Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: c95FOGITC8H74QVWItodgvHO1yKFABGApXAHX42Jt3o=
Subject key identifier: 5B:0B:CA:4C:5B:7B:0A:F5:95:6A:A8:66:93:61:2E:2E:58:F6:5C:9A
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019CAC101C3440820134B90FB55FAD44EBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 12D1
Signing time: Mon 02 Mar 2026 01:01:02 +0000
Manifest this update: Mon 02 Mar 2026 01:01:02 +0000
Manifest next update: Tue 03 Mar 2026 01:01:02 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: 8iVV6bkHvd3MnkRng4RUpEWiJP4HDf8b/1z95hrr2X4=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1c:34:40:82:01:34:b9:0f:b5:5f:ad:44:eb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Mar 2 01:01:02 2026 GMT
Not After : Mar 3 01:01:02 2026 GMT
Subject: CN=5b0bca4c5b7b0af5956aa86693612e2e58f65c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:15:51:53:43:f4:02:d4:17:76:17:e5:7a:
a9:8b:f3:d8:d2:22:5f:bd:e1:76:45:46:e9:af:d2:
6c:e7:ac:6c:95:39:81:79:82:fa:ad:3e:d9:c2:1e:
b7:f2:5e:41:3b:0b:d9:41:83:98:4a:27:ed:4d:3e:
4d:1d:17:88:1a:a7:3c:58:09:45:02:00:d7:17:6b:
44:46:58:1c:9f:d3:e3:04:1c:43:a5:21:38:9c:c4:
ed:a9:6a:c1:75:cc:5c:16:45:94:71:77:c1:cb:58:
77:a8:22:b6:eb:19:cf:1b:34:ca:05:ab:ba:14:36:
71:f3:94:d5:6d:6c:f3:80:65:43:ba:65:26:59:ce:
84:3d:5f:19:20:ba:16:d0:63:11:63:89:af:82:37:
0e:ce:9b:bf:75:6b:b2:90:2a:aa:fb:18:53:99:4b:
cc:8f:cb:d6:36:4c:6e:01:16:5b:48:dd:cf:b5:6e:
27:4e:32:6e:fd:2c:96:e3:06:e6:2e:26:33:fe:5c:
8d:6f:6e:c1:38:6f:b3:26:b3:ec:6f:81:93:1c:b5:
82:df:db:d7:92:ef:a9:7c:2e:95:8e:6a:4b:ea:fe:
fd:f0:a1:81:c1:29:e9:a9:68:1e:a2:bb:a9:f2:3f:
5c:2e:00:2d:89:49:67:03:4c:9d:b5:ce:29:37:0c:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0B:CA:4C:5B:7B:0A:F5:95:6A:A8:66:93:61:2E:2E:58:F6:5C:9A
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:72:d7:1e:3b:28:f6:15:f6:5e:12:cb:18:67:c5:66:ae:ff:
1a:cc:51:0e:3e:b3:5c:10:ea:04:62:f8:2a:58:6f:5f:df:da:
8d:35:0c:d9:6c:f3:b1:cb:41:e1:20:09:82:2b:f1:db:1f:27:
67:02:ed:7a:46:3e:42:8b:43:90:30:7f:7e:8b:c4:3f:44:6b:
45:fe:91:ea:b6:3d:ce:06:c1:40:60:ff:5a:fb:3b:04:f8:41:
2a:8b:ca:64:4f:da:52:3f:2d:9c:f0:13:36:ae:a2:3d:5a:57:
a2:8d:fc:3b:45:8a:c3:fb:38:76:25:99:8e:53:a8:b1:22:ce:
a4:46:dd:73:86:22:7c:83:67:73:fd:0a:99:51:79:66:df:f2:
1f:6a:e1:fb:fa:1a:8d:3e:ce:68:ff:b3:50:64:b6:85:59:01:
26:83:00:56:a7:74:0b:f3:14:78:11:5e:21:51:15:15:d3:50:
78:6d:c7:f3:97:1a:5a:a8:be:49:f6:3b:0a:98:1d:45:a9:21:
c7:79:35:9b:a4:5e:83:9c:8d:59:8b:0c:04:8b:52:9e:79:e7:
18:29:7c:02:79:ca:4d:cc:55:e5:da:49:e7:37:6e:95:ee:d3:
e5:3e:af:b9:88:aa:94:09:fe:f1:43:96:bf:27:7c:42:fc:84:
75:2c:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:04:48 2026 by rpki-client