Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: 7w/oD74U8ON1lK0MqfSHAcL9EVvXrQbwi9PkoMSh2xQ=
Subject key identifier: 3C:72:B3:43:92:F5:D9:43:07:16:80:A4:80:0F:83:5C:99:F7:CC:24
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019CACEBAE5EAB54817F57E4C0AE45D8E1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 156C
Signing time: Mon 02 Mar 2026 05:00:52 +0000
Manifest this update: Mon 02 Mar 2026 05:00:52 +0000
Manifest next update: Tue 03 Mar 2026 05:00:52 +0000
Files and hashes: 1: 4nJD6h_AT_Jm3vuCDyt9q7O_3CQ.roa (hash: GQ/gs01dnRvZL+8O2A61zDdVjrGTgR7MaIk+wMIYhGg=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: CIFowWJVzz5u8lK4OHaF3Q5OE61ukdL0/+KLRvIpzoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ae:5e:ab:54:81:7f:57:e4:c0:ae:45:d8:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Mar 2 05:00:52 2026 GMT
Not After : Mar 3 05:00:52 2026 GMT
Subject: CN=3c72b34392f5d943071680a4800f835c99f7cc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:dc:97:50:bf:97:ca:13:16:8f:94:fb:03:
21:82:8d:7b:cf:7e:07:dc:33:e8:4d:dc:61:60:68:
65:bc:31:b9:17:ed:02:bd:8d:08:f9:64:b0:b8:d8:
f5:4c:da:6d:04:6c:71:6d:eb:0d:4d:3b:fb:84:6f:
6c:ee:97:68:2d:cb:fb:68:31:09:2e:f3:29:aa:ad:
b6:2e:8d:52:48:c8:5f:48:94:bf:58:0a:93:4e:9d:
50:76:50:6b:d3:a9:cb:d4:98:93:73:a6:8b:5d:21:
92:be:e2:d8:d3:db:97:a4:c5:51:c1:9a:65:cd:8d:
f5:72:76:4a:e3:58:85:07:e6:66:5b:56:31:c0:30:
cc:da:81:cd:25:75:98:c4:c6:b4:9c:e3:ea:ca:c6:
a0:e3:8f:7b:08:fa:90:80:06:19:78:eb:62:4b:37:
d0:11:14:47:28:0d:1d:75:d3:2e:60:9a:57:2e:85:
be:b0:7a:6c:93:62:3e:a0:2f:71:b0:04:dd:c5:f0:
b6:79:11:39:e5:96:7b:dc:ed:0a:4b:bd:f0:40:8c:
cf:f7:c8:40:47:61:70:3c:03:43:f2:ab:93:9a:1c:
d4:a5:22:60:23:25:33:44:ed:bf:42:15:07:35:9f:
ca:6e:36:41:db:ed:28:28:34:f2:78:00:71:de:d0:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:B3:43:92:F5:D9:43:07:16:80:A4:80:0F:83:5C:99:F7:CC:24
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:8c:24:ba:e8:af:21:ad:01:a9:22:e1:6c:3d:d4:ac:a4:
62:46:d5:22:19:d7:78:24:73:4d:ca:b9:f0:65:a5:77:48:25:
4c:44:7d:4a:0f:ac:e2:d2:06:f3:60:70:68:3c:d7:4c:18:f4:
14:f6:58:dc:fb:70:cb:b7:f1:73:69:f6:d9:f1:71:5e:8e:ff:
78:9b:68:ce:28:e7:fd:83:a8:f9:a0:17:2e:47:8b:4d:b2:9a:
2d:3c:a1:17:96:d9:fb:fe:cf:03:99:29:6e:dc:7e:26:98:f2:
94:42:e3:3e:c4:4e:e4:f7:db:a7:6e:fb:a5:08:d9:4f:f1:3b:
f7:85:28:e2:51:30:7a:4e:5d:3f:e0:00:6c:91:8d:36:d6:0b:
c3:4b:eb:77:ed:c3:21:5d:dc:6d:6b:9f:f5:d8:43:4b:e0:d1:
8f:31:1d:78:ad:17:6a:76:80:26:08:67:41:15:c9:3e:bf:d9:
a5:83:06:0b:2e:f3:b1:b9:7c:24:5e:65:b5:63:a2:4e:4e:6f:
f6:6d:8d:48:66:a9:43:3a:77:1c:4b:2d:65:77:c5:bd:c6:e7:
f2:61:b6:68:98:0a:5f:63:23:ae:63:98:32:28:3f:cd:9e:6b:
42:64:e5:67:c9:21:8a:3e:36:b8:94:60:e5:a8:1b:e5:70:f6:
87:b2:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:47 2026 by rpki-client