Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: J7uMsOWRjvptBk9QrrRH/K1if3XIRAqG/dXfuJ6UByM=
Subject key identifier: 31:7E:96:6A:FB:80:53:5E:E9:C4:20:5F:AB:CA:91:ED:12:E7:77:EB
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 019D37BFEB671DAE4082046DF5D4EA73EACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 0714
Signing time: Sun 29 Mar 2026 04:00:17 +0000
Manifest this update: Sun 29 Mar 2026 04:00:17 +0000
Manifest next update: Mon 30 Mar 2026 04:00:17 +0000
Files and hashes: 1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: KAiobrpGTQcBzbsIm4VXAt3PA44nh5als6T377eZ4nU=)
2: LjoyTAIqIdVonXqWj6vk4FoukK0.roa (hash: bQBFj6QQOo1AQBEY/tE2iTw4IsOMKBpMDv9YhAGGsps=)
3: PAUyEeyz0ynlGNIPQlDkGnYP9qw.roa (hash: rPWU+wKJ+ccuMgvRWcLsdSjoKQhoTdU4QLcfL/aRiOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:eb:67:1d:ae:40:82:04:6d:f5:d4:ea:73:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Mar 29 04:00:17 2026 GMT
Not After : Mar 30 04:00:17 2026 GMT
Subject: CN=317e966afb80535ee9c4205fabca91ed12e777eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:ab:d7:8c:17:30:cc:c7:cb:7e:64:d3:6b:
cd:e9:24:7d:22:26:4c:c6:4e:17:db:0e:e0:62:55:
b1:02:bf:27:f3:6b:31:6b:aa:d0:09:4e:c9:43:7a:
34:a8:67:b1:6a:46:59:09:82:dd:63:29:fe:b2:6a:
9d:4a:7c:6c:67:a7:5a:79:74:32:2a:1b:ff:73:b4:
ad:6d:ee:ab:cf:ab:21:3c:72:58:7d:1b:5e:66:c5:
be:14:47:6b:8e:f7:a4:c3:03:35:89:82:95:1e:a7:
21:f0:65:bd:ff:aa:af:0c:92:7f:79:5e:c6:40:49:
5a:c8:46:54:ee:ed:5b:2f:a8:eb:35:e3:d2:23:fc:
5f:67:77:57:42:1d:6f:38:a9:6b:a1:21:23:e7:c0:
fc:b3:01:04:e6:5f:c6:1b:80:8d:bf:49:4c:f9:86:
82:5f:24:73:5b:14:bb:b1:91:86:fc:7a:e3:c3:44:
9a:e8:04:06:3c:d8:b9:84:d9:37:bf:e8:cf:37:99:
65:7c:fb:12:b5:29:7e:3d:90:c8:13:24:f4:48:6e:
0f:f4:03:0f:79:4e:06:5b:ec:32:05:89:16:e2:8b:
4b:a1:d5:b3:e2:96:f5:f4:7b:68:b7:ef:04:39:f0:
41:48:1f:9a:c9:9d:00:51:07:9a:25:69:09:3a:b0:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:96:6A:FB:80:53:5E:E9:C4:20:5F:AB:CA:91:ED:12:E7:77:EB
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2b:ad:f0:c6:7b:b6:cc:62:0d:f7:26:cf:66:85:f5:a6:c2:
d3:8d:d1:09:80:42:78:9a:35:43:86:51:67:72:2d:1d:e3:98:
5b:d4:cb:4f:4d:0c:c6:9d:67:41:85:b5:7e:2f:77:41:f5:2e:
15:8c:d6:8e:a7:81:14:22:f4:7b:65:2b:b4:83:70:fa:d5:5a:
c3:4f:4f:f6:e3:b0:a2:cc:b6:7b:8e:53:28:36:a2:c3:4f:87:
bc:d5:b6:05:96:6e:88:b9:81:b7:bf:4a:c4:63:30:cb:54:58:
62:ff:9c:32:44:3f:6b:ab:39:b6:e3:37:7e:01:73:d3:ca:4a:
a1:d1:3b:ca:28:52:8c:2d:00:4d:de:33:e4:1e:eb:a0:6b:4b:
62:d2:b5:91:d9:82:d0:cb:14:db:78:e2:f4:97:9d:c0:af:dc:
4c:2d:5f:b4:46:c5:d6:19:a3:bf:6b:11:ca:f8:cc:1d:f3:67:
2d:aa:ae:67:b6:ba:ae:42:e3:b8:01:40:f8:b1:81:14:45:99:
93:3b:8b:93:32:59:eb:c5:1e:e0:0a:8d:27:0b:4e:24:49:c6:
86:d4:05:81:8e:94:a7:54:c2:66:d3:92:89:7c:b0:98:a2:b9:
3d:52:7d:16:ec:af:24:a0:51:12:cb:8e:13:77:5d:94:ef:6e:
bf:a4:46:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v+tnHa5AggRt9dTqc+rKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDZlNTYwYTNmNWNhYzdjNjRmZTBmMTNiZTY2M2Q5NGM4
NzE0NTMwHhcNMjYwMzI5MDQwMDE3WhcNMjYwMzMwMDQwMDE3WjAzMTEwLwYDVQQD
EygzMTdlOTY2YWZiODA1MzVlZTljNDIwNWZhYmNhOTFlZDEyZTc3N2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDyr14wXMMzHy35k02vN6SR9IiZM
xk4X2w7gYlWxAr8n82sxa6rQCU7JQ3o0qGexakZZCYLdYyn+smqdSnxsZ6daeXQy
Khv/c7Stbe6rz6shPHJYfRteZsW+FEdrjvekwwM1iYKVHqch8GW9/6qvDJJ/eV7G
QElayEZU7u1bL6jrNePSI/xfZ3dXQh1vOKlroSEj58D8swEE5l/GG4CNv0lM+YaC
XyRzWxS7sZGG/Hrjw0Sa6AQGPNi5hNk3v+jPN5llfPsStSl+PZDIEyT0SG4P9AMP
eU4GW+wyBYkW4otLodWz4pb19Htot+8EOfBBSB+ayZ0AUQeaJWkJOrDVRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF+lmr7gFNe6cQgX6vKke0S53frMB8GA1UdIwQY
MBaAFCFG5WCj9crHxk/g8TvmY9lMhxRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTkt
NWJlNDY3NGI0NjdjLzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iMjdlYWQtOTZiZi00NTM3LTlhOTktNWJlNDY3NGI0Njdj
LzEvSVVibFlLUDF5c2ZHVC1EeE8tWmoyVXlIRkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiut8MZ7
tsxiDfcmz2aF9abC043RCYBCeJo1Q4ZRZ3ItHeOYW9TLT00Mxp1nQYW1fi93QfUu
FYzWjqeBFCL0e2UrtINw+tVaw09P9uOwosy2e45TKDaiw0+HvNW2BZZuiLmBt79K
xGMwy1RYYv+cMkQ/a6s5tuM3fgFz08pKodE7yihSjC0ATd4z5B7roGtLYtK1kdmC
0MsU23ji9JedwK/cTC1ftEbF1hmjv2sRyvjMHfNnLaquZ7a6rkLjuAFA+LGBFEWZ
kzuLkzJZ68Ue4AqNJwtOJEnGhtQFgY6Up1TCZtOSiXywmKK5PVJ9FuyvJKBREsuO
E3ddlO9uv6RGlA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:22 2026 by rpki-client