Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: rFmE454OOKIJZ6dvaPRN2wXel9uKUOzQV3TdWitQURQ=
Subject key identifier: 37:44:CC:35:EA:61:61:07:D0:08:22:C0:7C:4E:A0:B9:B5:DD:F2:A9
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 019D39415146B8BEA451AF88F22DFCE7702A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: OH0+p8rDmfeGJIEyKUiok0KAKnq492TAlpHFsVkDDBA=)
2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:51:46:b8:be:a4:51:af:88:f2:2d:fc:e7:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=3744cc35ea616107d00822c07c4ea0b9b5ddf2a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:76:3b:ae:e2:2a:03:16:9a:13:80:8d:5e:
82:91:1b:b4:34:bf:1e:35:50:7f:3b:0c:84:1c:e9:
bd:f1:e6:7a:0c:4f:b4:b7:e0:66:35:70:7c:46:c8:
3c:3d:6e:c6:62:bd:ea:78:b0:14:85:d4:81:f2:f2:
56:53:4c:ec:20:be:44:95:dc:60:8c:bf:f8:c0:a5:
9d:b0:92:fe:f4:05:fa:04:c2:95:38:c5:a6:cf:75:
5a:69:ad:3d:45:e8:8e:9c:66:5b:7d:63:18:55:b4:
c2:92:9b:d7:fa:8f:49:8d:2e:89:97:32:ad:eb:db:
3f:58:08:5b:4d:7b:75:9b:42:f7:d6:4a:08:72:1f:
a9:68:ee:5e:d0:db:8e:31:1e:69:7a:ef:1f:d1:1f:
dc:50:db:20:db:2d:c1:03:e7:3d:d0:8c:ba:3a:af:
28:cd:89:55:5e:df:ea:1c:9f:e0:c8:f2:6b:ed:e8:
73:ed:b5:c5:62:23:05:ff:3c:fd:a6:43:38:39:55:
df:ec:6d:84:58:54:b6:46:a7:ce:43:d5:cb:90:da:
3b:fa:fb:75:71:01:f3:b2:a7:6d:d2:f0:1f:01:6f:
9a:7c:89:83:6a:ed:44:70:63:d9:15:43:16:8f:f9:
dc:ff:29:9e:a5:c5:58:bf:f6:d1:4d:5b:f8:25:45:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:CC:35:EA:61:61:07:D0:08:22:C0:7C:4E:A0:B9:B5:DD:F2:A9
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:b3:c9:7b:8e:b3:cc:bb:fa:49:67:a2:b9:e5:91:9a:e3:
4b:20:de:91:6a:09:c7:0d:3f:29:7d:0a:60:ea:da:c5:32:28:
b7:ed:f6:6c:4b:a2:35:7f:e2:f3:7e:93:9b:fb:d8:6c:56:fc:
ad:33:44:88:0e:c0:56:ee:23:fb:47:0d:1a:1d:11:73:ea:5f:
f9:42:3a:17:cc:da:6a:45:66:da:98:47:ca:ac:26:c9:bf:8d:
b7:3b:8f:45:29:7f:ce:28:e8:02:be:db:3a:65:cf:24:ff:65:
43:ef:e2:70:b9:9e:81:c4:af:a2:0e:21:a7:39:e4:4e:51:2a:
3b:1a:9d:3e:fe:2a:cd:e2:73:e3:a9:8d:d7:4a:31:75:79:c3:
ba:da:04:e9:ab:55:58:81:40:eb:e8:15:64:63:79:89:f3:2b:
dd:29:81:e4:3d:46:cf:5e:59:7f:f6:a6:10:20:33:f9:ab:6e:
4b:07:52:15:aa:4b:ba:81:a7:4d:7a:57:81:b4:fe:80:c9:03:
4d:ea:e1:56:8f:af:b8:33:cd:ee:1d:a9:2d:4b:b4:12:4a:65:
cc:e9:db:a6:b1:74:6a:b0:dc:d6:b1:48:ef:8a:e5:f4:cc:45:
3d:35:22:31:fc:96:78:01:b1:10:f6:74:30:47:31:f2:d6:12:
56:ef:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:46 2026 by rpki-client