Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
File: Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft (raw, json)
Hash identifier: 258VFo+WzIzSyKYYK2ojx8s88T6mgC3p7nK65mFYQRc=
Subject key identifier: D6:6E:09:9B:52:7E:38:80:F3:E8:98:D2:90:8E:4D:C0:85:4B:BD:22
Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Certificate serial: 019CAAC70D477093AA960FC1F8DF760591B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
Manifest number: 07BD
Signing time: Sun 01 Mar 2026 19:01:37 +0000
Manifest this update: Sun 01 Mar 2026 19:01:37 +0000
Manifest next update: Mon 02 Mar 2026 19:01:37 +0000
Files and hashes: 1: Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl (hash: 9Fcs4G1Iwgf3AsMoRIUDp7AJ3LNDArXoKO51amh6nK4=)
2: cStfMjNC3Zvni5434bm3caCEf5o.roa (hash: Qxph82RP6YDfbEy+8YlRPGS3pCRFGm/I35TRuOkaYg8=)
3: lnvQS4iYli9A_kevH6oCyIpYWtw.roa (hash: bmoigmXfa3QnJV4/SJ7xvA90nWAlR46HO0ApmMZ5rMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0d:47:70:93:aa:96:0f:c1:f8:df:76:05:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335
Validity
Not Before: Mar 1 19:01:37 2026 GMT
Not After : Mar 2 19:01:37 2026 GMT
Subject: CN=d66e099b527e3880f3e898d2908e4dc0854bbd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:70:82:05:4b:34:de:16:d7:8e:15:22:30:ed:
87:4d:ce:27:5a:06:1b:45:da:1d:77:15:2b:2c:66:
f8:27:3e:b1:50:3a:19:5a:dd:e1:27:35:e2:55:06:
7e:16:09:20:02:80:2d:36:64:a0:7d:ac:4f:45:ae:
0b:86:d7:3b:18:31:9f:4a:16:e9:93:1d:1c:94:f2:
ec:d7:67:b8:be:08:52:61:ae:1a:a4:99:a3:a8:a4:
37:48:18:c9:0a:0e:15:29:6b:17:9a:8a:59:da:31:
4b:4a:d5:46:55:e6:81:28:22:bb:a6:14:4e:98:af:
01:94:64:27:ae:e9:b2:16:5b:68:c9:4f:b2:11:66:
f7:3c:b2:3d:99:b3:9b:60:55:e5:71:15:57:38:50:
de:d1:df:fc:91:89:d5:89:db:ff:30:38:a8:fc:7c:
67:4d:31:26:5b:ab:0c:3b:11:bf:db:a0:46:1b:82:
ff:29:de:7c:ac:c9:81:a6:94:1a:0f:45:7a:70:d8:
71:5b:b6:e3:19:7e:0e:6b:c4:c8:e7:1f:7b:02:8f:
68:2d:80:ad:86:fb:11:91:c8:dd:96:51:97:a7:c4:
ca:97:12:d3:8b:23:84:c1:26:d4:ac:1f:ae:b6:0d:
05:b1:b6:69:f7:a2:20:69:66:df:21:3c:d7:25:de:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6E:09:9B:52:7E:38:80:F3:E8:98:D2:90:8E:4D:C0:85:4B:BD:22
X509v3 Authority Key Identifier:
keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:33:52:93:fc:49:9c:43:6b:8f:5b:77:15:af:fe:24:36:5f:
6e:5d:57:e6:9b:7a:cd:4d:99:2a:17:11:b7:17:09:60:e4:ce:
eb:e0:d2:94:65:8a:ba:5b:11:ea:5c:01:00:a0:54:b3:70:33:
1b:be:4d:66:2d:42:0c:50:84:4a:18:6b:36:cf:2c:1a:be:c8:
da:90:e6:3e:b0:6c:29:23:4f:d6:04:26:7a:ae:bf:dc:b8:6d:
25:4b:dd:28:53:ab:e6:92:3c:96:65:b4:a7:ea:32:90:62:ef:
05:56:26:05:3c:ab:27:17:72:5b:95:3d:69:ec:60:94:cd:64:
0b:7e:65:06:97:84:25:84:fa:c6:35:27:72:85:32:86:24:f7:
6a:96:68:95:16:54:41:78:7c:50:d1:19:8a:2d:32:50:43:b9:
fc:20:1d:be:f7:c7:52:4c:95:94:67:c4:a6:cb:b7:17:88:33:
37:9c:bd:b2:db:06:8a:11:bd:12:e3:96:1e:77:e7:72:39:f9:
4a:76:fd:5c:0a:8c:a1:0a:15:07:65:d3:fa:a2:f3:d6:a0:91:
91:6f:a0:95:a2:f5:14:64:9c:64:9b:4c:63:9c:dd:5d:9c:28:
e0:ba:1f:bf:34:80:26:68:23:96:ad:05:b2:0d:52:d2:bc:80:
09:8d:6c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxw1HcJOqlg/B+N92BZG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmI3OThmZjc2ZThkNWNlYzViYTQ3ZjdiZTc4MzI5ODNk
YjMzMzUwHhcNMjYwMzAxMTkwMTM3WhcNMjYwMzAyMTkwMTM3WjAzMTEwLwYDVQQD
EyhkNjZlMDk5YjUyN2UzODgwZjNlODk4ZDI5MDhlNGRjMDg1NGJiZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3CCBUs03hbXjhUiMO2HTc4nWgYb
RdoddxUrLGb4Jz6xUDoZWt3hJzXiVQZ+FgkgAoAtNmSgfaxPRa4Lhtc7GDGfShbp
kx0clPLs12e4vghSYa4apJmjqKQ3SBjJCg4VKWsXmopZ2jFLStVGVeaBKCK7phRO
mK8BlGQnrumyFltoyU+yEWb3PLI9mbObYFXlcRVXOFDe0d/8kYnVidv/MDio/Hxn
TTEmW6sMOxG/26BGG4L/Kd58rMmBppQaD0V6cNhxW7bjGX4Oa8TI5x97Ao9oLYCt
hvsRkcjdllGXp8TKlxLTiyOEwSbUrB+utg0FsbZp96IgaWbfITzXJd4+qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZuCZtSfjiA8+iY0pCOTcCFS70iMB8GA1UdIwQY
MBaAFCMreY/3bo1c7Fukf3vngymD2zM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEt
ZmQ0ODNkZTllN2U0LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEtZmQ0ODNkZTllN2U0
LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojNSk/xJ
nENrj1t3Fa/+JDZfbl1X5pt6zU2ZKhcRtxcJYOTO6+DSlGWKulsR6lwBAKBUs3Az
G75NZi1CDFCEShhrNs8sGr7I2pDmPrBsKSNP1gQmeq6/3LhtJUvdKFOr5pI8lmW0
p+oykGLvBVYmBTyrJxdyW5U9aexglM1kC35lBpeEJYT6xjUncoUyhiT3apZolRZU
QXh8UNEZii0yUEO5/CAdvvfHUkyVlGfEpsu3F4gzN5y9stsGihG9EuOWHnfncjn5
Snb9XAqMoQoVB2XT+qLz1qCRkW+glaL1FGScZJtMY5zdXZwo4LofvzSAJmgjlq0F
sg1S0ryACY1syw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:35 2026 by rpki-client