Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: BNmSvpH8kFkZyAf+Ub2jcU4lJJbXF5idKrVPRYj03XE=
Subject key identifier: 8B:BD:19:BB:E3:0B:A3:E0:1E:90:40:2A:9C:72:62:E4:55:8E:C3:7D
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019CAA58E4C816F3AE5854E898EA4BE4A4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: I11XGvsTy/M/+PdLD82KIb581TCXf+hBFVYvtCbSrJc=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e4:c8:16:f3:ae:58:54:e8:98:ea:4b:e4:a4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=8bbd19bbe30ba3e01e90402a9c7262e4558ec37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:d9:be:cd:62:a9:5f:37:31:7b:d6:cf:2b:
e6:b0:31:d3:93:20:9c:aa:b0:32:6a:59:1e:ff:57:
9f:16:29:f6:04:75:c2:b8:19:de:b9:0f:b2:d2:73:
55:8e:79:17:80:c6:3f:6e:df:50:fe:14:55:6f:31:
00:df:34:14:00:d3:44:e0:da:cc:f6:a1:54:4c:91:
38:33:5b:15:07:6f:b7:f7:9f:78:67:05:79:ac:c8:
5c:0e:36:4f:09:18:a0:0c:be:c7:19:24:d1:1f:5f:
e9:ed:5b:ba:22:8b:0d:90:8b:22:0e:00:ca:63:c1:
67:88:b1:53:75:09:16:9a:86:bd:fa:d8:13:6a:d3:
a8:af:57:ef:e3:7f:d4:97:f9:c9:cc:6f:8b:31:4a:
b1:5c:83:26:9c:03:27:3a:ec:23:8b:34:f6:39:55:
3a:82:e8:e3:81:4f:7c:10:04:05:7e:04:1a:00:34:
73:2d:d0:ec:d8:39:74:54:bb:08:0f:7b:0f:08:a1:
f3:92:35:35:2d:30:9e:ee:5e:d1:75:e8:4e:17:e4:
99:5c:6e:39:8b:1e:7d:ef:64:f3:57:e2:26:f6:b8:
c0:39:bc:4f:18:39:cf:bc:d0:bc:f7:9b:5e:fc:07:
45:4c:79:6a:42:7f:5f:d8:1a:cd:e8:7c:3a:35:54:
65:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BD:19:BB:E3:0B:A3:E0:1E:90:40:2A:9C:72:62:E4:55:8E:C3:7D
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:9f:9c:a5:4a:a5:84:45:8a:76:8e:07:e0:78:89:8e:b3:05:
ab:92:d2:c9:09:ed:bb:f6:8a:6f:4a:34:18:b5:6b:ef:f4:b8:
78:ba:83:96:44:31:e4:1f:56:86:05:40:c2:6c:61:7d:33:94:
43:46:d6:a6:c1:02:28:ed:0b:68:29:03:b6:85:8a:03:1d:cd:
3a:ba:e2:82:e3:95:7b:86:5a:c9:91:43:41:70:fc:98:b8:83:
9b:da:a5:15:15:11:82:86:db:a5:c6:ea:52:1f:b3:bc:af:dc:
d9:2d:71:9a:94:6c:44:0b:fd:f4:1f:db:0e:9b:e4:e5:7a:b0:
f2:22:1e:c8:c0:22:7e:ee:a7:36:fa:db:5f:84:89:46:2e:48:
7b:d8:17:4c:d9:90:1f:4f:6a:f0:65:24:b4:04:73:a0:32:ec:
11:31:1b:a8:25:6d:ec:f5:dc:c2:3d:b9:f3:e9:da:a6:f2:dd:
cc:3c:cd:dc:cc:ae:ab:96:2a:c9:39:0d:23:2b:b7:dd:19:f9:
9f:32:c0:cb:b0:08:23:2f:b7:46:c3:14:11:bf:dc:15:d5:9b:
33:e4:52:88:9f:e2:a3:00:ed:71:f7:b3:c5:ab:96:b8:c8:06:
ef:b3:75:4d:63:19:84:65:37:0b:2a:ca:79:38:3a:37:0b:b0:
d4:1b:db:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:31 2026 by rpki-client