Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: GcroeGvGb/t6H1Tj7ZAi6Y+qfwVar0yKRPvr5n1p0Lc=
Subject key identifier: 67:D6:57:51:42:35:6D:BC:70:28:D3:3D:F3:B3:08:33:40:8D:4A:E0
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 019CA9B3F39CCC7C7D177F9220398087E58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 1552
Signing time: Sun 01 Mar 2026 14:01:08 +0000
Manifest this update: Sun 01 Mar 2026 14:01:08 +0000
Manifest next update: Mon 02 Mar 2026 14:01:08 +0000
Files and hashes: 1: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: aoaw0me5y9ftJs2t25gwqBqB7qGM3GdIGTDFebi7b9o=)
2: TERNYPeRZxuJ6NCrmwP9jvXvdl4.roa (hash: ezcjhFsSIFuUl+K0MedDme7brzKUDk5NDojpmlSW4ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f3:9c:cc:7c:7d:17:7f:92:20:39:80:87:e5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Mar 1 14:01:08 2026 GMT
Not After : Mar 2 14:01:08 2026 GMT
Subject: CN=67d6575142356dbc7028d33df3b30833408d4ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:62:16:6a:c4:88:1d:71:47:f5:ba:97:82:ef:
65:bc:c7:6f:4a:41:cc:89:cc:98:06:bc:27:46:5f:
ad:3f:76:31:78:32:43:a4:86:66:18:0e:cb:62:32:
88:34:b6:5e:bf:13:70:23:f2:3b:45:87:8e:23:27:
2d:88:14:c1:11:d9:f2:71:c4:c7:84:36:28:9c:80:
df:00:70:1d:ca:9c:a8:3f:a6:e0:15:e7:c3:3b:19:
d4:ad:df:62:88:79:ba:78:2f:40:2d:bf:e9:9f:59:
52:ce:1f:5d:2a:67:44:0f:d6:98:4e:75:e4:2d:cc:
dd:9b:cd:d7:aa:cd:5e:12:ee:1f:79:bf:a2:0d:d8:
7d:76:2b:3c:4a:52:4b:2c:38:dc:01:d4:0a:84:fd:
c8:78:5e:94:f3:cd:d6:31:7e:df:5d:f4:e0:0a:3e:
c9:c8:d3:b3:af:de:36:76:e5:9e:dc:35:f9:75:df:
0a:38:4e:7c:af:d1:bf:a9:59:fb:49:34:5c:2c:45:
b8:3b:1c:61:d0:6c:6e:18:dc:96:31:5f:f1:83:f9:
b2:dc:93:84:b7:31:22:28:1c:ca:9c:68:46:78:77:
f1:79:21:2e:89:d6:d3:e2:9c:f8:c0:8b:ac:fe:81:
b2:a9:e0:9c:bb:84:d4:0a:9a:db:3b:1e:aa:19:d1:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:57:51:42:35:6D:BC:70:28:D3:3D:F3:B3:08:33:40:8D:4A:E0
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4e:e9:21:c6:5c:8d:de:e7:e8:48:1e:b2:10:19:8f:06:07:
61:51:2b:6a:80:a5:ae:d5:4f:1d:8d:f2:d2:a3:db:63:27:5b:
30:4b:f5:6c:04:e7:97:a6:eb:ab:64:1d:a9:51:88:ad:15:6c:
3a:2d:a0:ce:d5:27:ea:fd:0f:62:48:1a:8a:e3:6b:ad:cd:81:
48:95:03:f5:a6:dd:4b:35:8b:e0:df:23:72:f9:2d:40:92:f0:
80:51:60:d5:88:bf:dd:fd:dd:57:7c:3e:65:42:92:77:54:2a:
02:88:f7:7d:e1:33:36:dd:0b:68:cf:0a:cd:d0:19:82:86:86:
80:31:d8:61:9e:85:56:34:b7:06:cb:bf:de:a3:ff:64:89:c7:
3f:1c:04:c2:25:d1:ac:9e:d6:06:b2:57:e9:c7:3a:e2:c8:4b:
2e:78:dd:76:23:02:de:4b:75:91:d3:05:ac:bd:ad:b8:c0:8d:
5a:71:70:10:7c:17:be:2d:71:7b:3d:03:f1:eb:bc:42:c3:b3:
9a:52:40:07:b1:db:87:cb:7a:6b:20:ec:5f:33:a8:f5:e3:f4:
13:4e:98:73:a5:b6:95:3a:c9:10:2c:ed:93:bc:a1:28:15:d9:
9c:41:90:39:84:07:b0:12:5d:5e:a7:29:d9:c9:f6:ed:7b:11:
33:86:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:02 2026 by rpki-client