Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: JpPqv/nbeSRlqxpYfCignemDKoyL6S5pnTGhVioPbPY=
Subject key identifier: AA:84:08:7A:F2:5A:B7:F3:A8:48:94:3D:21:B9:98:73:61:82:1B:14
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 019D382E8CD3B503F48F2594BB2805EC1FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:01:07 +0000
Manifest this update: Sun 29 Mar 2026 06:01:07 +0000
Manifest next update: Mon 30 Mar 2026 06:01:07 +0000
Files and hashes: 1: EkKLuZw4LV_kTAmqXpErqPpsQB0.roa (hash: NBo+lqt+AsFMxVrnLsaa8l21I1AWQ5KFNlmQ5ApE1BQ=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: e9wucbD6nTP7WHdd1JR7icC46WyPvO8aOIols3nfqhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:8c:d3:b5:03:f4:8f:25:94:bb:28:05:ec:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Mar 29 06:01:07 2026 GMT
Not After : Mar 30 06:01:07 2026 GMT
Subject: CN=aa84087af25ab7f3a848943d21b9987361821b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:3b:88:a4:ba:0c:21:73:67:c2:df:fa:c4:
77:4a:6a:f8:48:62:a7:45:12:c2:38:99:85:01:46:
2d:6e:fa:37:89:e2:48:63:25:eb:76:58:72:8f:c1:
b4:e5:51:46:53:d9:e6:c5:a3:6b:7b:bf:5e:9d:e0:
16:d0:c6:a1:5f:92:88:84:a8:13:9a:cb:c4:32:5b:
7a:16:15:6d:c9:29:98:fe:19:ca:f1:ba:df:9c:57:
7f:55:17:ea:60:e4:d2:30:05:be:79:d6:86:a9:d3:
dc:69:02:51:f0:9b:04:fd:80:eb:c6:d3:fd:bd:fb:
97:f4:46:85:37:91:8c:60:b3:fa:97:6c:4b:42:14:
60:0a:84:46:16:5c:e2:f6:3e:19:56:08:9e:89:e9:
cc:fa:79:15:17:af:14:99:1f:22:5f:d4:f9:2b:c3:
79:e1:67:4d:7c:f0:d3:f6:f1:b9:05:e3:6d:03:6a:
21:a8:03:ca:19:33:43:d6:17:6f:c2:37:08:36:59:
8c:be:c5:30:ba:91:e6:3a:82:ff:c3:c7:0b:98:47:
5a:fc:0f:fe:d6:d6:40:6f:32:89:b7:2b:2f:e4:ef:
77:f3:01:cd:07:00:0e:aa:88:9f:8a:37:fa:44:b9:
a9:f9:1f:f1:e7:47:79:cf:a7:cb:79:51:28:97:8a:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:08:7A:F2:5A:B7:F3:A8:48:94:3D:21:B9:98:73:61:82:1B:14
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:74:0f:09:c0:33:2f:8a:51:cc:0c:13:96:86:54:53:8f:75:
ec:24:7c:ab:f3:3d:7b:b3:30:f6:ac:5a:42:83:91:35:3b:0e:
6a:70:45:4e:3a:9d:11:ae:25:ab:c7:31:84:69:21:42:2e:12:
6f:14:11:47:33:af:c3:71:1e:24:0d:4c:13:7d:64:a2:9d:b6:
30:bb:b8:d4:0a:84:ec:ae:76:2b:23:32:ae:cc:7d:3f:3a:fe:
56:38:c2:97:ae:16:30:c7:23:92:45:70:c8:86:d4:47:d5:28:
de:5a:d5:c0:d2:38:ec:69:9b:9c:77:cd:06:5a:79:e1:c3:08:
14:d3:8e:69:17:eb:2e:10:89:db:07:9c:1c:47:a5:e7:48:1b:
cc:f9:da:dd:39:f9:93:97:b8:e7:a4:68:e3:af:a2:f1:96:01:
a0:e2:7e:71:60:e3:d5:db:7c:7f:88:b1:19:f1:eb:c4:94:ec:
da:0f:53:52:6a:18:a5:28:21:1f:a7:ed:46:e3:46:01:41:4a:
a1:f7:8e:08:5a:69:88:78:18:93:fe:0a:a5:fa:8a:cd:1b:d2:
bb:4e:2c:0e:2a:ba:14:0f:56:8e:f8:a2:f3:27:e6:8f:98:b7:
7c:d8:de:b9:55:4a:51:0f:24:52:fa:6e:ac:e7:d4:a6:98:2e:
e1:be:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:29 2026 by rpki-client