Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: DH7RMeo/FVFnS01yXgUfWCjG+hoM63aFbYMEtImdS0k=
Subject key identifier: 4A:AF:7B:5F:B2:67:55:08:50:77:5E:D2:6E:AC:C3:6F:48:B7:B1:04
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019CAC0FC93325785A6C7F14E69766B49D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 0690
Signing time: Mon 02 Mar 2026 01:00:41 +0000
Manifest this update: Mon 02 Mar 2026 01:00:41 +0000
Manifest next update: Tue 03 Mar 2026 01:00:41 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: nrh6ikFP4q/vD8pnn8U19D4Y9rjRilP0zfSL4k0OeQ4=)
2: uLD67uNvCc4ky2TYfWAY_NstWnE.roa (hash: J64Q9GWUgcn8Guex3fYi7oSiRMd56hoswqyttiC77H4=)
3: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c9:33:25:78:5a:6c:7f:14:e6:97:66:b4:9d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Mar 2 01:00:41 2026 GMT
Not After : Mar 3 01:00:41 2026 GMT
Subject: CN=4aaf7b5fb267550850775ed26eacc36f48b7b104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:79:3a:91:9f:9f:6d:7c:da:54:68:22:d8:
6f:02:a4:51:e7:6a:d6:9e:cf:27:03:7b:6b:f8:e6:
ff:bb:a3:73:7d:60:40:b4:be:9e:43:57:de:b8:f0:
49:e2:d3:13:f7:67:11:59:7d:37:61:a9:31:a1:d2:
17:99:03:36:22:fb:f8:7d:ee:20:e7:30:23:4a:91:
b4:57:d6:53:87:82:2d:3f:f7:69:3c:fe:bd:de:92:
ba:50:bb:83:dc:20:82:2d:48:53:03:78:d1:c5:b4:
27:2a:43:46:34:c6:f8:1f:51:7d:a3:1c:69:80:2d:
4f:36:c4:aa:65:7a:1c:10:10:bc:63:26:0e:3e:10:
7d:d3:f3:a6:2d:93:d8:84:8e:9f:34:07:a8:11:a1:
b2:e7:ae:ec:c8:8b:9d:72:92:60:d4:64:3c:28:bd:
c7:2a:f5:02:7a:83:0b:f7:6a:11:a2:13:15:75:d7:
fc:7a:35:20:d3:22:69:6f:dc:67:59:03:5e:82:e9:
17:4e:4c:41:29:65:ea:82:21:80:d6:65:24:a9:6a:
b6:b7:99:ad:59:38:4a:c9:71:e9:6e:64:d2:86:21:
e9:0c:99:5b:c2:74:2e:ab:a3:03:ff:c5:67:3c:6c:
bb:d4:f9:85:63:78:88:e2:ba:fb:99:b8:8d:0d:be:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:7B:5F:B2:67:55:08:50:77:5E:D2:6E:AC:C3:6F:48:B7:B1:04
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fe:d2:c9:3b:03:8e:0b:8e:99:d2:08:e9:1a:b3:7c:14:0a:
01:83:3e:99:81:5f:8e:85:35:e5:5e:4f:3c:68:f0:e3:a3:e7:
8b:78:9e:87:f2:bf:f8:99:bc:10:da:38:c0:c6:a9:72:f4:5e:
f4:cb:53:06:f2:f5:55:8c:92:83:23:3b:09:bc:19:26:07:65:
ee:8b:11:4f:c6:57:75:49:af:0b:9b:44:78:29:dd:8f:8c:88:
fb:c9:7e:9d:72:17:76:d5:7b:0e:72:97:33:26:26:99:7d:e9:
fc:89:c8:42:a7:ea:e4:da:13:c7:b8:58:11:fd:f9:a7:d4:71:
91:1b:3c:cb:a6:69:d2:f7:d1:a5:b7:e7:2a:6d:4d:89:79:c8:
9b:20:fb:d2:51:67:dd:19:7e:4d:bb:eb:12:1b:bf:2a:d4:c2:
6c:7f:1e:15:aa:05:b9:fe:0d:7c:59:ab:78:80:12:1b:d4:b4:
be:4b:28:66:a8:b1:72:2c:d6:cc:24:f8:41:01:75:b7:3c:f7:
06:8f:75:b3:5a:37:f2:f1:f1:93:2a:ee:33:e1:ed:79:d5:50:
d1:3b:f0:06:5d:f8:c7:a2:e8:28:80:ac:9e:69:23:46:23:83:
41:30:0a:9d:ba:e8:56:15:0f:0a:35:6c:df:ae:b5:12:e9:47:
f8:1b:79:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:43 2026 by rpki-client