Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: S3p0QTS1QKm9mGlLpGJMaPA/LwcTp1duLO/8rvsYkmI=
Subject key identifier: B5:71:C0:88:53:4B:D2:81:A2:00:9C:C0:DC:FC:99:AC:53:87:0F:8B
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019CAAC6B82242D1898190305FEDD152E561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 06CB
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: Pf/6SQCthMFKQ/tZkkbmCt3i0q3fC8zVTUmA7PEE4NI=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b8:22:42:d1:89:81:90:30:5f:ed:d1:52:e5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=b571c088534bd281a2009cc0dcfc99ac53870f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:9a:3b:cf:af:d6:fb:29:7b:37:47:d4:35:
27:dd:28:4b:9c:56:df:06:14:a7:e4:aa:f4:e9:5a:
86:7a:ab:13:eb:c4:a8:5a:fb:f3:54:35:9c:d0:f1:
02:92:fa:6a:38:76:cb:5c:57:ed:10:8f:a6:54:df:
c9:4e:23:21:fd:c3:b2:55:3b:d7:f0:b5:0c:5c:bb:
33:ea:83:bc:5d:8f:66:42:b7:bb:c0:da:bd:4e:54:
34:37:d2:64:04:3f:8f:3d:d1:4f:86:5f:df:32:db:
81:cd:88:7e:2d:74:01:60:5e:37:25:01:d3:71:97:
56:e7:00:ea:4d:22:8b:04:c8:58:c7:bf:70:d6:49:
5b:ec:af:52:6a:81:60:c7:d1:dc:39:b1:7c:35:eb:
2c:f8:84:a9:d4:4b:31:b4:fa:1d:4a:9d:3f:8e:1c:
6b:54:fc:8d:56:62:b6:d8:84:52:fd:3b:99:c0:33:
c7:a2:b8:40:c0:0b:fc:06:17:a0:fb:97:10:0d:2d:
f8:94:bc:ff:54:34:70:e0:59:65:d3:18:45:45:2f:
e2:b9:99:8b:bd:12:c4:a0:05:e3:a0:fd:3e:c1:f2:
f7:b7:1a:ff:83:9a:0f:60:24:26:28:c4:f7:25:a7:
d7:d7:dc:31:81:46:8c:30:29:69:5e:5c:35:53:e7:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:71:C0:88:53:4B:D2:81:A2:00:9C:C0:DC:FC:99:AC:53:87:0F:8B
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c9:37:03:13:39:2c:2d:77:bd:ce:2a:11:63:66:f3:6d:62:
32:64:06:d1:24:63:2f:d6:53:16:65:49:4f:11:a1:de:cd:f7:
de:65:e0:6e:a5:a9:29:ce:17:5f:a5:50:29:46:47:2d:37:3b:
a5:c6:d3:74:33:e6:c7:57:50:ec:31:75:36:ad:6c:60:00:3e:
eb:b6:f2:67:a0:c1:e6:fb:29:fe:42:82:77:33:19:87:05:5d:
ee:11:3d:f8:5c:03:b9:3e:c2:29:6e:9d:58:4e:6e:f7:e9:d6:
7b:0c:21:25:f4:5e:38:d3:ac:7a:53:18:63:34:47:b9:d4:0e:
99:0f:1b:b5:47:0b:a9:74:ed:b6:af:7e:85:3f:6d:3b:68:c5:
2d:6a:2f:ef:80:93:39:02:9b:e0:1e:7c:81:21:5c:8e:98:a1:
ef:26:cd:ad:12:1d:6d:08:76:87:28:8f:01:4a:24:14:6e:45:
9b:39:ba:fa:eb:8b:99:73:a0:0d:ad:8b:69:f4:ca:b9:46:dd:
90:04:9d:18:dd:4e:63:fb:3a:32:0c:cd:97:19:3d:59:ae:f4:
bf:b6:ca:4b:a5:f4:ca:e9:39:0a:87:29:b5:6a:ea:71:3d:89:
04:38:98:c6:60:19:72:a9:9b:f7:c6:e3:31:cf:f2:85:0a:b1:
8e:f9:86:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrgiQtGJgZAwX+3RUuVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjYwMzAxMTkwMTE1WhcNMjYwMzAyMTkwMTE1WjAzMTEwLwYDVQQD
EyhiNTcxYzA4ODUzNGJkMjgxYTIwMDljYzBkY2ZjOTlhYzUzODcwZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFqaO8+v1vspezdH1DUn3ShLnFbf
BhSn5Kr06VqGeqsT68SoWvvzVDWc0PECkvpqOHbLXFftEI+mVN/JTiMh/cOyVTvX
8LUMXLsz6oO8XY9mQre7wNq9TlQ0N9JkBD+PPdFPhl/fMtuBzYh+LXQBYF43JQHT
cZdW5wDqTSKLBMhYx79w1klb7K9SaoFgx9HcObF8Ness+ISp1EsxtPodSp0/jhxr
VPyNVmK22IRS/TuZwDPHorhAwAv8Bheg+5cQDS34lLz/VDRw4Fll0xhFRS/iuZmL
vRLEoAXjoP0+wfL3txr/g5oPYCQmKMT3JafX19wxgUaMMClpXlw1U+fa5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVxwIhTS9KBogCcwNz8maxThw+LMB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMk3AxM5
LC13vc4qEWNm821iMmQG0SRjL9ZTFmVJTxGh3s333mXgbqWpKc4XX6VQKUZHLTc7
pcbTdDPmx1dQ7DF1Nq1sYAA+67byZ6DB5vsp/kKCdzMZhwVd7hE9+FwDuT7CKW6d
WE5u9+nWewwhJfReONOselMYYzRHudQOmQ8btUcLqXTttq9+hT9tO2jFLWov74CT
OQKb4B58gSFcjpih7ybNrRIdbQh2hyiPAUokFG5Fmzm6+uuLmXOgDa2LafTKuUbd
kASdGN1OY/s6MgzNlxk9Wa70v7bKS6X0yuk5CocptWrqcT2JBDiYxmAZcqmb98bj
Mc/yhQqxjvmGOw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:50 2026 by rpki-client