Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
File: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft (raw, json)
Hash identifier: LJbQ+8eyiO/giHzYJfc5eQT534xakjliS/sw4PS8Zxc=
Subject key identifier: 7C:31:A4:D7:47:B5:1E:9B:0A:22:60:41:26:0E:22:BB:BD:E8:29:4A
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial: 019CAB33DC693FDC49E11E0390D6155605F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
Manifest number: 12D1
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: YKDNzzYNdE1sKwNoJ39aAgh_OZU.roa (hash: 6jhSpIspHRwUAWUI+iMNv3fuIaKW3vG2nI/dTcMCJDw=)
2: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl (hash: THxHQtGW9p4EYOmJCDEemfYJCI4qruVXGdRH2I0SNiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:dc:69:3f:dc:49:e1:1e:03:90:d6:15:56:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=7c31a4d747b51e9b0a226041260e22bbbde8294a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:e7:3a:c8:55:b9:f5:38:7d:3e:e1:30:61:
ea:53:f6:09:18:ab:a5:cc:f0:e2:d2:1f:6d:c8:79:
6b:d5:40:0c:d5:34:f1:7d:0e:cb:59:a9:06:88:c7:
ac:62:89:e4:d4:1b:e2:a7:1e:da:05:4e:62:7c:45:
86:bb:bf:54:12:53:7d:bf:b7:21:39:92:c2:6a:6d:
d9:00:7e:a1:43:dd:67:48:fd:2a:c3:e1:56:47:78:
6b:5c:dc:1f:a6:f0:ad:47:fd:fe:73:bb:08:ef:38:
a4:5c:e1:d2:f1:87:f5:f3:70:43:02:c8:02:09:07:
ce:ce:22:6b:6b:60:e1:15:d0:b1:56:92:ce:b6:04:
d2:f0:5c:c3:6a:a9:d0:17:ce:ba:44:25:a0:2c:81:
48:ad:3f:da:95:4b:c3:8e:1f:06:c7:bf:2b:51:be:
f9:80:40:77:15:47:87:cc:d8:94:7e:37:e4:dd:73:
1e:fd:4e:97:a3:7f:1b:5c:f0:e5:9a:c2:72:68:aa:
01:80:21:7a:d8:26:44:09:f3:c8:39:4b:4c:d0:a1:
92:b1:14:5f:e9:4f:12:ed:aa:92:bd:af:c2:a4:98:
6f:27:2e:8f:4e:14:94:fa:77:69:da:bc:4e:d9:a5:
8c:10:6d:be:cc:d0:52:d7:e0:88:96:d3:6a:c4:27:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:A4:D7:47:B5:1E:9B:0A:22:60:41:26:0E:22:BB:BD:E8:29:4A
X509v3 Authority Key Identifier:
keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:6b:af:0f:81:30:f2:70:f4:7f:0d:53:c6:76:1d:bb:8d:
82:d3:38:eb:a4:4b:71:e3:6d:b1:a1:02:72:43:8b:fc:06:65:
4a:1c:57:68:5c:ae:68:69:35:a0:04:6c:45:59:58:8c:fa:5e:
06:c8:17:fd:8d:3a:4f:42:3d:49:80:ee:52:0f:ce:fa:56:ef:
de:23:cc:58:12:29:c5:67:55:5b:56:27:c6:d4:3c:f6:68:72:
7f:c0:ea:dc:55:31:b0:2c:b0:7e:bb:99:7e:f3:20:d3:c0:8b:
10:b5:e7:5b:b9:7c:7a:1e:4f:0f:77:62:3b:e4:62:52:91:4c:
3b:7b:c0:d8:4b:17:20:65:7b:2d:9b:83:57:09:2f:49:ee:7a:
0d:81:2b:88:e9:83:8f:2d:9e:d8:b0:c5:e6:a7:01:65:c8:35:
75:d9:c9:ba:95:49:da:48:5a:dd:af:47:db:b4:70:f0:3e:14:
09:21:79:ff:8a:12:70:82:90:f9:42:be:7e:c5:7d:f3:1c:ec:
1b:fb:5f:3f:8f:b5:8c:22:ad:24:36:b8:45:23:2e:3a:cb:cc:
30:05:b3:00:df:0c:b2:bd:e5:08:8f:8e:a8:76:6d:52:84:2a:
3b:91:fd:5b:5e:26:fd:9a:fb:2f:c9:f5:9f:97:0b:51:8c:b4:
cc:36:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:17 2026 by rpki-client