifest next update: Thu 26 Mar 2026 16:00:40 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: u4iEhpthNjv/wKZGxMOdpEnH63qKnSoMMV+Kuc5i6Q4=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:03:a6:4e:1e:6f:39:e9:cc:90:9a:3e:df:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Mar 25 16:00:40 2026 GMT
Not After : Mar 26 16:00:40 2026 GMT
Subject: CN=768c0a1dac5557f64b49ee72d1872e69ef5e8b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:89:47:55:de:29:20:3a:71:8e:31:af:53:
35:a1:9e:9e:30:3f:c7:b6:fe:7c:4d:60:07:05:af:
7c:32:a7:c0:a6:00:08:ce:82:f3:15:99:43:f2:a8:
40:2b:74:b7:81:c4:6e:21:44:d8:e9:37:f6:49:a5:
77:8f:04:e1:b9:d5:ec:06:65:3f:4f:af:b1:56:03:
9b:12:82:3d:9e:82:86:3b:d2:f9:5e:1c:44:05:33:
84:84:ac:4d:27:8a:54:0b:82:a1:31:31:02:04:77:
d2:8e:40:15:68:53:fe:f0:3a:c4:84:b6:5a:84:a4:
89:ea:6b:28:86:2e:98:91:92:e0:95:ed:08:66:36:
d4:5a:76:b2:b2:9d:eb:45:78:b6:8a:e6:a8:4c:0b:
ba:3c:94:b1:e4:3b:4e:60:e0:23:89:52:42:ed:6e:
97:80:ee:67:32:91:6f:68:bc:68:5c:7c:9c:f6:15:
c0:04:86:91:da:13:97:12:c2:a3:0d:38:b7:57:48:
09:56:ce:f2:a9:e7:23:d6:90:ee:2c:17:0f:98:1c:
40:77:49:89:d7:e1:8f:bb:15:93:71:ef:de:8d:80:
bd:e4:4c:b4:6e:1c:f0:ea:ea:bb:71:6e:7f:40:55:
fc:7c:a2:05:5b:aa:da:1c:78:27:0a:11:4e:bf:d7:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:0A:1D:AC:55:57:F6:4B:49:EE:72:D1:87:2E:69:EF:5E:8B:80
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:03:36:44:cf:b3:16:b6:53:9f:1c:2c:46:75:a9:9b:37:86:
4e:77:fe:32:1e:8d:22:c7:70:65:1c:1f:a1:56:d2:07:9b:92:
9c:cf:cc:b5:89:d0:d8:9a:d2:6e:db:03:49:a1:36:d3:28:65:
83:d3:4d:ec:96:91:79:09:f5:23:bd:2c:d0:d3:57:54:fa:ce:
b3:a9:f3:10:6a:8b:0f:39:e6:c9:25:e0:5f:1e:12:57:ad:4c:
7f:eb:ca:63:86:73:b6:d1:26:39:21:b5:6d:e6:43:3a:a6:2e:
96:43:8e:8b:25:0e:f3:a4:c9:cc:e3:86:03:44:bc:6b:d8:9b:
26:9d:9c:3e:ab:40:d6:6c:82:31:a0:ab:b0:23:a4:3f:12:ed:
e6:56:a3:57:a2:d4:2b:d2:61:e6:d3:50:85:4b:f3:87:7f:ba:
93:bf:cf:ba:46:a8:81:fb:f1:6a:5a:c0:51:90:32:b3:be:5c:
af:e6:28:42:14:31:f1:44:db:36:43:a0:8e:12:5e:d5:fe:c3:
d8:74:ff:0c:87:7d:06:4f:6b:1a:5a:4f:3d:79:82:6b:a5:ab:
da:ac:80:9b:73:3b:53:76:62:28:5c:70:77:ef:8d:95:8f:2d:
4d:18:0a:1c:70:86:7c:60:73:fa:f2:d9:41:50:d1:9d:f6:fb:
39:44:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:58 2026 by rpki-client