Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: PtnnTVISDxlrkxDTGew9EFwi8Eu7rYOIuu3ahKTtwRM=
Subject key identifier: 8F:7C:9B:E6:6D:7F:EB:BB:90:01:6A:E8:71:65:47:26:A9:4E:18:7F
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 019D37C05878AD2DDD62C799CB22F94A9079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 14B2
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: CAMjcl2HiSdI0pS1UvD5u_OKX10.roa (hash: 3ezIC14oieGL5XhJBO1eJbl4cT1odhjw1Ygh4ZROgXE=)
2: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: 5HcYyZDtpF0ZjWG3EI6s3xj7s6fbCbNLH6pEkOsRriU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:58:78:ad:2d:dd:62:c7:99:cb:22:f9:4a:90:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=8f7c9be66d7febbb90016ae871654726a94e187f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:b6:89:d2:e3:d2:a6:fd:2e:af:a4:c5:76:
6a:1c:29:b6:41:50:9d:d2:e6:40:ad:87:2e:91:28:
48:a8:59:de:aa:51:f4:81:b8:09:2f:df:91:23:e3:
dc:a1:d1:67:11:af:0f:e2:5f:d5:be:f7:46:3e:fc:
f2:ee:cd:56:0b:20:f7:bf:bc:aa:9b:b1:04:ac:8a:
7f:e6:a1:be:63:46:4c:52:30:2a:24:a0:da:41:65:
c5:90:4d:96:13:00:ad:88:e8:dd:11:7a:03:e7:b3:
bf:74:32:cb:db:57:1a:36:a1:4b:2d:5f:48:bc:ee:
70:8d:6e:a5:42:47:6c:a6:0b:08:89:3a:98:ad:04:
20:85:61:f7:c9:20:97:18:89:7d:a8:b6:c1:c4:9f:
18:74:86:4c:d9:4d:a4:9c:64:eb:31:44:79:a6:9b:
b0:0f:cc:a1:f6:0a:79:3c:a1:fd:2c:88:30:a1:3b:
9b:44:b3:22:5a:f6:be:bd:7c:05:3a:66:f0:3b:e1:
7f:da:a2:d4:47:30:4a:d1:7f:73:00:db:d1:c9:53:
4e:3a:d4:53:16:01:77:41:0e:dc:d1:ea:21:b4:16:
71:6c:01:30:60:ee:e3:2f:52:91:5b:23:2d:1a:60:
ce:a9:d3:49:66:bc:f9:1d:1e:ad:04:e7:48:d8:4a:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7C:9B:E6:6D:7F:EB:BB:90:01:6A:E8:71:65:47:26:A9:4E:18:7F
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4b:6b:4a:64:b7:d3:e6:fa:8f:c8:95:ef:07:d0:73:0d:62:
7c:5a:00:1e:f7:a7:e8:ba:e7:b7:c5:43:de:e7:72:de:83:63:
b7:13:3b:8b:48:70:2c:47:d7:44:01:81:d5:59:3b:18:1f:cc:
ba:c2:91:22:23:57:a1:0e:16:38:42:3d:a9:8b:4f:bf:7d:df:
be:21:04:27:4c:cf:96:3d:3a:fc:16:5b:b6:1e:b4:d8:02:ab:
40:89:46:9c:c0:a6:09:99:93:90:aa:58:43:f1:9c:22:4b:8f:
71:cc:73:6c:12:40:80:f9:01:61:14:1f:00:70:dc:8a:93:11:
96:ff:79:fa:c1:66:e9:28:80:b1:30:57:bd:f0:46:8f:73:35:
40:94:fe:96:49:0a:3d:5f:67:df:4e:0b:f8:66:da:69:43:03:
08:6c:b2:19:34:e1:51:55:bc:88:e4:41:99:39:ce:93:44:55:
69:bf:c4:a7:64:f5:6c:fd:3a:93:c3:8a:21:f5:4c:fc:1a:e6:
5f:b2:8d:4e:09:ee:a7:20:e5:95:ab:8d:5b:fe:82:12:2c:92:
b7:1c:93:5a:3c:ee:05:39:6c:14:4f:d0:da:98:1c:24:26:8a:
38:22:6a:89:1f:4f:74:56:b2:05:53:86:15:5e:bc:2a:63:8b:
f8:b7:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:17 2026 by rpki-client