Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: JXHc89kZl6jSyfIprptR/Mc1yn20FEYFX7QmGVM57Os=
Subject key identifier: 9E:44:55:7E:21:CE:7F:0B:26:F3:25:99:3F:EC:B9:1E:A8:DB:7D:67
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 019D38D3C40AFD372434E425C9B55162DB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: WJZilYaZAHsOAmj637C-MdulMxc.roa (hash: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: SB1vcsmoWdhzlUzGdlKBrMjMTHPmAmBqi6ANJ+bkDZ0=)
3: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (hash: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c4:0a:fd:37:24:34:e4:25:c9:b5:51:62:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=9e44557e21ce7f0b26f325993fecb91ea8db7d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:71:a7:de:83:db:60:0c:18:90:47:ad:3a:a8:
be:81:d9:a1:63:82:0e:d4:52:4a:61:90:f2:8b:97:
d4:d3:74:ea:82:ef:f4:07:33:ea:fa:c3:31:72:db:
8b:e8:1a:80:b6:ad:ff:43:11:4d:2d:e4:ec:84:13:
bc:86:b9:53:d4:98:cc:ac:38:0e:be:b4:76:a2:88:
76:9c:06:be:03:17:72:5e:93:e6:49:ed:d4:ff:4d:
92:bd:94:f4:12:37:dc:60:96:a0:6b:40:75:d4:e9:
8e:c6:d2:23:36:02:02:48:b9:46:30:d8:ab:66:ad:
79:51:1c:e9:1f:aa:64:51:11:e2:45:ef:08:e4:cb:
c2:80:f7:09:3d:94:a2:8e:c2:77:40:b2:4f:45:df:
1b:1f:ca:0c:70:4c:ff:e2:59:26:47:2b:ea:c9:4c:
d9:99:59:44:38:d7:dd:a8:6b:f4:df:c3:ee:ba:eb:
58:25:b4:03:f5:16:87:55:9a:67:79:6e:d9:fe:b8:
75:61:2e:64:90:0e:a9:c5:dc:b2:f8:24:1f:3b:9b:
f2:1d:2a:a8:c5:75:61:5c:22:08:a1:77:e7:4c:a4:
ff:27:a2:2e:14:b0:7b:2d:c3:be:b0:fe:a4:b5:37:
7a:c5:72:19:2c:d1:6e:ca:d9:28:00:86:02:90:00:
f9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:55:7E:21:CE:7F:0B:26:F3:25:99:3F:EC:B9:1E:A8:DB:7D:67
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:c6:c3:ed:36:30:3a:0b:4c:8e:6d:d7:fc:54:91:b5:f3:
0e:10:b2:d1:c9:7b:3a:30:e4:d3:0d:bf:b7:bd:5d:66:72:6f:
93:07:c7:2c:f3:cf:6f:88:23:74:aa:6e:2a:0e:ce:1f:af:ae:
4c:bc:80:20:54:f0:75:a6:43:df:53:91:19:da:36:6e:cc:9d:
6f:00:6e:bf:bd:08:46:4d:3a:76:1b:0a:22:f0:15:d4:0f:01:
38:0e:3f:2a:dd:c5:32:37:7e:e2:9c:21:da:b5:31:1b:66:a9:
80:b0:b3:cc:fd:1e:c3:ec:ed:9c:56:c5:83:b4:9d:d7:a6:b3:
1e:24:9c:21:87:5e:a5:ef:c0:7d:d9:17:b3:ca:63:78:1c:be:
db:93:bc:e5:67:0a:92:58:07:04:bb:ab:fe:34:21:d7:28:a9:
b2:09:cb:98:24:47:52:d7:d9:ec:47:77:50:57:3f:8e:8a:73:
20:e7:a8:1e:7c:ba:15:d8:b9:50:8a:43:74:7d:0a:33:1c:43:
f9:7c:4f:21:af:37:43:7c:7c:68:bb:32:bf:e7:b6:93:f8:1f:
d9:74:a7:9d:66:38:7f:98:a8:f8:c0:41:32:20:17:bb:a5:d1:
e7:ff:b3:d7:35:cc:25:5b:b0:3e:2c:34:bb:a0:90:62:53:5a:
48:4a:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:44 2026 by rpki-client