Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier: 48RQW730fiEVYpOEMPlrnYpHh0TmenPSKUteKM+OAuc=
Subject key identifier: E7:74:7F:86:64:8E:25:CD:58:93:0D:3B:53:44:41:D3:F9:2B:B0:0E
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial: 019D390A12C4FCADFB8C26A054465EFACE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number: 0490
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: 4d_WqSozvRDgvNRTpqu3pf1ycY4.roa (hash: SqhKCGRxDbWcKm2BqLr4W8c+6qQLakyn5pnLEeUZ7oQ=)
2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: aXYrRtnyS7lOKDhCi7e5Dlub3+xhAJTADdTGQC0wPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:12:c4:fc:ad:fb:8c:26:a0:54:46:5e:fa:ce:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=e7747f86648e25cd58930d3b534441d3f92bb00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:2d:74:dc:90:1b:6d:f1:3b:6b:9a:8b:07:
59:6d:d8:40:28:09:59:0e:d8:5d:9f:e5:76:60:e5:
6d:e4:bf:b1:d7:03:83:66:a1:8f:cf:cb:1a:69:17:
0c:33:f0:06:49:b1:bf:eb:5d:7f:73:ac:23:97:c2:
5c:90:6c:8d:7d:ef:c6:26:74:11:8f:d6:15:6e:62:
a3:9c:76:23:e0:35:5a:7a:02:f9:67:b6:6e:36:a9:
c8:63:5c:91:04:ae:1a:7c:c2:55:b2:d4:e8:7b:63:
2c:b9:fb:1b:3a:cf:3f:24:0e:18:be:60:3f:d3:65:
2b:54:ab:d9:70:77:58:9c:dc:37:90:60:07:4b:de:
bd:fc:b9:01:7b:af:52:c3:5c:00:fc:a8:60:bd:f4:
76:56:c2:43:a7:36:97:3a:de:f5:46:9f:c2:36:31:
c8:3a:4d:e8:4c:61:f2:9e:fd:cc:05:10:dd:54:1b:
04:b3:93:a7:d0:5a:fe:1e:94:16:2d:df:3f:6f:fb:
e5:90:92:67:ef:f1:5f:c9:fc:86:fb:b9:66:5d:45:
7a:49:dd:72:bf:76:5e:ed:e6:73:db:f6:aa:f7:b6:
1e:d6:ce:1b:0d:49:31:f2:09:a7:e7:1d:58:7a:a4:
fa:4d:32:1d:60:10:8e:15:e7:b9:78:2b:a5:ae:28:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:7F:86:64:8E:25:CD:58:93:0D:3B:53:44:41:D3:F9:2B:B0:0E
X509v3 Authority Key Identifier:
keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:29:25:b0:df:2a:76:b6:f2:ec:72:c1:db:7e:e6:38:50:19:
f4:a4:23:7c:18:d0:ed:30:6d:b6:76:7c:1b:b8:98:1f:ba:db:
53:81:5b:9e:66:4e:94:f8:bc:f1:b3:9f:a4:cc:a2:56:c0:e7:
e3:17:5b:f0:dc:3c:93:7e:c8:c5:e7:df:c4:33:80:6c:a8:5e:
37:a8:6d:47:44:2d:57:0b:1f:26:41:36:d1:4d:d1:49:22:dc:
3a:29:73:14:04:46:f2:b5:8c:8f:09:a8:96:78:63:31:0f:51:
7a:9d:13:14:a5:ec:c2:55:00:33:23:69:8f:f4:57:1b:95:a6:
1b:44:61:24:fa:f2:34:b2:a6:77:bc:1c:26:a0:04:de:e1:03:
c5:e2:01:11:88:18:d0:26:6a:da:01:7a:1a:1c:17:0a:57:65:
17:e2:66:1b:04:5f:5c:a4:59:a5:ed:e5:80:5b:dd:23:11:85:
65:5d:fc:7a:f7:8f:02:6c:f4:2e:0e:72:5b:5b:4c:6c:e0:3e:
88:45:f7:b8:0e:29:33:3d:14:64:5a:e4:8c:6f:94:f8:5b:63:
69:d6:c8:c5:db:e0:96:c1:aa:93:a2:96:b3:41:3f:ed:18:fa:
1a:03:0a:c2:06:79:b1:db:63:0b:d4:b8:89:39:0f:41:a0:69:
2e:29:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:07 2026 by rpki-client