Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: 9LKiA0YQHM/LQUJcFtNDzhToMKzkHDNEDSXM35UM0Ck=
Subject key identifier: 51:1F:F8:56:F5:01:74:E0:61:5C:16:AE:60:C3:0D:BF:B8:C5:59:93
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 019E2C284BCBD5B3B5684202F3C2C0318D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 1966
Signing time: Fri 15 May 2026 15:01:38 +0000
Manifest this update: Fri 15 May 2026 15:01:38 +0000
Manifest next update: Sat 16 May 2026 15:01:38 +0000
Files and hashes: 1: 06efRp_YLLMigOISh9p5zbfjQsU.roa (hash: wEc6I99DrGtZKsss8jbEP0QrNOCnTgf0xe2uQcvZ3B4=)
2: 907yoKciXNACwbzosQ9EdtEnzxE.roa (hash: xy6JOgAicMUUYBfqaL/uhSj/UHERrsePLpE/jODbSog=)
3: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: oD9og9QPCo3ZZk+JGmCnc/4tzvWTmjuXc7Npy1mHbd4=)
4: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (hash: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=)
5: YpNQsqMdStbjNN3S7a_DESiBG8c.roa (hash: rW/NJ838iEIy4mWJeYbDa62oyyAeAyZO8CdAfSOuZj8=)
6: YzlzcRhu-iD3ZDhfYDRmSdZddgQ.roa (hash: 753e9bkRX1Fsp5S+P9nf7VxsaR5WwPAEieFcCkQGZ4o=)
7: ikgXwMpWPgQZc8FsPHVC_slVM18.roa (hash: SUfSLegrVe2t+HnXqp8P0ZG10H96D9fqhOh+KXCzXy0=)
8: lTbDS-mdKC-wOe2tJyUFMqe7Ixo.roa (hash: j+q5tfFKIhdF8l8gXHYzOKFfZgBIkRhaLUfw/oAqFXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:28:4b:cb:d5:b3:b5:68:42:02:f3:c2:c0:31:8d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: May 15 15:01:38 2026 GMT
Not After : May 16 15:01:38 2026 GMT
Subject: CN=511ff856f50174e0615c16ae60c30dbfb8c55993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:19:b7:74:bc:b7:62:ec:e8:a0:55:01:a4:
52:a7:52:b9:5b:ff:6e:69:b6:98:1c:df:ba:f1:73:
d1:e2:78:05:a4:11:8b:08:76:43:67:90:43:ca:7b:
c1:1f:ad:c7:b0:db:70:0d:95:54:c7:61:0e:20:02:
45:b6:79:75:6e:11:bc:87:77:29:e1:a5:61:ad:6a:
49:23:d4:ee:0f:d3:b3:56:72:b8:58:e8:b1:1b:85:
1f:2e:b8:86:1b:48:a8:36:c8:db:20:e1:cd:2c:bd:
f4:fa:9a:e3:bf:db:55:8d:0a:0f:fb:82:14:3e:78:
fe:23:06:e5:8f:95:2b:1a:22:5b:1a:9d:e7:14:8b:
f7:58:dc:78:e8:3e:da:47:85:53:dd:ca:78:20:56:
4e:d9:b9:56:69:4b:15:8e:c4:66:7a:c5:2e:16:ff:
49:21:9e:24:a3:5c:9d:f3:07:0c:a8:75:e3:cd:81:
8c:b5:59:ad:ae:b5:17:fd:80:34:21:44:6b:ff:cf:
5e:be:76:6e:0b:fa:df:58:2d:d7:b0:9f:fe:b5:e6:
4c:44:1a:d2:cc:c9:43:68:90:93:1d:6c:65:94:db:
fb:ca:8e:ed:f4:bc:47:e3:5d:2c:ba:86:76:fc:06:
e6:b4:8f:a2:d2:dc:fd:a9:49:24:21:d0:cf:20:db:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1F:F8:56:F5:01:74:E0:61:5C:16:AE:60:C3:0D:BF:B8:C5:59:93
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ae:ce:a8:ad:53:08:63:43:10:6a:a4:29:61:fc:32:6d:e7:
93:fa:03:69:4c:5a:5c:21:18:8c:c4:7a:74:77:77:b2:8e:f1:
24:e6:29:c3:1e:33:c2:7b:7f:56:24:30:2e:ae:df:d7:45:9c:
5b:a6:51:9f:9b:06:33:6d:e1:ad:1f:be:23:c1:73:f1:f8:07:
e7:3b:27:41:46:98:f9:85:61:b2:88:ee:3b:d7:11:13:32:ec:
fe:bb:53:48:19:fc:03:8d:75:41:f9:fa:a1:6e:d7:68:07:45:
56:07:16:4e:6e:c3:56:56:e9:00:53:f7:47:06:0b:0f:c7:aa:
97:3e:cd:c8:5e:3b:78:18:9e:db:22:56:bb:35:d2:aa:3f:fc:
37:85:ce:90:4e:cb:6a:51:1e:18:b2:59:93:27:45:6f:c6:b7:
fe:74:29:a7:c5:d1:c8:91:f2:a0:c0:d7:26:86:db:33:7f:5d:
b7:c7:ed:e8:70:fa:e6:ca:45:42:40:6d:93:a0:c6:9f:f1:80:
0b:e3:8c:21:d9:07:68:64:68:80:90:58:7f:67:16:22:31:cb:
1e:47:1a:fe:c5:f6:b7:8a:ec:5b:23:a0:25:83:3a:6f:07:e0:
3c:47:86:2a:d8:a7:ab:e3:24:b7:56:df:c7:63:7e:db:ca:82:
4c:56:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 20:43:48 2026 by rpki-client