Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: 3Z+Hq5XQZGtLsrlLVw/K6Z6Li8lvEyODdmK0PhVp1Ik=
Subject key identifier: 75:93:71:06:16:37:82:75:AC:DE:90:0F:40:9E:27:8E:0A:4C:A7:9D
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019D37C09436376582B78960779CFE6DB26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: 4Yk_IaIMOFlSvQlmWzU3D7V9Ww0.roa (hash: 95l63lLqTUI0fetfFavGHFZZGMfnTIwSEKulFFxrxpc=)
2: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: Vx8CipN+4BFSju1GtC316hxbaoRsb2qTPlITMfBWO+M=)
3: XuKWpFnXaJB0gtal7fqUS1fMEg8.roa (hash: fZ0gDaNy7iCopngCMQx3WGFJao02SoThGdAJ/JuVVp4=)
4: YkLn8tz3hbcMIIBgz23I2SUwFt0.roa (hash: 7e3Ahg7cLmv6KRLYOyXJchFQCZ5bapXqbWjili8cMRY=)
5: i2ip3ClaBDk8K-xOqpebdwt1qZk.roa (hash: n9wEOC6qCVKNONqpdVLm6uWq7MOOkRaDBcCMVsbbO38=)
6: ogEjhX2zW6tgVtz_pOmSPCqvyBk.roa (hash: dF9i4unUQNdYa+sgOQav50pelR9XCvdYshIMM/dzsiM=)
7: sD8yyKxgqD60hgzKcX-gPGQxeh4.roa (hash: //5uDqVbcxyKWzTpZS8757S/2Ry/Wbbw/UQbM8VY0LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:94:36:37:65:82:b7:89:60:77:9c:fe:6d:b2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=7593710616378275acde900f409e278e0a4ca79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:d9:a1:50:94:cf:58:59:b7:88:7d:a6:79:
82:a5:13:b7:cf:2e:29:5f:02:0d:f6:b8:4e:40:5d:
87:96:41:b1:95:3a:7b:e5:2e:bc:64:c4:db:0e:22:
fd:d7:e0:ec:1f:59:08:d2:e2:b6:a4:3c:8d:e2:b7:
ac:fc:d3:e3:5d:f4:04:21:65:00:03:80:a2:22:db:
a1:3c:91:a2:75:6e:6d:60:d9:0d:c3:6b:47:22:a0:
36:24:45:05:1d:72:ba:08:7b:d3:da:81:58:f1:93:
58:79:2a:32:02:57:b9:a9:6e:a0:5a:d9:2a:84:36:
7c:89:b1:f3:d6:8f:17:95:eb:01:0f:dd:0c:4a:d8:
33:6d:f6:cd:1c:84:9f:d2:be:fd:eb:e1:f8:ba:e4:
8a:8c:c7:6d:4f:fd:1d:61:0f:80:08:1f:20:b3:ff:
8b:ce:fc:4f:39:65:9d:5b:d8:21:ec:c8:fc:45:10:
bc:73:e5:c2:a9:8a:20:f3:e5:54:e6:b0:56:29:fc:
30:a8:05:31:d5:e1:ba:b8:5d:c0:6c:43:e0:a3:10:
68:74:db:ba:d6:b6:69:d1:32:3a:b5:26:61:5f:c8:
b1:a9:dd:fc:ff:42:45:d9:9c:f5:9d:6c:9d:91:e4:
3a:3d:25:20:7e:c8:d2:93:20:23:bb:c0:f8:00:7b:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:71:06:16:37:82:75:AC:DE:90:0F:40:9E:27:8E:0A:4C:A7:9D
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9b:0c:c3:7e:cf:09:58:93:09:7b:73:31:d8:e6:91:74:3f:
aa:ed:a1:e2:2c:dc:07:48:16:ea:c5:89:82:5f:cc:a6:a2:07:
44:10:d6:80:86:64:b7:f7:64:12:f2:79:b2:ef:b7:54:64:ce:
2a:c0:eb:ee:61:30:75:a7:b2:0d:c1:aa:37:12:e2:3e:f4:06:
40:c4:ea:c3:87:24:66:d6:75:5f:06:40:51:f0:62:83:10:7d:
b0:80:ba:0f:51:48:0c:93:b7:ec:b1:78:23:07:c4:33:32:1a:
9d:d5:24:f8:3a:75:8a:08:16:f2:66:69:a9:cd:50:d9:ff:26:
8b:13:1d:c3:fd:8e:b1:b2:c2:aa:64:a9:9a:65:07:32:30:a5:
54:6c:3d:5a:72:a0:4a:ec:fe:a5:a8:62:ae:63:e8:6d:3b:39:
fd:c6:46:96:1e:cc:8a:bf:e5:2d:b2:0b:30:a9:7c:31:0c:76:
9d:52:3d:d6:e1:ab:16:b3:34:7e:e8:b7:94:5b:95:02:d7:21:
b0:52:0a:d9:de:b0:08:65:71:08:00:a5:75:fe:e8:d1:d2:bc:
63:02:5c:88:48:67:b7:e8:4f:15:fc:86:f0:a0:99:0c:a7:55:
8c:f1:ec:db:df:20:39:4f:53:07:05:ac:c3:f6:a0:86:5f:70:
ae:b6:1b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client