Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: mqwnCu9T3WcOPGd0+uGuzMWDG57eIt1QhPSSPyHvo5s=
Subject key identifier: 39:8B:D7:5D:D5:2C:A3:9D:DB:4A:B9:F7:43:D2:25:2A:0D:92:44:DF
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 019CAA8FDD8438B0E96F441CAC54D45D597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 1555
Signing time: Sun 01 Mar 2026 18:01:20 +0000
Manifest this update: Sun 01 Mar 2026 18:01:20 +0000
Manifest next update: Mon 02 Mar 2026 18:01:20 +0000
Files and hashes: 1: WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa (hash: DSIGTtOOJTOd6v4lSY+KI5Vvun5FIwwizdppUGcnQf0=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: eTtvMexfDOXFOt6TZPmEVrShH09T3QyNVg4K/sNQsR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:dd:84:38:b0:e9:6f:44:1c:ac:54:d4:5d:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Mar 1 18:01:20 2026 GMT
Not After : Mar 2 18:01:20 2026 GMT
Subject: CN=398bd75dd52ca39ddb4ab9f743d2252a0d9244df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:6d:b9:c2:84:dc:70:29:05:22:f8:0e:d8:
5b:3d:4a:db:1c:a8:d6:07:a8:21:e1:98:d5:1b:1d:
5c:22:f0:06:1f:1d:cc:d3:84:45:32:ef:a7:4a:b4:
2c:bc:6b:2d:68:6c:3e:77:45:9e:92:05:0c:44:ab:
31:13:eb:80:ae:c0:30:b7:90:41:14:6e:a8:b8:db:
23:26:20:42:4c:b3:3a:52:d7:24:76:69:d9:16:61:
ea:0d:6a:08:52:5d:8a:3c:f3:3a:6f:a2:8d:91:09:
a6:17:8c:00:d4:70:94:be:e1:79:5f:0d:6c:11:9e:
aa:68:8c:29:a1:0c:f6:aa:02:5d:17:c6:a3:29:5e:
a4:9f:c4:94:4e:04:25:32:04:d1:df:95:9b:9d:3f:
69:45:bb:1e:fc:3c:13:b3:5a:2d:18:8a:ac:c5:12:
62:5b:9a:89:f9:82:cf:94:61:ca:3a:ea:3c:3e:7b:
9c:9c:5b:9f:88:11:cb:bd:5d:27:29:1e:e3:cf:44:
37:97:bd:11:dc:09:9d:e0:c7:a0:54:4b:50:99:0f:
8a:fa:02:12:b2:85:6c:25:58:6f:ff:4b:d9:d1:e4:
6e:bd:65:e3:ae:5b:23:76:a4:75:0b:eb:8c:3e:7a:
a2:ee:44:18:4e:48:fa:31:f2:83:bc:7f:ab:81:04:
c1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8B:D7:5D:D5:2C:A3:9D:DB:4A:B9:F7:43:D2:25:2A:0D:92:44:DF
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2f:b2:09:66:8f:4f:c0:9d:96:ba:59:94:49:57:0e:46:d7:
35:75:d8:df:04:ed:6d:4b:05:7c:ea:a6:6b:0d:85:ff:55:89:
ee:69:c8:1a:d9:24:20:53:76:dd:41:33:75:41:42:9a:3e:62:
d0:7d:04:a3:ac:1d:4d:92:14:4f:6d:fe:90:4c:ae:a6:56:57:
46:39:5f:43:73:23:4d:7c:02:b0:fb:a9:e2:77:d2:b4:6e:1b:
2d:98:a2:2d:56:88:d2:9c:b2:2b:aa:fe:27:2f:96:18:3e:e4:
11:4e:95:91:43:ec:c0:a6:c0:66:92:c2:f2:6f:ac:f4:7d:fb:
7b:8b:02:fa:1c:79:7b:ac:06:bc:7e:dd:94:aa:c5:ac:e6:af:
2f:42:0e:da:aa:82:b3:2d:b1:76:7f:bb:27:cf:45:11:ee:d5:
2b:61:00:91:45:39:aa:97:e3:8d:ea:bd:03:16:c2:1e:41:7c:
9d:e4:83:d8:69:c4:32:37:c5:5a:c0:71:63:0e:fb:03:4e:f9:
78:4b:3e:cb:8a:f8:cf:95:18:d3:56:2c:28:ab:65:5f:5f:3c:
80:d9:04:ca:18:0e:5c:4e:0c:3e:20:0f:ac:ca:ad:7f:c2:db:
17:9d:5e:0d:40:88:b7:a9:6f:e2:bd:fb:22:6c:8f:75:32:30:
f5:4a:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:37 2026 by rpki-client