Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: 2nUZyoTG0Sb3I/Oi4tuPOIpFKvmuo3lBWyjzM+Fg43Y=
Subject key identifier: 5F:B9:65:0C:AD:49:3C:4F:59:AA:EF:60:85:31:5D:82:BA:76:6F:B6
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 019D37F7256E0D83DBB66A316AC96ED3B6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 1563
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: 5GdpnJT9lKZxmlZ9ggHbnlibzNRQKpBmGCavC3Xr1Q4=)
2: c9DEUEWEQPqrGgYUimiiQviSMgM.roa (hash: wakxrbqHUtPpN1M0QZFEdKnthWi1t40kvnk8QYdL7EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:25:6e:0d:83:db:b6:6a:31:6a:c9:6e:d3:b6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=5fb9650cad493c4f59aaef6085315d82ba766fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:01:f8:90:34:0f:13:a5:dc:05:67:31:4d:
97:be:40:8e:3b:64:cd:cc:e9:4e:f7:7c:c7:15:22:
5d:6c:c2:d4:5d:72:95:69:1e:b3:e5:7a:12:b1:86:
a0:90:d9:6f:b2:c0:9a:c8:e8:73:72:78:be:11:ab:
e8:b4:62:cd:7b:c4:49:ba:95:da:16:27:e9:87:e3:
42:67:93:90:c5:c5:fb:e6:4c:24:8e:2f:4e:32:aa:
4f:2b:0b:bd:70:09:aa:8d:59:2e:61:ca:e8:69:24:
b3:cb:a4:2c:37:8b:f0:ad:58:79:62:aa:24:b0:b8:
89:4b:d6:2e:ee:94:11:91:7e:28:93:71:82:17:25:
91:fa:63:ce:57:1f:81:d2:da:9d:8b:a3:fd:fc:8a:
71:8c:53:08:a4:be:b5:91:93:7a:3c:e3:31:34:46:
eb:7f:c3:da:a8:ac:38:0d:0f:b8:fd:32:e7:c9:ce:
ee:4e:04:1b:ca:8a:3d:ea:00:3d:b3:56:65:54:25:
e3:45:e8:45:b5:24:f6:ae:d1:db:a4:40:be:30:fd:
db:c2:b6:bb:33:e7:fe:47:c7:f4:88:55:a1:4c:69:
ac:e1:3a:87:df:0b:aa:f5:8f:58:d8:8f:4f:bc:c3:
51:f9:51:69:1e:07:c4:d9:08:13:d5:90:0e:d3:2b:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B9:65:0C:AD:49:3C:4F:59:AA:EF:60:85:31:5D:82:BA:76:6F:B6
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6d:bc:37:d2:3c:fd:88:c4:7f:5e:d2:8c:fd:c8:a5:62:d5:
91:8f:d2:b6:0d:e6:b2:67:96:e7:a9:74:e5:29:66:00:e5:c9:
1f:ea:2a:77:37:10:93:fd:c2:b2:c3:1d:fb:4a:37:3f:f9:52:
c9:0c:39:15:90:b9:3d:57:d1:ea:58:3a:5e:0e:d9:48:38:83:
41:09:9f:c2:ef:e0:37:23:59:6a:e6:60:54:ac:97:ac:73:21:
07:a1:7f:54:91:1b:9a:6d:b9:92:cb:2a:f1:f9:9c:aa:46:4e:
2c:7c:04:b9:48:6d:c1:d9:45:3b:a9:14:0a:03:4d:fc:45:3b:
be:84:55:20:09:72:11:07:c7:dd:95:fe:62:76:43:60:b7:e7:
b0:86:5b:3b:34:58:0b:fd:f6:37:f7:43:c9:f8:24:18:4a:78:
e6:ff:4b:00:a7:21:76:de:2a:fc:4d:e3:ea:f6:1d:1b:8a:33:
6b:04:3c:7c:7a:c9:0b:08:d7:c5:41:6f:b5:a4:60:63:01:69:
4e:17:14:71:5f:c7:90:12:52:3c:94:cf:fd:88:44:e5:b6:6f:
0d:b0:7d:e3:40:89:13:d5:82:0a:23:92:9f:84:c7:62:6c:d2:
ed:6d:32:dd:cd:88:b0:77:03:27:57:d6:7c:87:2f:dc:f6:ae:
24:39:82:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039yVuDYPbtmoxaslu07bWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZWI3ZjliNTg5NTJiOWU4MGFmY2Y3YmJkYmEzMmIyNmEz
NGQwYTEwHhcNMjYwMzI5MDUwMDM2WhcNMjYwMzMwMDUwMDM2WjAzMTEwLwYDVQQD
Eyg1ZmI5NjUwY2FkNDkzYzRmNTlhYWVmNjA4NTMxNWQ4MmJhNzY2ZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQB+JA0DxOl3AVnMU2XvkCOO2TN
zOlO93zHFSJdbMLUXXKVaR6z5XoSsYagkNlvssCayOhzcni+EavotGLNe8RJupXa
Fifph+NCZ5OQxcX75kwkji9OMqpPKwu9cAmqjVkuYcroaSSzy6QsN4vwrVh5Yqok
sLiJS9Yu7pQRkX4ok3GCFyWR+mPOVx+B0tqdi6P9/IpxjFMIpL61kZN6POMxNEbr
f8PaqKw4DQ+4/TLnyc7uTgQbyoo96gA9s1ZlVCXjRehFtST2rtHbpEC+MP3bwra7
M+f+R8f0iFWhTGms4TqH3wuq9Y9Y2I9PvMNR+VFpHgfE2QgT1ZAO0yu1GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+5ZQytSTxPWarvYIUxXYK6dm+2MB8GA1UdIwQY
MBaAFCHrf5tYlSuegK/Pe726MrJqNNChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTct
ZjdkYWJiMGQyNzg3LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kNmRiNDYtODViMS00MjBjLThjZTctZjdkYWJiMGQyNzg3
LzEvSWV0X20xaVZLNTZBcjg5N3Zib3lzbW8wMEtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm28N9I8
/YjEf17SjP3IpWLVkY/Stg3msmeW56l05SlmAOXJH+oqdzcQk/3CssMd+0o3P/lS
yQw5FZC5PVfR6lg6Xg7ZSDiDQQmfwu/gNyNZauZgVKyXrHMhB6F/VJEbmm25kssq
8fmcqkZOLHwEuUhtwdlFO6kUCgNN/EU7voRVIAlyEQfH3ZX+YnZDYLfnsIZbOzRY
C/32N/dDyfgkGEp45v9LAKchdt4q/E3j6vYdG4ozawQ8fHrJCwjXxUFvtaRgYwFp
ThcUcV/HkBJSPJTP/YhE5bZvDbB940CJE9WCCiOSn4THYmzS7W0y3c2IsHcDJ1fW
fIcv3PauJDmCJw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:56 2026 by rpki-client