Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File: IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier: gLRJA7eIAxKvT5+KZku49owD/7zLDJqJJXyW1JHKtDk=
Subject key identifier: EC:EB:D1:F2:13:3A:C6:99:73:E1:8C:1D:86:7E:B5:57:EF:4E:A5:36
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer: /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial: 019D38D31E17847E5265B1AD386F19B5A75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number: 157F
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: wvRVgk7VPL6uFSx6LxG1PZxtRfT3qIE7oS4WIbcrLdo=)
2: h1EMUyyZAAzRRRYxM5oEAQyKbqc.roa (hash: ab51Arxngi98phPFWNZggcRVUoPdKMJSwBp4EQAAf+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1e:17:84:7e:52:65:b1:ad:38:6f:19:b5:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=ecebd1f2133ac69973e18c1d867eb557ef4ea536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0d:5f:9d:c9:3d:2b:7d:d6:63:e9:aa:be:b5:
b6:9e:8a:8d:93:07:3b:ce:7b:3b:9b:4c:8e:dc:f6:
31:ec:16:d1:29:2c:bb:02:44:18:53:8c:16:01:c7:
6a:19:05:4b:09:f2:a6:1d:25:23:a1:1b:c1:d4:de:
c8:2a:74:31:75:b1:21:a1:67:97:0e:64:a4:44:51:
b7:c3:cf:dc:b4:b1:46:c3:ec:ca:58:97:1e:02:60:
e1:3b:89:b1:d5:dc:15:50:9a:e8:0a:d3:97:d3:62:
40:83:00:c9:02:a7:a7:e8:53:f1:03:36:4c:ac:2a:
c1:53:88:db:7a:21:84:95:17:3f:03:ab:20:14:ca:
3d:f5:e8:a1:ea:4d:93:32:6d:7b:96:f1:aa:1e:b5:
c9:55:74:b5:60:6e:1d:42:dd:0c:fa:24:ee:72:81:
50:66:4f:14:31:db:55:eb:10:bb:85:22:1b:ca:38:
18:90:66:27:3f:fd:e2:34:9d:18:5d:dc:af:e6:01:
e2:c8:ad:08:59:ae:ba:cc:af:6d:80:b6:c8:19:4e:
e5:96:2c:ed:13:62:b5:9f:d9:7c:ef:79:8a:b5:f4:
69:18:b1:0e:a1:b7:9c:2f:b7:80:5f:a7:ce:4e:6d:
f3:06:66:87:92:fb:9c:ec:f2:68:a0:2c:66:e4:c9:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:D1:F2:13:3A:C6:99:73:E1:8C:1D:86:7E:B5:57:EF:4E:A5:36
X509v3 Authority Key Identifier:
keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1f:16:97:3e:b3:7f:d1:77:e3:bb:1e:0d:96:5e:7b:d8:49:
c0:82:ea:2b:27:39:98:6d:c8:2e:25:16:53:04:a2:b9:f0:b9:
aa:18:a5:bd:b0:84:84:5c:e6:71:38:ab:da:77:2a:b5:7a:f2:
cb:13:75:cb:6f:0a:04:52:fa:31:c1:c1:c4:bd:f5:54:61:c6:
23:f3:57:f9:da:bd:5f:ef:39:d5:07:a8:71:25:65:18:b3:b5:
b4:31:08:0c:7d:8d:b1:6c:36:0b:6a:7e:2f:a4:b4:d2:1f:d1:
6b:98:58:89:4c:07:c2:41:a8:77:ac:70:d3:70:22:71:9a:7c:
93:d9:29:3b:30:76:bf:9a:71:df:4c:b6:15:ca:a8:d6:00:3f:
dd:f2:17:95:21:30:e9:ee:b0:4e:e4:da:cc:06:56:30:94:3a:
96:d5:ce:e3:a1:35:1a:0e:54:9d:02:05:77:a3:4d:8a:ff:ac:
08:37:5f:6a:0a:a7:e9:90:89:b6:72:e5:48:92:44:77:87:66:
a7:31:ca:7b:2c:49:f5:dd:3f:c1:4b:13:62:6d:b3:92:81:8e:
b9:14:c0:74:fe:c9:f6:67:2b:67:1c:f4:4c:da:3a:a0:47:67:
d5:af:7f:1c:b4:c1:2e:ad:4a:07:ac:f3:09:14:fb:2b:a1:bb:
f7:51:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:28 2026 by rpki-client