Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
File: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft (raw, json)
Hash identifier: 0lPbkLTVAx2QjF2lV03R/Fi9GGWqRDm8rkyzgXhq9bQ=
Subject key identifier: 67:96:94:11:FF:7D:3D:F9:98:16:17:7C:2E:50:33:B0:8A:48:77:57
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Certificate issuer: /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial: 019D382E2381BFE1D39C74FED1F71F701F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
Manifest number: 131A
Signing time: Sun 29 Mar 2026 06:00:40 +0000
Manifest this update: Sun 29 Mar 2026 06:00:40 +0000
Manifest next update: Mon 30 Mar 2026 06:00:40 +0000
Files and hashes: 1: YKDNzzYNdE1sKwNoJ39aAgh_OZU.roa (hash: 6jhSpIspHRwUAWUI+iMNv3fuIaKW3vG2nI/dTcMCJDw=)
2: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl (hash: 7CZIQGoFYElENpzPOR1xccarCbpWW7qyhSJUtL1E9tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:23:81:bf:e1:d3:9c:74:fe:d1:f7:1f:70:1f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Validity
Not Before: Mar 29 06:00:40 2026 GMT
Not After : Mar 30 06:00:40 2026 GMT
Subject: CN=67969411ff7d3df99816177c2e5033b08a487757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:33:eb:9f:96:19:c1:31:46:c9:f8:d5:49:
90:5b:a6:01:1e:75:90:a8:68:06:61:3a:13:85:0b:
94:a6:17:17:0a:73:82:38:b9:a0:5a:12:fc:95:80:
d8:de:e5:9e:94:a5:fe:73:7d:6c:8c:e6:4e:e8:72:
83:11:73:13:ad:b6:08:d6:e0:6d:a2:ea:41:ae:67:
76:4e:43:33:78:fa:6f:ce:bc:80:64:f2:0a:f4:a1:
aa:a0:45:73:7d:55:85:56:3e:ef:74:ae:00:b5:32:
df:6e:cc:00:50:8f:78:f4:a6:6d:8e:e3:b0:0c:f0:
f7:d7:bc:67:48:0e:19:88:ec:b7:fa:0e:65:39:2b:
c9:33:13:64:37:36:76:b1:76:ef:7a:05:f5:9e:92:
98:da:6b:95:13:a8:a9:77:6c:a1:12:2f:4b:9a:b3:
71:db:dc:55:e7:4c:12:ba:92:69:04:eb:db:06:dc:
1a:90:53:da:39:04:51:c4:2d:d6:ec:c8:0f:a5:0d:
fa:c7:30:cc:e9:80:22:65:59:64:59:d0:92:3c:77:
7f:ff:bd:15:ae:fd:29:d1:c3:30:12:00:2b:ad:7a:
31:06:d8:b1:9a:79:01:ee:2a:92:5c:6d:32:68:e6:
28:fe:d2:18:ff:cf:a1:85:22:47:b0:0b:2a:73:f3:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:96:94:11:FF:7D:3D:F9:98:16:17:7C:2E:50:33:B0:8A:48:77:57
X509v3 Authority Key Identifier:
keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fe:ee:4d:1e:6f:6e:ef:59:16:00:e0:06:93:92:09:83:41:
23:c0:a7:e4:89:2d:2d:a6:0a:72:50:10:68:60:4e:82:b6:d7:
0d:a9:3d:d8:c3:5a:50:34:f1:d7:7d:41:92:06:48:1b:3c:0b:
00:92:2b:5e:41:bc:e9:e1:e2:06:32:3c:04:d1:16:52:48:55:
8f:bb:64:57:6b:04:9d:e8:0b:6b:e0:b7:94:63:a5:34:c4:c6:
97:7b:ba:5f:0f:b8:5d:c9:1e:3c:aa:ed:cc:e9:55:0d:a7:7e:
bf:39:1e:b6:47:33:d9:b2:b0:40:32:b2:83:9a:fd:3d:18:55:
df:a5:83:b6:56:05:ee:16:48:8a:e8:7b:66:5f:8e:38:b8:51:
6c:c3:2a:4f:89:2a:cf:23:b4:fb:1d:de:ce:26:a8:ea:19:ac:
34:6a:11:33:bc:77:75:fe:59:b2:92:ff:3f:82:35:94:f4:5b:
05:98:1a:12:c6:83:04:f8:39:81:e6:6c:fa:26:08:36:de:40:
14:88:e3:e3:9e:78:24:fd:92:55:4a:d7:0b:65:d4:60:0d:bc:
a5:b2:1a:3a:8e:da:1a:67:66:e9:8d:31:1a:11:42:87:7a:37:
9d:f4:37:d5:a7:56:71:fd:92:55:da:1a:74:ef:24:bc:b1:0e:
df:ad:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:54 2026 by rpki-client