Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: zq4hvhwle5sggrYqBbp5/uc/sspfuqXTbQllgheA1Jc=
Subject key identifier: 02:47:C4:42:0A:C7:43:61:57:8E:60:AF:51:05:79:2D:F8:96:47:FF
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 019CE17D7B11187F65BD0514AFB5717BB74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 099B
Signing time: Thu 12 Mar 2026 10:00:22 +0000
Manifest this update: Thu 12 Mar 2026 10:00:22 +0000
Manifest next update: Fri 13 Mar 2026 10:00:22 +0000
Files and hashes: 1: 6JMmxrfiQpPlC_lOumLXACWDZqM.roa (hash: J1a3qyIyAUriipjYLsphj7xq5F7o8cCyCbTPqGYHNhI=)
2: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: ESfG3TqSrXyAN5AWvs27hFnBaxN9xUcg3pk6q1AS6Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:7d:7b:11:18:7f:65:bd:05:14:af:b5:71:7b:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Mar 12 10:00:22 2026 GMT
Not After : Mar 13 10:00:22 2026 GMT
Subject: CN=0247c4420ac74361578e60af5105792df89647ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:29:2d:f9:62:96:cd:e6:56:19:70:ae:c8:
fa:6e:4f:f9:3f:20:d7:06:d4:e9:b4:2d:02:33:71:
b8:47:a8:f4:ee:4f:18:1e:80:ba:4b:27:34:20:18:
1b:2a:c5:1e:b5:f1:f3:fd:b8:34:5c:d7:74:5c:b3:
3c:ed:e2:54:b4:84:e6:d5:57:51:c9:94:a5:ee:29:
8e:3b:37:6c:94:11:72:f8:2e:42:33:21:5f:9e:71:
a9:4a:21:7c:02:51:c3:30:1d:31:71:67:67:21:8f:
46:0e:6a:2a:70:9a:ed:6a:7e:93:65:49:8b:5f:5c:
10:e1:6e:80:36:11:1f:0c:74:0b:ff:df:c9:78:42:
5e:ab:59:0b:b3:6a:c3:71:83:7f:38:40:fb:b7:d6:
1d:28:78:23:13:25:f9:2b:71:5f:8f:a0:f9:ad:15:
1c:7e:cc:9d:34:0a:03:33:7b:8d:8d:f2:86:96:e6:
31:74:4f:36:73:cf:3a:71:7e:e9:4a:e0:6d:10:18:
9e:ee:e3:2e:18:c2:1c:87:57:6d:e9:fa:f7:f5:a7:
fc:93:b4:f6:9b:90:fb:fd:fe:6c:80:f4:3e:a6:c3:
d6:48:8b:14:ac:a3:65:41:77:1b:97:a0:05:85:95:
ac:26:7b:cb:77:60:39:54:aa:bd:b1:4a:3b:5d:cf:
29:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:C4:42:0A:C7:43:61:57:8E:60:AF:51:05:79:2D:F8:96:47:FF
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1f:fa:f1:3d:f5:73:e5:df:c4:9c:e5:4c:e1:10:08:bd:36:
92:84:b4:61:36:0a:09:0a:85:a8:f8:3e:7a:49:a4:02:c4:1f:
6d:c2:dc:8c:0a:bc:f6:bc:f1:3d:94:85:b8:2b:33:2a:d3:80:
ed:77:6c:32:c6:b0:d5:0c:4e:ca:d6:ab:d3:66:aa:67:b6:f7:
9b:a5:22:ef:62:d6:db:aa:77:5e:88:c4:e6:36:51:e0:f0:5f:
f4:61:2f:ab:ff:b7:49:ce:cc:f2:a8:7f:68:1f:35:99:1e:13:
db:58:a5:f2:1f:90:01:d9:82:5f:e5:1e:72:39:19:cd:93:60:
89:e4:fb:9d:53:e0:12:0d:13:b9:fb:ea:1d:e9:81:85:4c:e4:
a2:7f:f1:7c:ea:87:20:18:1e:1c:92:f5:88:52:16:0a:93:97:
94:18:5c:6e:95:b6:10:77:ef:36:26:b8:f4:07:cf:5f:2a:19:
e1:50:8d:39:9c:cb:c5:97:2c:d6:23:12:c7:a5:2b:e6:2f:6a:
66:b3:8f:7d:b0:1a:5a:d1:60:19:91:e6:e2:3b:b9:eb:66:57:
55:7d:65:c6:7b:8a:ef:8e:df:f8:8d:16:5c:15:08:81:0d:24:
42:6d:6b:ed:ff:54:86:f6:69:0b:6d:be:b3:ff:68:75:5b:49:
2b:63:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:53:03 2026 by rpki-client