Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: m2iiEP3YuSRtKS685TsHP6j7RNjBRHxuQQqq3I0G4TY=
Subject key identifier: 4D:A7:BC:78:CC:36:4A:D1:3E:A4:5B:E4:E5:A3:D2:63:CA:87:61:5A
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019CABD9D4481D5438854EE51A01BD40254A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 1536
Signing time: Mon 02 Mar 2026 00:01:45 +0000
Manifest this update: Mon 02 Mar 2026 00:01:45 +0000
Manifest next update: Tue 03 Mar 2026 00:01:45 +0000
Files and hashes: 1: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: 70dpci9acvMWn7aQNsa4ABd6G0Rptlh03zisTyUFsiE=)
2: h1EMUyyZAAzRRRYxM5oEAQyKbqc.roa (hash: ab51Arxngi98phPFWNZggcRVUoPdKMJSwBp4EQAAf+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d4:48:1d:54:38:85:4e:e5:1a:01:bd:40:25:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Mar 2 00:01:45 2026 GMT
Not After : Mar 3 00:01:45 2026 GMT
Subject: CN=4da7bc78cc364ad13ea45be4e5a3d263ca87615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7b:4d:3d:ff:1b:13:7a:ea:5e:55:65:eb:47:
18:c4:84:c6:3e:bd:d5:ef:17:ee:b0:07:cd:2f:91:
a3:cf:0a:a0:1a:9d:c4:0c:e2:82:dd:0b:c3:cc:be:
03:76:27:e3:f5:fe:90:a6:8e:87:93:d9:a6:00:95:
13:ad:27:6e:1c:5b:a1:c3:d5:62:76:86:35:60:3f:
a1:64:75:ff:45:b9:2f:33:27:5f:cc:66:d1:47:f4:
c3:bf:67:04:d0:96:63:bb:04:2c:52:ee:ca:d3:84:
11:bd:93:00:d6:28:1a:54:43:6a:52:db:86:b5:85:
9f:91:58:8d:57:8c:09:f8:37:72:4e:4e:9d:89:ab:
0f:ad:a1:a6:a9:57:57:3a:ca:ea:01:32:30:06:14:
72:f7:f2:c1:a2:17:17:7e:e4:85:0c:8b:c0:02:c1:
34:58:c4:3b:03:e5:e7:39:18:6e:c2:c1:f9:db:61:
3d:cc:76:cc:ab:e6:81:79:80:6b:ce:6a:33:c3:15:
ba:9e:5e:ac:2b:bf:11:0c:2d:fa:64:09:3b:e8:78:
d4:51:7d:45:09:79:e5:33:70:f3:d6:14:ae:fd:c3:
f4:06:5a:6f:1c:6e:34:a3:34:9d:6d:a2:09:d5:4e:
5a:98:78:45:6d:9c:0d:ff:6c:8b:8b:b5:91:9a:af:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:BC:78:CC:36:4A:D1:3E:A4:5B:E4:E5:A3:D2:63:CA:87:61:5A
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b9:6a:ce:23:c7:a7:a8:c0:41:68:b1:5c:c4:f6:ce:68:54:
8c:33:df:6e:52:a1:20:f3:f3:1f:3d:3b:16:71:c2:fb:38:03:
47:9b:a6:07:49:41:75:9e:99:32:a1:0f:f5:ae:37:8b:85:d7:
f8:2c:67:38:05:23:6f:70:f4:e1:65:55:b3:c1:55:85:76:b9:
d1:46:1c:65:88:90:9f:15:e6:c2:da:53:84:dc:3b:e3:b1:49:
92:a4:1b:65:f6:28:05:78:50:c8:dc:a8:69:44:38:57:86:b9:
9e:c0:ab:8a:d3:fc:8e:f5:ee:00:12:ef:34:97:e7:8d:b5:97:
fa:a5:44:f1:28:cb:62:78:18:38:f5:94:37:ba:f2:71:f9:90:
5a:8c:26:08:90:9c:bb:a4:cc:e6:2f:37:82:3c:ed:96:bd:04:
04:08:73:ee:0c:a5:97:1b:97:dd:88:58:c2:52:3a:a4:2e:08:
80:e6:fa:91:3a:e7:da:49:17:0f:a6:16:26:c0:4e:08:f4:67:
34:86:d2:26:94:94:c4:2c:3f:ee:b4:b1:27:0e:8c:d8:eb:8c:
6b:42:62:59:f6:97:9e:07:aa:63:b1:fc:90:dc:9f:d0:b1:08:
47:8f:e5:08:53:37:d4:7b:7f:af:28:08:db:dc:81:c9:67:d9:
87:69:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:24 2026 by rpki-client