Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: f/SfkjlcvWDQFt6b4DFV6C//LCx601KvmT3YapugOL4=
Subject key identifier: 5D:2B:95:C0:0B:C7:97:3F:3C:3D:DB:00:BA:3B:6A:D6:C4:19:0B:C5
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019CAAC70C615FFA32956BC9D957B67ED021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:37 +0000
Manifest this update: Sun 01 Mar 2026 19:01:37 +0000
Manifest next update: Mon 02 Mar 2026 19:01:37 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: 91vReL5B8e+wH3fQhic4dovB6kcs1a8BVpp0bPRwpag=)
2: KTUGLKw4lT-j5fxDHCDXoM2-FbI.roa (hash: 9VOAz2Y+xG383GmXb/Qw7x9sWxBBSQzGbBFfCAhlucM=)
3: mH0FJ23Xhvhl7yPzg_J0QLsXN6c.roa (hash: bc3Tff2F8YDhVYuMIKbuPGvXcTjpv3hF+6MXk1AVTa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0c:61:5f:fa:32:95:6b:c9:d9:57:b6:7e:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Mar 1 19:01:37 2026 GMT
Not After : Mar 2 19:01:37 2026 GMT
Subject: CN=5d2b95c00bc7973f3c3ddb00ba3b6ad6c4190bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:d0:fe:fb:cf:4f:0c:67:6c:69:bc:ba:66:
0a:70:52:38:01:c6:87:ce:19:82:0f:65:e8:70:e4:
04:2c:9e:51:f1:7b:0d:3e:62:48:f4:7f:64:3c:df:
3d:a1:9a:02:0a:2d:3c:2c:66:2a:e0:c1:1b:cc:07:
92:30:e7:ac:cb:8e:79:de:0a:4a:fb:ae:de:56:3c:
53:0a:b6:d2:47:93:8c:49:4c:da:20:65:2f:76:83:
2d:12:4b:9b:24:78:e1:b7:a9:5b:8b:6d:90:51:93:
15:d8:46:52:e2:8c:09:43:3b:72:a4:72:83:05:45:
bc:76:77:1b:85:f0:d4:ee:e6:8c:38:29:85:c9:65:
f3:cd:f2:29:f7:bb:a8:71:85:a1:6c:de:da:f5:61:
3f:e0:f2:34:f9:64:18:b8:cc:66:c6:f1:03:91:d4:
54:14:11:d3:90:e5:f8:46:5f:9b:00:75:4f:12:20:
83:e1:66:6d:0f:c8:a2:62:d3:da:d1:df:08:3c:aa:
73:7f:10:45:cf:7f:c9:04:03:93:d7:4e:d4:a1:f4:
b3:e9:1f:6b:6d:b8:94:e1:23:b0:65:b7:95:f7:00:
e9:23:17:ea:2b:13:e2:06:80:ee:50:a3:2e:e1:2b:
d5:aa:19:5e:dc:90:7c:4a:20:f1:04:e6:89:f2:65:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:95:C0:0B:C7:97:3F:3C:3D:DB:00:BA:3B:6A:D6:C4:19:0B:C5
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a1:92:48:cf:0f:e9:a4:25:96:91:7f:e9:a5:13:96:81:9e:
ff:f3:72:45:12:32:eb:89:de:41:fd:20:9a:19:54:7d:85:3a:
74:d5:06:f7:b9:eb:98:fb:14:15:43:c0:36:4e:b8:fc:42:ba:
77:51:42:0b:7d:c8:24:4b:0f:80:9c:be:f4:0d:8e:f5:44:c1:
c8:43:45:fb:77:12:6e:69:ad:31:67:e0:c9:15:19:d6:1b:cf:
50:0d:cd:3f:a9:d2:d8:da:30:0e:54:f0:e9:dc:1c:03:64:f6:
05:cd:bf:b4:4e:66:02:21:f9:d4:3c:70:6b:c3:29:3c:2f:d0:
f4:d0:d1:8c:fc:d6:d0:25:fb:77:d0:ee:66:01:67:63:50:25:
f9:06:53:8a:02:e4:35:80:48:38:bb:ad:4e:6a:08:4b:96:8b:
20:25:99:cd:d9:51:b9:c4:f7:1d:01:f9:35:06:b8:ab:1b:79:
fc:bb:23:12:88:62:4f:4a:19:b2:87:05:40:bd:f7:5c:57:7b:
fa:68:2b:45:92:93:97:e5:6d:f3:db:b8:c7:60:7e:cd:dc:fb:
6e:7b:19:42:f2:b7:85:57:27:5e:b4:84:1d:80:11:77:1f:c7:
31:da:b4:a4:04:ee:f6:93:af:58:6b:e5:ce:ef:13:c7:70:ab:
94:2e:14:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwxhX/oylWvJ2Ve2ftAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzZiMmI4YWZhNjAzNmQyYzhlODMxNzczNmZhYWE3MmQ4
MGM0ZjIwHhcNMjYwMzAxMTkwMTM3WhcNMjYwMzAyMTkwMTM3WjAzMTEwLwYDVQQD
Eyg1ZDJiOTVjMDBiYzc5NzNmM2MzZGRiMDBiYTNiNmFkNmM0MTkwYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCTQ/vvPTwxnbGm8umYKcFI4AcaH
zhmCD2XocOQELJ5R8XsNPmJI9H9kPN89oZoCCi08LGYq4MEbzAeSMOesy4553gpK
+67eVjxTCrbSR5OMSUzaIGUvdoMtEkubJHjht6lbi22QUZMV2EZS4owJQztypHKD
BUW8dncbhfDU7uaMOCmFyWXzzfIp97uocYWhbN7a9WE/4PI0+WQYuMxmxvEDkdRU
FBHTkOX4Rl+bAHVPEiCD4WZtD8iiYtPa0d8IPKpzfxBFz3/JBAOT107UofSz6R9r
bbiU4SOwZbeV9wDpIxfqKxPiBoDuUKMu4SvVqhle3JB8SiDxBOaJ8mXiiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0rlcALx5c/PD3bALo7atbEGQvFMB8GA1UdIwQY
MBaAFCI2srivpgNtLI6DF3NvqqctgMTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMt
OGI1ZWY0MWQ4YzI1LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82Zjg5NWItNzk3Ny00NDVkLWI3MmMtOGI1ZWY0MWQ4YzI1
LzEvSWpheXVLLW1BMjBzam9NWGMyLXFweTJBeFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6GSSM8P
6aQllpF/6aUTloGe//NyRRIy64neQf0gmhlUfYU6dNUG97nrmPsUFUPANk64/EK6
d1FCC33IJEsPgJy+9A2O9UTByENF+3cSbmmtMWfgyRUZ1hvPUA3NP6nS2NowDlTw
6dwcA2T2Bc2/tE5mAiH51Dxwa8MpPC/Q9NDRjPzW0CX7d9DuZgFnY1Al+QZTigLk
NYBIOLutTmoIS5aLICWZzdlRucT3HQH5NQa4qxt5/LsjEohiT0oZsocFQL33XFd7
+mgrRZKTl+Vt89u4x2B+zdz7bnsZQvK3hVcnXrSEHYARdx/HMdq0pATu9pOvWGvl
zu8Tx3CrlC4Utw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:22 2026 by rpki-client