Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
File: IY2yiCPzcIslWqEkum73QdET6vM.mft (raw, json)
Hash identifier: eyosRonRYv6UGDU/sbMDjkAxfSJpKyuD/EaUS4yvIdI=
Subject key identifier: E3:15:86:43:C6:6A:CE:6A:63:8E:D6:B4:D2:C3:77:04:C1:02:AE:A3
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Certificate issuer: /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial: 01A0D15C1E2A390458204F84D0D6C1803ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
Manifest number: 1267
Signing time: Thu 24 Sep 2026 03:01:10 +0000
Manifest this update: Thu 24 Sep 2026 03:01:10 +0000
Manifest next update: Fri 25 Sep 2026 03:01:10 +0000
Files and hashes: 1: IY2yiCPzcIslWqEkum73QdET6vM.crl (hash: l2Kf+zwXwLtSm4to7nQ8kXiVmkyf4lSkCAiT25ZXxYY=)
2: f7qLZUl_FwNxE3w_k0K8MDDnPE4.roa (hash: iT3SrQGihsPU4xD+7248AXf2sfstLnnSHt1kFE/x28E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:1e:2a:39:04:58:20:4f:84:d0:d6:c1:80:3e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Validity
Not Before: Sep 24 03:01:10 2026 GMT
Not After : Sep 25 03:01:10 2026 GMT
Subject: CN=e3158643c66ace6a638ed6b4d2c37704c102aea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:51:d1:78:ca:f4:b6:76:e4:c1:42:74:93:
36:05:aa:0f:fd:42:26:15:dc:62:35:e5:87:28:d0:
19:af:14:43:2f:f6:b2:cb:6e:86:0d:73:6b:42:bc:
ad:1d:27:9c:28:8d:1f:a2:46:68:67:c2:f1:3d:cf:
5a:a4:d2:c5:5c:79:9a:e9:5f:eb:77:d1:e8:11:d2:
d7:07:c4:bc:64:57:87:a0:c8:d2:47:10:af:06:aa:
1e:cc:38:43:16:d6:f3:c3:44:d5:13:90:92:9a:48:
88:ef:bc:c7:dc:33:ec:0c:85:4e:e8:94:d5:ef:df:
a2:36:a8:e5:6b:a8:d6:03:69:bd:6c:40:9a:23:b8:
f6:76:1c:52:be:0c:a1:01:c2:23:18:bc:b3:5c:f0:
ad:d5:27:53:14:2e:fa:ca:ff:d8:f8:1d:f1:a7:f0:
37:12:4e:59:19:0c:8b:26:cf:88:80:98:e0:2e:92:
20:8a:86:d1:c0:79:83:6f:86:db:2e:93:c3:2c:53:
e7:b5:82:c6:1d:d9:04:24:78:3e:ae:4d:c4:cb:9c:
53:3d:2c:8c:06:04:e3:52:53:3a:f1:4b:83:3b:00:
61:c0:cb:96:48:49:76:ab:7d:93:06:c0:db:5e:d1:
17:3d:43:60:7e:3f:aa:8e:20:b7:1d:15:e1:a1:a0:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:15:86:43:C6:6A:CE:6A:63:8E:D6:B4:D2:C3:77:04:C1:02:AE:A3
X509v3 Authority Key Identifier:
keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:28:7f:16:70:45:04:df:d9:e7:df:e5:df:8b:fb:ec:79:4f:
5a:9b:91:ca:e0:76:94:71:cd:39:5a:d4:82:62:66:1b:06:8d:
8e:6f:b7:61:15:25:fc:d6:a0:e9:53:ba:ab:4e:bb:32:1c:97:
fb:e4:1c:1d:61:45:95:4f:0b:43:10:c4:f0:74:4f:b6:42:1e:
bb:c1:e2:e2:95:db:16:a1:80:09:13:44:a5:70:02:e9:7f:5e:
a6:ea:57:c7:8f:78:57:0d:4e:53:2f:de:36:8c:6a:68:8d:a0:
82:32:f3:ed:27:25:f4:fe:10:93:a5:fc:b7:03:7f:ef:30:3b:
f8:67:85:c5:49:2e:87:4c:4d:18:f2:f5:1b:fe:94:bc:cc:11:
7c:62:e1:5e:50:a6:ab:b7:de:50:2b:f7:34:a7:54:9d:27:13:
47:78:00:20:4b:91:ad:c1:c4:27:d0:c3:65:f4:78:26:c7:4f:
f1:98:dc:64:81:f7:25:f9:a4:18:6a:e5:a1:71:0c:ac:66:8d:
2b:29:fc:2e:df:70:65:59:c7:25:47:c6:98:5b:4c:f8:a7:e9:
ba:3f:5d:77:f5:a9:19:ab:46:5d:40:39:3c:3c:76:41:20:95:
17:48:b2:5d:86:4a:09:2b:7d:dd:95:91:7b:0e:42:51:b1:c8:
68:b8:9c:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRXB4qOQRYIE+E0NbBgD7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGRiMjg4MjNmMzcwOGIyNTVhYTEyNGJhNmVmNzQxZDEx
M2VhZjMwHhcNMjYwOTI0MDMwMTEwWhcNMjYwOTI1MDMwMTEwWjAzMTEwLwYDVQQD
EyhlMzE1ODY0M2M2NmFjZTZhNjM4ZWQ2YjRkMmMzNzcwNGMxMDJhZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPxR0XjK9LZ25MFCdJM2BaoP/UIm
FdxiNeWHKNAZrxRDL/ayy26GDXNrQrytHSecKI0fokZoZ8LxPc9apNLFXHma6V/r
d9HoEdLXB8S8ZFeHoMjSRxCvBqoezDhDFtbzw0TVE5CSmkiI77zH3DPsDIVO6JTV
79+iNqjla6jWA2m9bECaI7j2dhxSvgyhAcIjGLyzXPCt1SdTFC76yv/Y+B3xp/A3
Ek5ZGQyLJs+IgJjgLpIgiobRwHmDb4bbLpPDLFPntYLGHdkEJHg+rk3Ey5xTPSyM
BgTjUlM68UuDOwBhwMuWSEl2q32TBsDbXtEXPUNgfj+qjiC3HRXhoaAPnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOMVhkPGas5qY47WtNLDdwTBAq6jMB8GA1UdIwQY
MBaAFCGNsogj83CLJVqhJLpu90HRE+rzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83NTIxMWUtMzYxOS00MjVmLWJhYmQt
NzlkYzNkMGJiZWQ4LzEvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83NTIxMWUtMzYxOS00MjVmLWJhYmQtNzlkYzNkMGJiZWQ4
LzEvSVkyeWlDUHpjSXNsV3FFa3VtNzNRZEVUNnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsCh/FnBF
BN/Z59/l34v77HlPWpuRyuB2lHHNOVrUgmJmGwaNjm+3YRUl/Nag6VO6q067MhyX
++QcHWFFlU8LQxDE8HRPtkIeu8Hi4pXbFqGACRNEpXAC6X9epupXx494Vw1OUy/e
NoxqaI2ggjLz7Scl9P4Qk6X8twN/7zA7+GeFxUkuh0xNGPL1G/6UvMwRfGLhXlCm
q7feUCv3NKdUnScTR3gAIEuRrcHEJ9DDZfR4JsdP8ZjcZIH3JfmkGGrloXEMrGaN
Kyn8Lt9wZVnHJUfGmFtM+Kfpuj9dd/WpGatGXUA5PDx2QSCVF0iyXYZKCSt93ZWR
ew5CUbHIaLicCA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:28:58 2026 by rpki-client