Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: qO0Jzn1MvF8AmKl2with7Ps6jChwb5YnfjDAyq8lBBE=
Subject key identifier: 05:43:19:D6:7E:70:72:BC:A0:9D:75:7B:86:28:A2:5E:CC:42:55:51
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019CAA2173486090250F984CE67061043EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 1664
Signing time: Sun 01 Mar 2026 16:00:44 +0000
Manifest this update: Sun 01 Mar 2026 16:00:44 +0000
Manifest next update: Mon 02 Mar 2026 16:00:44 +0000
Files and hashes: 1: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: VL90OTA++6kJsdfvrxZAD9jk58LdDTuLYMqem0y2ysY=)
2: Vhdyvlmm2QhYL_DxOw7zRtqN9Zg.roa (hash: Fgu5qryHdVy6pShgsQWdQm6ItENpj8eEaKZ2+YL90F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:73:48:60:90:25:0f:98:4c:e6:70:61:04:3e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Mar 1 16:00:44 2026 GMT
Not After : Mar 2 16:00:44 2026 GMT
Subject: CN=054319d67e7072bca09d757b8628a25ecc425551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:30:4e:d9:a4:c6:74:0f:74:43:b4:e5:be:
bd:b4:9b:60:0d:fe:d3:04:0a:06:89:80:0f:6f:2b:
70:a7:bd:32:4b:39:56:24:0b:0e:53:48:02:fc:a1:
ef:87:da:9f:75:ad:7b:0a:9c:e3:75:eb:ed:d4:ee:
00:f8:66:0a:61:4b:b4:43:d4:f1:c5:a0:32:2f:22:
44:77:f8:da:78:ee:af:f5:51:7a:2e:18:7c:c9:01:
7e:42:6c:7a:b5:6a:17:d4:f0:45:17:3d:88:23:ba:
7c:11:35:70:25:6b:99:5a:1b:93:6c:62:9e:96:e0:
77:b5:e2:93:ec:c9:22:f7:7e:a7:d6:ec:2e:cb:64:
f8:2f:54:da:c7:3c:32:10:08:17:07:0a:89:c2:4d:
c8:1a:35:75:b6:48:79:a6:3e:c2:76:ec:e3:af:4f:
55:47:57:ce:cb:26:53:4c:c4:39:7d:87:4f:e6:d5:
e2:0b:f4:c2:a0:f1:31:68:20:79:52:98:59:95:08:
93:1b:63:19:d1:29:7a:70:08:2c:45:e9:c1:ae:25:
dd:d6:84:23:fd:50:e9:ea:4c:35:ff:5c:42:85:86:
dc:55:29:de:bb:8f:bc:2e:af:2d:ba:bf:e8:9b:de:
3e:d0:96:80:d7:e5:3a:8f:5f:ad:a6:b3:ad:0d:49:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:43:19:D6:7E:70:72:BC:A0:9D:75:7B:86:28:A2:5E:CC:42:55:51
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a2:e8:9f:7a:f4:6c:c3:d4:b3:9a:e4:ec:a5:e1:2d:9c:4b:
f9:22:5e:d8:11:19:5c:c7:0a:71:24:80:f7:a2:e5:12:fc:38:
0f:59:c9:08:68:2c:ec:99:60:d7:e7:9e:09:bc:c8:d4:7a:ab:
08:5e:85:0c:f5:0a:5f:8b:59:28:f6:e9:f3:37:f3:a0:35:d0:
5e:27:d8:38:ee:8b:79:00:5a:26:bc:50:6a:23:ce:b2:7d:58:
d3:45:c5:94:4d:61:f2:14:11:f1:9d:5f:9e:6a:6e:4f:f8:60:
3f:3e:73:74:35:94:c5:e6:aa:cd:9d:e1:b2:25:dd:19:d9:9b:
b6:90:b7:5b:8e:35:fc:c5:2b:48:6b:45:f3:b5:2d:0e:1e:52:
10:ae:61:b7:03:c8:e3:bf:69:21:e2:ec:57:bb:49:f5:c0:ef:
ef:45:48:40:a7:24:67:a7:b2:e7:b6:29:9d:6e:74:13:71:46:
a5:10:e6:8e:91:7b:23:ad:c6:96:48:c2:26:85:e4:16:7a:b3:
1a:45:49:ec:b4:79:9a:cc:a8:90:9d:b4:2a:e4:36:b2:be:e2:
8e:36:77:3f:d8:d4:a4:63:63:15:b0:ba:0c:9c:bd:80:d1:54:
42:b1:02:d8:3e:d1:47:26:4e:4f:92:ef:d3:c3:5e:be:aa:d6:
4c:8e:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:11 2026 by rpki-client