Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: bvYj/P21ilCl0A1gWepIIIdIUix3AXr1Eg2dpbCNuxo=
Subject key identifier: 75:53:AB:16:98:CC:FF:7D:29:B1:8F:AE:AB:3A:F8:62:B4:B1:84:71
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 019D389C31AA5722DC4E5AF3EBFBBE6808A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 159C
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: XZ6uYBP4g3UQmPaSXQnF82WZM5M09WyjVDeSs9y5RT4=)
2: TERNYPeRZxuJ6NCrmwP9jvXvdl4.roa (hash: ezcjhFsSIFuUl+K0MedDme7brzKUDk5NDojpmlSW4ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:31:aa:57:22:dc:4e:5a:f3:eb:fb:be:68:08:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=7553ab1698ccff7d29b18faeab3af862b4b18471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:55:c5:28:e1:62:95:a4:26:18:e2:b8:f4:
ae:53:ba:29:5e:90:61:62:68:49:13:27:c1:12:bb:
8c:d8:8a:90:f4:6a:6e:31:74:b0:65:05:f3:a5:b1:
0b:92:16:fb:8c:16:fe:f5:e5:28:a3:9f:43:89:58:
8a:6b:5e:d7:26:28:86:91:8a:95:da:80:47:4e:20:
af:f1:b1:0a:56:85:4a:29:7f:6f:b6:b6:0b:13:aa:
65:b2:7a:2c:37:ca:b0:2c:93:8c:b4:81:a3:18:1f:
0c:df:d4:38:e9:95:51:82:59:be:eb:0f:5f:83:5f:
19:89:91:5b:7e:5d:25:10:e0:ef:0a:e7:ad:38:b3:
ba:a2:54:a9:b2:17:f3:93:21:c6:d9:e6:fa:6e:8b:
3a:a5:2e:f8:f9:d3:c4:05:d7:f1:87:b3:96:47:ac:
5e:84:2b:9d:1e:3f:0b:49:78:19:ea:1b:fb:b3:24:
77:2f:64:fe:41:3e:aa:86:1a:9e:67:9d:35:54:d2:
11:05:f1:00:b0:38:9f:04:59:0e:8b:e2:76:45:1b:
72:3e:8b:f8:f4:33:91:0b:b7:26:15:6e:27:e3:ed:
97:19:f7:af:a4:3c:e9:3b:04:94:8c:94:9b:81:be:
54:b3:64:47:47:73:f7:ab:0a:1e:48:b1:d7:ca:4e:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:53:AB:16:98:CC:FF:7D:29:B1:8F:AE:AB:3A:F8:62:B4:B1:84:71
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9e:79:a3:6c:cd:3d:42:51:5a:09:fd:4c:f5:65:99:14:16:
f9:66:83:da:79:f9:52:de:92:7f:fa:22:4a:97:31:cf:9c:7d:
15:c1:3b:61:9a:c0:1f:4d:fb:c4:e0:6c:e5:1d:ff:92:bf:7f:
fd:18:df:57:9a:36:54:7d:50:d4:79:2f:76:7d:f7:b0:22:3b:
b3:7e:35:9a:ef:d2:d8:e2:cc:41:b0:6a:48:d8:46:71:df:c7:
d6:dd:5a:57:78:44:fc:84:2c:58:30:c9:e9:c9:d8:99:ab:99:
24:66:8e:dd:ae:65:42:99:95:28:28:b2:6f:15:0d:88:d7:eb:
4b:fd:c7:59:9a:51:08:17:01:a5:46:cf:f1:a5:d2:46:df:22:
fc:90:b1:55:78:04:23:4f:70:43:de:18:c8:97:16:67:38:b0:
00:2c:43:73:91:35:ae:96:e1:ca:55:4d:c5:39:9d:80:58:c2:
7e:b7:98:a5:d2:35:0f:c3:8f:f9:c1:e0:91:22:ea:56:8e:db:
4d:1c:35:70:79:55:cb:ad:77:ec:68:e8:e5:d2:d8:8e:8d:2d:
4c:ad:53:b3:6b:2d:ed:61:70:4d:a9:b8:dc:07:4a:1c:3c:39:
22:03:98:7b:26:34:4e:79:7c:87:22:0f:51:73:39:ff:0d:a5:
42:ae:e2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:05 2026 by rpki-client