Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: miSKkOET8XifZAy2sh5Cn+y89ZTNV8oqS8W6eEhN65s=
Subject key identifier: BD:D5:FB:23:16:64:FF:E0:0E:57:89:BF:39:80:8F:FD:F6:75:07:49
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 019CAC46DAE2261B4E522EF493B495A6B597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 070B
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: 0ID-AnVUhFUiMemh1sbAkCtku7k.roa (hash: AbzQcdesjBBWIHYWJC9zLMR7O1b0U/MWLPaNjpcLcdw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: ssUkgJT1ZxKLZAyoNHqEHGtraLEZtjaXn882gUnR3B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:da:e2:26:1b:4e:52:2e:f4:93:b4:95:a6:b5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=bdd5fb231664ffe00e5789bf39808ffdf6750749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:8e:35:2d:38:15:0c:27:1c:27:e6:11:df:
06:d2:c3:04:15:34:67:97:4f:5a:dc:d6:1c:3f:48:
49:fd:e9:d3:51:b2:fb:aa:22:cb:81:69:66:66:91:
c4:ec:aa:2f:e0:18:02:11:ae:6b:b0:17:0c:00:ed:
57:d8:78:e5:b4:c5:a4:03:f1:78:99:c9:d8:4b:09:
b9:0a:21:2d:58:ca:9b:b5:f7:08:8f:7e:7a:bd:03:
85:b3:f3:0d:2b:42:07:73:a7:a6:f0:05:d9:3c:f1:
8f:e0:8d:26:57:40:f0:19:b3:aa:e3:18:55:40:59:
fb:b7:5e:9a:d1:40:7c:ec:b2:58:b1:44:b5:66:19:
f6:ac:0a:06:87:bd:91:69:ab:a3:d4:ea:67:b3:c2:
85:88:41:df:99:bf:12:e7:a8:7c:57:be:b5:39:dc:
fd:17:8a:c0:f0:73:f9:e7:9e:38:64:4f:7d:15:39:
7c:4c:78:5a:6e:b7:93:15:3f:bf:3d:b5:bb:8e:5d:
9b:a8:4d:6e:1d:90:82:86:fd:3a:e3:e6:90:61:8c:
a1:54:8f:d3:7d:63:82:1f:91:d7:28:99:b0:70:43:
99:ce:12:25:18:f3:45:98:72:b3:15:9e:43:23:89:
95:34:a7:70:74:da:14:8c:f8:83:c4:d1:4e:90:7d:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:FB:23:16:64:FF:E0:0E:57:89:BF:39:80:8F:FD:F6:75:07:49
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0d:f5:fd:8a:33:be:c8:18:b1:8c:1a:d7:02:a2:9d:87:7b:
62:b4:77:69:39:20:3d:13:fb:6f:2f:eb:c3:09:9b:f7:37:39:
d1:98:dd:4e:25:ef:c9:dd:ec:e2:2e:60:03:84:3f:26:d1:b8:
2f:be:a6:cb:07:cf:bd:a2:e5:7b:41:a8:b9:65:86:67:cd:1f:
88:40:a1:57:7e:fe:95:c5:79:99:14:8d:07:48:9e:80:d6:fa:
c1:5c:21:5e:55:ee:3d:a1:5f:5a:f2:ca:39:23:22:d4:f4:3d:
3c:bb:be:08:d0:2b:03:79:0a:4b:ac:04:32:0f:2a:bf:13:fb:
5e:0f:ac:90:12:e6:65:ef:40:6a:e7:86:ba:b5:f9:96:43:43:
28:f3:4d:99:0a:19:02:5c:52:98:32:e4:98:9e:d6:48:0b:47:
a0:fa:6d:01:59:6b:38:fd:5f:4f:fb:da:cd:d5:dc:7a:6c:8f:
b6:b8:12:73:aa:2c:3d:f4:48:5e:82:bf:c7:49:0b:2a:b6:8b:
98:bf:94:ee:bb:30:85:ae:2f:80:c0:f8:20:b2:c2:c2:09:27:
a6:42:fd:ec:1f:61:22:ce:2a:84:49:39:73:49:ce:9a:d1:31:
ae:2f:25:16:f4:26:6c:61:a0:04:63:06:52:26:6a:33:02:8a:
c8:4d:3b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:02 2026 by rpki-client