Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
File: IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json)
Hash identifier: bK5QgaRg2xYeczX5vAsT0sEzHYKZye02GPq51yrIoys=
Subject key identifier: A1:74:24:03:C9:BD:0F:EF:CA:61:19:47:FA:0D:46:D9:0A:17:F1:B9
Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Certificate serial: 019D38D31365B5668632776FD6CF171186C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
Manifest number: 027C
Signing time: Sun 29 Mar 2026 09:00:50 +0000
Manifest this update: Sun 29 Mar 2026 09:00:50 +0000
Manifest next update: Mon 30 Mar 2026 09:00:50 +0000
Files and hashes: 1: 3t7l7f24gteZE6pfOCHDjy6tPXU.roa (hash: 68JrqaeJqxrTaW25a9hnE6OONLO7WRq5rzCsMPJFtyU=)
2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: FyIZ+ts5+J/fPJu+MDV9tlW9RItUa47MksxrFd+fPOg=)
3: jI8kE_edmCe6nU3HjTS6dGcZn4c.roa (hash: bpSk5eGaUyyPipTCLYLXXztA6txMxswrw9EiMZYwCO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:13:65:b5:66:86:32:77:6f:d6:cf:17:11:86:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Validity
Not Before: Mar 29 09:00:50 2026 GMT
Not After : Mar 30 09:00:50 2026 GMT
Subject: CN=a1742403c9bd0fefca611947fa0d46d90a17f1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:83:d8:d3:4d:f4:3c:f0:56:67:87:fd:a1:
42:0d:bd:f0:e9:c3:67:9a:67:f5:c8:15:21:4b:de:
30:04:f2:1c:e7:90:47:ac:28:74:a5:ad:a4:78:30:
06:6b:f1:9b:30:e8:58:45:cc:67:bb:dd:99:c8:a6:
ff:5f:c7:51:2a:f3:08:28:57:85:18:91:07:c0:2b:
36:b0:31:1d:92:d8:ee:74:3b:b2:56:8e:a1:f9:78:
78:2d:ec:e7:46:4c:f9:6c:75:7f:1f:aa:b8:d0:8c:
7d:69:0c:a7:f6:83:bb:66:40:9b:db:58:1f:04:ff:
e2:3f:c6:07:d7:9d:37:4d:46:4d:40:77:3f:d8:bf:
2a:a1:d2:91:98:b7:04:cb:cb:bc:a2:f9:a3:f5:24:
fa:9e:2b:98:78:8e:2a:37:0a:99:81:76:4b:b1:c5:
4f:d1:f5:5d:cf:ce:25:bc:e1:9e:38:2d:db:e6:29:
e5:ff:a4:60:87:c8:88:44:1b:af:3a:33:98:1a:4b:
6f:06:25:7a:fa:c0:64:a8:5d:ee:72:9e:aa:b1:d6:
0c:9f:d1:a1:70:39:f4:df:15:09:ab:3f:ab:0a:14:
2f:b7:5d:c9:82:e0:c3:d2:38:c9:94:3d:e9:eb:d0:
a7:f5:5c:e5:ee:e7:cd:68:55:a4:27:72:55:14:73:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:24:03:C9:BD:0F:EF:CA:61:19:47:FA:0D:46:D9:0A:17:F1:B9
X509v3 Authority Key Identifier:
keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5b:9d:1c:f3:c3:08:63:93:40:75:d2:65:86:99:5c:2f:7b:
45:dc:fd:bf:fb:15:bf:13:27:bb:f5:4f:27:fa:04:e3:f4:52:
54:50:a9:62:ef:fd:8d:0d:bb:ed:59:af:9a:46:70:19:5a:fb:
64:e4:9a:22:ba:fa:d9:8d:4f:ab:b9:34:10:c5:d7:15:a0:b6:
90:28:22:72:78:f3:6f:ab:2f:26:03:2b:da:73:ea:3f:ab:4a:
78:2a:c4:67:ec:ca:ee:f2:aa:82:68:2d:5d:19:1c:5f:09:3c:
38:7e:e5:18:f0:6d:2d:a2:08:36:8a:21:08:d1:e4:ff:5d:71:
8d:48:96:e1:5d:51:eb:e7:0c:9d:ee:52:c4:20:75:c5:06:da:
7f:05:10:00:c3:d0:1b:98:1d:1d:5c:06:bb:3d:b6:6f:93:60:
56:76:2e:f7:e0:1d:d3:7c:97:56:7a:0a:84:69:9d:da:01:ec:
f6:6e:13:c7:2d:78:9f:e0:e1:3d:6e:fe:ed:5d:bf:4b:8e:94:
c4:6f:4b:de:9d:8f:18:e1:82:72:56:f3:46:19:ae:15:fd:37:
7d:f4:f9:5e:d5:23:07:7d:0b:11:32:31:b0:62:d0:50:8a:e2:
a7:b3:de:71:f6:49:e5:e1:09:2d:46:9d:34:a2:4f:9e:9b:20:
c4:c8:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:18 2026 by rpki-client