Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: k6RT7BsI6PWsYFFpS3eFOGiACzNCEeosUEM+fEVN+TY=
Subject key identifier: 86:54:C4:8E:96:88:CB:FF:87:12:D7:AE:C8:7D:7D:53:23:C6:B3:82
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 019D382E31FE4971AE4B7CB390D499DF32C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: VzL5RLnlQJ3wSeF6IZXD0hLHbzI.roa (hash: rYHDP0eMxniB9OvjMw+m6Idpm0cWRBfVpSJ7IC660D8=)
2: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: H0fghVnJe57gHYbkozycYIkEYUWhSm+/0rlBXfB45X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:31:fe:49:71:ae:4b:7c:b3:90:d4:99:df:32:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=8654c48e9688cbff8712d7aec87d7d5323c6b382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:c0:2e:47:32:7a:68:e2:e3:67:b1:83:92:
64:28:cf:76:23:1c:62:af:cf:c6:61:da:4c:e8:90:
6a:85:b4:ce:b8:8d:5e:72:16:04:c8:d2:aa:20:75:
80:de:45:72:43:d3:d3:02:23:0f:92:6f:0a:1b:bb:
98:fc:55:fa:a8:c4:0e:e3:a5:33:24:aa:da:23:ac:
40:25:e3:17:75:f3:13:09:af:ad:98:93:b5:e1:3b:
6f:bf:5a:78:39:d3:55:f6:3e:ff:0d:0c:06:59:1c:
ae:d7:15:fd:51:b8:9b:81:09:51:3e:86:4e:98:71:
0d:fd:6f:a4:ab:c1:27:fb:71:0c:9a:50:83:6b:0a:
76:a6:b6:73:27:7c:00:9b:09:d4:53:d1:a5:3d:37:
c7:04:6e:bb:6c:5f:67:4e:8f:83:98:01:ba:36:f4:
c9:65:6e:8c:30:00:0d:88:e0:d9:a0:42:3e:5e:0c:
a8:8e:93:81:d6:ad:66:1a:ad:6a:de:3d:69:48:ab:
09:47:6b:b1:28:04:e9:94:4d:2f:a9:a6:51:fd:ef:
e7:3a:e8:9d:61:1e:18:e5:c0:91:15:19:14:2d:ef:
7f:ae:72:4b:2c:a6:35:0e:05:a5:c2:9d:30:4b:ec:
76:f6:07:37:5b:75:d3:ad:6d:bb:39:de:a0:a3:ff:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:C4:8E:96:88:CB:FF:87:12:D7:AE:C8:7D:7D:53:23:C6:B3:82
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:66:2a:71:b6:38:0d:0f:f1:90:d9:90:b4:45:01:cc:33:3e:
f7:79:50:7e:ec:82:28:79:4e:53:35:21:c0:67:e0:ec:b0:05:
00:6f:c2:82:8d:aa:12:2a:e2:47:e6:18:b8:7a:88:5d:7c:15:
8b:07:7c:91:f8:f4:9e:d4:e9:1b:dc:e6:77:d4:78:1c:7e:16:
d5:c7:3a:73:f6:0a:77:27:a9:9e:93:e7:9b:db:70:25:ed:9d:
47:c6:15:dc:84:84:d5:75:0b:72:99:e6:d5:0f:de:6e:2e:57:
37:89:a3:9e:d5:83:36:ae:ba:c9:1e:d1:05:f8:39:7d:1c:34:
3e:d1:79:58:1b:6d:40:a1:ab:43:60:12:de:6b:5d:0c:36:7d:
fe:93:5d:89:ae:6a:c5:18:d1:58:e2:1c:bd:ed:75:ba:8a:8b:
f8:7f:f9:62:a8:90:97:a5:96:4b:a3:43:96:fb:b1:16:33:1f:
39:fa:1c:31:d3:a8:74:91:f1:ab:08:34:23:56:1f:ca:b1:f8:
ff:bb:b1:42:a8:20:c3:29:59:61:d1:e0:31:30:be:64:6e:85:
e2:7f:5a:17:c7:2d:7a:34:48:f4:a7:49:9a:0d:ce:6f:62:97:
6e:ea:37:6c:d4:f4:ea:89:57:9d:58:fa:ee:de:71:8d:5d:71:
fc:2e:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:32 2026 by rpki-client