Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
File: iay4iT6UGAdH7sGXXtVgTE3b4MU.mft (raw, json)
Hash identifier: XGfQ/r/OzTZTgCKDrOlMmY/4qu5sDsu06UvI/uux83M=
Subject key identifier: EF:4F:1A:92:4D:1E:27:DE:0B:DA:46:5D:63:39:49:35:B3:30:62:1F
Authority key identifier: 89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
Certificate issuer: /CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Certificate serial: 019CABD9472FBDEFB1078419E08A13DB0BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 7oSS-r2bMLw-tHLZnTLEn6ZKtA0.roa (hash: sEaYDQdsiX4RB8VnPuUfSRtKLpLITXk4UddGS53dMkM=)
2: iay4iT6UGAdH7sGXXtVgTE3b4MU.crl (hash: U6M0kONNnbzQlswtaWVYhAeCioAg+WA2/ztreyesIro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:47:2f:bd:ef:b1:07:84:19:e0:8a:13:db:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89acb8893e94180747eec1975ed5604c4ddbe0c5
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=ef4f1a924d1e27de0bda465d63394935b330621f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:6e:a7:e2:29:e2:89:50:24:b3:f2:b0:11:
7c:1b:f1:b3:21:4f:e0:d5:ee:76:f7:62:b5:6b:c1:
7b:71:c8:6a:35:32:68:90:bc:bc:8f:82:4a:a4:af:
26:35:b9:0a:0e:c6:e6:07:4e:da:e0:17:9b:ec:ec:
f1:6e:45:c4:d7:b2:cf:3c:2f:6a:0b:ee:3d:88:44:
27:9e:39:d7:44:4e:5f:a3:2e:3c:cf:95:5c:a3:92:
5e:53:0f:fb:83:9c:9b:87:22:2f:71:f5:03:0a:cf:
54:b1:56:d0:0a:6e:c1:de:11:bd:f5:6d:d6:83:84:
e5:16:d7:72:58:f2:a4:b9:05:e5:68:02:bf:46:f9:
26:cf:e4:87:cc:ec:b9:8e:7e:11:ef:7d:9f:e2:b0:
0c:13:50:48:f7:ad:66:a1:0b:82:15:39:e2:da:e6:
c3:1b:84:89:6d:62:6a:6d:f1:12:90:13:3c:f9:6a:
05:29:6a:f6:ff:ba:ed:3a:84:2a:bd:d9:8e:35:52:
31:30:22:2e:9b:05:74:5e:f8:04:97:71:7c:25:98:
d1:9d:4d:06:d0:2e:97:ad:e4:29:7e:df:37:c6:72:
bc:ae:84:da:be:64:9b:4d:22:07:1a:2c:0c:ca:8e:
0f:1e:79:ea:37:c4:f1:47:c2:0e:f3:80:9b:0f:bc:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:1A:92:4D:1E:27:DE:0B:DA:46:5D:63:39:49:35:B3:30:62:1F
X509v3 Authority Key Identifier:
keyid:89:AC:B8:89:3E:94:18:07:47:EE:C1:97:5E:D5:60:4C:4D:DB:E0:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iay4iT6UGAdH7sGXXtVgTE3b4MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0cd4be-247f-4de2-938c-f0cd8bb552e0/1/iay4iT6UGAdH7sGXXtVgTE3b4MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:0b:1a:33:4c:77:4d:27:cb:42:33:04:b6:d8:99:15:01:39:
6f:81:51:b1:f2:a6:6a:73:0c:d6:2b:48:e6:ea:3f:dc:fd:d2:
1b:4b:7d:91:a5:33:9d:83:71:9f:64:93:c5:da:bc:26:80:59:
10:b7:84:28:00:25:15:fa:f0:8b:a1:9f:b1:94:f7:c7:32:1d:
03:ac:a3:84:d5:a0:f4:20:a9:96:dc:23:0c:62:b1:59:fa:b6:
49:d4:e6:43:46:03:50:9f:13:68:31:fb:15:95:4e:39:bd:7c:
1c:78:2a:03:a6:5c:27:cf:87:5f:51:54:f2:80:5e:ce:c6:a8:
39:30:3c:4c:aa:c9:3c:3b:f6:b2:07:90:83:0b:e3:47:f5:ab:
3f:2b:0d:01:7f:ad:90:1f:41:48:35:f8:a3:bf:7d:18:71:a8:
84:35:84:4b:fc:86:ed:67:62:24:19:92:11:0c:cf:ed:50:6c:
0b:30:b5:96:ee:ff:b4:69:95:50:d0:02:80:7c:85:4e:e6:3d:
08:c6:df:96:db:57:a1:74:0b:3a:52:8a:f9:2c:e3:20:b2:45:
4e:4a:d5:fa:ae:dc:1d:64:3c:38:ce:f4:d7:df:9f:c9:e5:02:
0e:5c:7d:53:48:f1:26:9a:d0:14:75:c4:6a:1d:32:26:fd:d7:
e8:10:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:37 2026 by rpki-client