Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: m1een3AR2hknRE5rEAwe5kOtHKhS8RfTk7rnRAcKOaI=
Subject key identifier: 13:24:D2:D8:EE:2B:A5:D8:BE:4B:4B:E0:74:82:C1:39:78:8A:79:4E
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 019D371BA2DA27A08F0E4A734285F711EC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 16AD
Signing time: Sun 29 Mar 2026 01:00:51 +0000
Manifest this update: Sun 29 Mar 2026 01:00:51 +0000
Manifest next update: Mon 30 Mar 2026 01:00:51 +0000
Files and hashes: 1: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: pmpmmd/SzFHMnN885QIfFoB4xKVoyRbNGKquZekhG2I=)
2: Vhdyvlmm2QhYL_DxOw7zRtqN9Zg.roa (hash: Fgu5qryHdVy6pShgsQWdQm6ItENpj8eEaKZ2+YL90F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a2:da:27:a0:8f:0e:4a:73:42:85:f7:11:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Mar 29 01:00:51 2026 GMT
Not After : Mar 30 01:00:51 2026 GMT
Subject: CN=1324d2d8ee2ba5d8be4b4be07482c139788a794e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:23:73:48:5d:73:90:d3:2e:e5:71:6f:6f:
10:c0:61:b3:e5:a2:e9:7d:d7:75:ba:81:13:6d:72:
f0:78:82:0c:b7:72:ec:4c:c9:de:1b:b6:16:2d:17:
a1:dc:5c:ce:43:66:ce:3b:d0:1f:8b:16:45:14:5a:
2b:d6:45:63:74:c0:a5:6a:8f:8e:65:5e:bc:e0:27:
2d:c6:1b:07:80:e7:2c:6c:1c:90:d8:6e:db:99:dd:
dd:87:b4:f0:96:9c:bb:59:3d:5c:d3:76:df:0e:d7:
84:cd:e3:55:06:b1:23:fc:77:ae:bf:f5:1e:20:08:
d1:e8:03:09:e8:32:d3:84:25:0c:42:43:01:c5:8b:
3d:4f:0d:7f:cb:2e:63:f1:33:9e:b5:b3:be:65:82:
5c:d0:f6:bd:aa:e4:e5:5b:8d:92:62:f8:da:37:af:
f9:7f:af:9a:11:02:ae:ea:4c:ca:e2:d5:57:65:5b:
60:c0:a2:8f:4a:d3:7b:66:c5:97:a0:42:d6:05:c2:
14:40:ea:e0:07:b3:02:d3:a6:eb:4f:5f:ea:87:ed:
ae:07:b9:d8:6c:60:f0:e0:63:33:23:c6:4e:dd:f0:
6c:08:d9:63:91:c2:f4:c7:de:83:7c:5b:d1:8c:df:
fc:0b:37:d0:9d:5f:27:fb:03:a6:72:85:fa:1b:70:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:D2:D8:EE:2B:A5:D8:BE:4B:4B:E0:74:82:C1:39:78:8A:79:4E
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:86:2c:16:9d:ee:ad:89:a6:e2:9d:98:9b:22:63:fd:f2:
80:7d:8d:37:49:3c:ae:b8:45:85:c0:ab:58:4b:aa:c6:9f:7b:
62:07:2f:5e:6c:30:58:29:b8:0d:05:ae:25:7c:f0:ee:19:30:
b7:4f:15:52:1f:e2:fa:d3:09:49:20:b6:50:16:05:ee:ba:69:
45:2a:d9:82:b0:9f:b0:7f:4b:28:b1:05:fe:61:cc:1d:70:22:
15:63:7e:aa:06:1f:fb:bc:43:6d:d8:03:dc:e3:9c:0c:56:b9:
af:d4:c2:03:5f:08:bb:8e:6b:81:48:49:80:23:d3:03:c6:ba:
c4:f8:f8:9f:45:7b:5f:11:5d:d9:37:cf:0d:f8:88:7a:41:c2:
55:da:fb:86:1d:bc:11:2d:42:7c:9d:d3:db:56:70:25:14:c7:
88:e2:b2:0d:f1:66:06:95:ca:92:a8:af:bf:c2:b4:23:0d:38:
b1:be:77:e7:fa:fb:4a:ed:bd:b5:b5:0e:b8:6d:4d:05:34:be:
0a:b3:21:da:a6:28:5d:71:aa:7a:44:a7:79:5f:0e:b7:43:b5:
56:bf:10:fe:09:31:b2:92:dc:82:83:5c:c8:2f:df:1f:16:95:
3a:a7:fb:e8:ce:ab:0e:12:79:07:c4:3e:93:08:dd:1d:84:c3:
14:1a:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:34 2026 by rpki-client