Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: tfq7FL+L4CqGDr9FuNx4Z7deKNNan+iMFNiJrZ5DzNw=
Subject key identifier: B7:11:24:55:97:E1:55:68:E6:21:FE:7F:E9:76:72:BA:D0:14:65:5A
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019D37F7273AC516B0E965432177AFBD4644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0D05
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: D91yhkWJzNy0wIqj24fZRWkjXyo.roa (hash: gzLfISz+cY1sCnwSJWKi4LD4Qz5Rm88X/kCLR5D2X/M=)
2: PCk3nkxvRoLF1gDbkxnDCrjgGa0.roa (hash: /z0KQlvJI+XaH2sEgQieqsdlMwCig0WcE8tOTdtJWRQ=)
3: XVjNtKOnJpcmis7Nf1eAthdQZB0.roa (hash: P0IN+5mFqrGT5cbJJWFNGnDNpinkIhBbzTCg+cVZWjI=)
4: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: ALLiKaUUQM7UIYSecfT8ao0OZ83NTtd7a6AE3IUFxm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:27:3a:c5:16:b0:e9:65:43:21:77:af:bd:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=b711245597e15568e621fe7fe97672bad014655a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:72:8e:f6:e3:b2:0a:76:ad:d0:4e:1f:23:
61:6c:5c:79:8d:f5:d0:f0:01:9f:e1:84:a7:0b:a5:
cf:60:97:53:fc:de:11:4d:e9:fe:01:30:8a:d3:9b:
1c:9e:09:f5:99:20:77:d4:2c:22:ab:43:d0:9b:96:
60:42:67:38:48:53:64:b0:a7:c7:45:e2:dd:0a:88:
52:8c:a0:3f:30:fa:27:d0:68:a3:fd:e7:d2:4e:6b:
ab:43:09:46:3e:d0:72:43:77:71:2f:70:24:62:7b:
29:e4:b8:f5:98:18:40:aa:ae:9d:e4:82:52:ca:fc:
d2:c8:92:0c:3b:f9:c6:0c:50:3c:0b:d1:99:8b:e9:
3b:2d:52:6b:a2:d8:02:95:e7:0f:29:55:0b:ed:d8:
ea:0b:32:04:48:19:fd:1c:65:cd:74:0c:96:0a:cc:
b3:09:86:b1:c1:fb:bf:79:5c:02:28:7f:af:7e:7a:
1a:79:83:cf:97:74:83:5f:1b:97:02:a7:b0:81:57:
a7:09:28:ad:61:26:cb:90:cb:69:76:a1:1b:13:2f:
4a:10:4e:12:b9:2f:89:77:89:60:03:30:e5:a9:d4:
a3:73:cb:71:c7:22:62:96:d8:6a:aa:7c:79:98:06:
32:2b:63:55:50:06:56:38:6c:91:3f:96:40:ea:90:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:11:24:55:97:E1:55:68:E6:21:FE:7F:E9:76:72:BA:D0:14:65:5A
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:03:7a:ce:3c:7b:cc:eb:bd:21:f6:d6:96:f1:08:07:4e:98:
d3:ef:d0:e7:a4:b7:42:07:30:33:d7:24:e5:3f:a3:d9:c3:1b:
c7:45:cb:9b:3a:9e:52:4c:dd:54:5a:45:0c:95:db:c6:b0:bf:
f7:6a:f9:f0:10:7d:8c:58:48:2a:a5:c5:ff:b6:f4:ab:a0:ce:
c9:49:79:77:64:4b:d4:93:b2:69:67:d0:15:55:57:09:e7:ad:
eb:19:9a:7b:91:18:8f:86:c8:5e:55:72:88:d0:d2:cf:0c:8e:
6c:71:38:b9:d8:92:4c:4f:3a:45:f4:9f:1b:d7:2b:ae:18:c9:
e7:59:64:5f:78:fa:cb:9b:74:1e:38:27:9b:1f:90:cc:f1:94:
c1:a9:b7:2c:d0:f5:f9:55:8b:3c:aa:c1:6c:67:32:2b:81:74:
85:5b:2a:1d:5b:01:dc:fb:3b:9f:74:ff:57:d2:08:8f:2f:a3:
27:fb:82:90:16:ec:b8:d4:c1:5b:45:4b:3f:83:fd:70:8b:9a:
16:04:42:aa:26:66:fd:ea:b3:50:6f:a6:4d:86:af:bf:ed:1e:
e8:ad:5f:ae:0b:f0:2d:c6:23:2b:4f:dd:a8:27:cc:f1:0d:2d:
23:d8:c0:1c:61:21:39:61:ad:0a:cb:84:31:de:28:b4:42:67:
f0:a5:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client