Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: 5M1ijL/IXxtL/7wFbfB7H2q6M9kSuiOdR7fGcSYwgIU=
Subject key identifier: 63:04:BB:A5:6E:9D:BD:7A:05:15:B1:5A:4D:4D:0D:FB:4E:AD:CE:BA
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 019D389BF8F3A2F1BDDB692EE4C7ED337752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 07A9
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: Fg9+WUCSmYvOSpTo6NJHtvLliDBtgLhHD+bn2TOUI0M=)
2: TGA4vVujs0yD_obPFPyktqNpDgc.roa (hash: 5S5Kx8RY4RfrsLwFClyqoZagN1DyIRqE+8qw4ESGtGA=)
3: vYa3Ih6LXEOuOYMk9rXJWrFe8TQ.roa (hash: cUJ90bZFPukFANzteUEP/DKwx2ymm3AfgIUKRxH9Byw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f8:f3:a2:f1:bd:db:69:2e:e4:c7:ed:33:77:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=6304bba56e9dbd7a0515b15a4d4d0dfb4eadceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:c0:58:a8:e4:53:7d:e8:a4:81:a8:70:bd:
da:52:ed:6b:b8:ec:62:45:fb:4d:c2:74:32:72:c7:
13:c8:20:d1:30:87:42:b5:89:1e:31:d3:6b:06:65:
5b:28:f9:ce:f0:f8:a9:4d:77:77:61:80:e8:48:de:
36:ea:88:ef:76:2f:0c:72:3c:eb:92:71:3b:88:c5:
10:75:a1:0e:ed:8c:31:40:70:e8:a2:53:ba:e3:5e:
cc:a8:af:ee:04:ef:ee:78:1c:f7:1b:86:8f:5f:91:
fb:b5:e2:59:a0:76:ae:7a:2c:e4:ff:8d:ad:f1:76:
b3:1a:d4:26:28:73:53:30:56:0d:95:82:22:2b:72:
b8:5b:a4:60:bd:45:a2:6e:2f:a2:62:0c:b4:c9:a5:
29:d0:93:ed:20:b0:c9:63:56:09:2e:cd:07:26:37:
ba:6e:2a:f9:75:e0:87:ff:00:51:c2:29:cf:db:52:
79:50:1a:99:d9:a0:2f:67:ba:08:49:80:2c:28:59:
5a:9a:97:8b:ae:66:86:91:01:42:f8:b9:a1:b1:02:
14:6c:c0:19:60:f3:18:02:8b:59:10:03:9c:8f:10:
83:e7:d0:9d:58:17:f8:bd:2e:0a:78:8a:85:4a:70:
22:2e:3f:77:5c:12:f3:72:f0:b3:6a:df:22:32:16:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:BB:A5:6E:9D:BD:7A:05:15:B1:5A:4D:4D:0D:FB:4E:AD:CE:BA
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a7:1b:06:9d:ca:3a:75:56:2b:03:35:80:aa:9e:e7:72:54:
52:ff:f8:0d:a4:5c:46:c3:30:c7:32:25:14:98:11:03:67:ea:
24:db:b3:e4:53:e6:e2:74:2f:cf:46:63:40:6b:0b:e1:5e:7f:
fd:ff:99:dc:fa:25:2e:f4:eb:ca:ca:66:b0:2d:c2:b6:c5:60:
a4:9e:88:c3:f7:d6:65:36:37:3a:41:a2:7f:54:5f:2f:a9:9e:
c6:a7:8e:9a:59:69:fe:7e:5e:42:f1:9c:ec:6f:01:26:2a:fd:
f6:47:0d:32:90:64:84:ee:60:7c:d5:c1:89:f1:52:c8:e7:3d:
26:c0:2d:f6:b9:16:15:0c:d9:2f:a1:60:65:6b:23:52:af:71:
eb:8e:ef:8c:b3:9e:74:6d:37:75:4e:5b:58:ab:78:b6:3b:20:
ce:8b:e9:ee:a1:2a:1a:b9:b7:66:27:0b:d1:22:e9:0a:cc:a9:
46:ec:b1:66:a8:98:12:80:8b:16:e0:b2:40:cc:0d:c0:94:5d:
7d:c5:6c:f8:bb:e3:bc:47:af:4d:02:9d:f6:10:3b:30:16:f3:
63:67:03:67:9e:b8:df:3b:d4:b9:75:c1:11:70:d8:ae:8e:7c:
f7:85:65:f4:9f:50:15:e8:ad:5d:19:3d:03:55:c9:7a:bd:1c:
b8:3c:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:55 2026 by rpki-client