Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: lZgM5Dgc+B/HG/jf/CygQgyvE0T5fRw8u7c7nIjrrRU=
Subject key identifier: A6:21:D3:99:EF:90:53:96:5D:1E:15:27:C9:6D:35:27:C2:93:AD:CF
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019D2F61A18C46C2C65C074D36173485B002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1315
Signing time: Fri 27 Mar 2026 13:00:20 +0000
Manifest this update: Fri 27 Mar 2026 13:00:20 +0000
Manifest next update: Sat 28 Mar 2026 13:00:20 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: dqj6veTixaPZTgpwayL2IIG5aztvjBchoPF6dGFPY0c=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:61:a1:8c:46:c2:c6:5c:07:4d:36:17:34:85:b0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Mar 27 13:00:20 2026 GMT
Not After : Mar 28 13:00:20 2026 GMT
Subject: CN=a621d399ef9053965d1e1527c96d3527c293adcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f1:a8:eb:fc:6b:b4:c5:f2:b3:8b:03:c1:af:
7c:7d:ca:d6:94:78:ab:a4:c0:95:14:cc:40:9b:6e:
98:a7:8f:82:8f:ab:aa:4f:74:d1:b0:af:a9:ca:aa:
c6:95:8a:e6:8d:01:e4:00:90:c7:20:32:ae:39:0f:
40:ef:ce:1b:48:61:b0:d7:2c:97:00:0a:ce:37:11:
07:3d:02:c8:c4:b5:c8:6e:56:c4:83:5f:ec:81:cf:
ad:98:4e:3f:13:fe:3d:a9:7f:e8:5d:19:a5:52:85:
11:cd:ec:e5:41:a0:c4:81:56:bc:d1:df:2b:30:c5:
36:44:7b:bd:6d:a1:ba:e5:28:2a:be:84:e1:f9:2b:
02:4c:dc:7d:16:4d:6f:dc:e9:e1:62:37:b5:af:4a:
5d:64:72:a0:2d:34:e6:57:dc:4b:0d:30:1a:17:c8:
3a:b6:8a:61:1e:00:7d:95:32:89:fa:00:99:35:bc:
27:62:5f:2f:66:78:f9:af:3f:e6:7f:79:d5:fd:bc:
19:f2:ca:7b:07:b8:cd:36:cf:d8:a8:bf:0d:10:99:
a2:b7:37:0f:31:52:2d:12:9c:21:53:b5:8e:a5:59:
9b:e7:e2:1b:4a:ad:c6:25:48:10:69:4f:64:20:2d:
98:ee:dd:88:95:8b:2d:a8:c0:7c:d2:b0:fe:96:ae:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:D3:99:EF:90:53:96:5D:1E:15:27:C9:6D:35:27:C2:93:AD:CF
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0d:0f:9e:ab:5a:ad:6f:c1:3b:5d:79:29:e8:6d:32:95:72:
c0:9d:3b:d4:bb:a7:20:2e:6e:41:27:bf:68:6a:2d:32:d4:4a:
39:ca:5f:0f:3b:95:d7:42:9e:9a:28:0f:c1:a6:9f:08:43:2b:
c9:aa:7a:bd:74:b2:65:30:20:a5:d1:6a:10:58:ff:54:33:77:
40:96:30:1c:8b:f2:16:5e:e7:88:4a:d1:b5:d5:da:32:36:92:
fd:f2:f8:cf:79:68:01:bf:4a:fe:28:e3:a9:b3:52:ea:9f:74:
67:c2:a7:3a:1c:fb:60:14:c4:a2:5b:60:96:0b:eb:40:f2:55:
bc:48:22:0c:69:68:57:96:ef:13:e3:f1:50:12:e7:6d:15:03:
93:68:fd:20:0d:95:5d:f8:3b:d8:71:90:a8:04:f8:b9:45:08:
f2:96:d1:07:15:4c:98:c4:52:50:5c:96:d7:00:7b:76:09:82:
a4:93:46:ee:61:e2:54:89:f0:d9:22:a9:c3:a8:bf:c3:04:cf:
f8:9a:8f:fd:6e:00:60:ee:21:ce:c1:f4:1a:00:0f:26:51:ee:
31:a3:1b:bc:d0:10:76:aa:36:1c:29:a8:8b:3b:4f:da:91:c1:
d2:71:8f:a8:e0:b2:58:43:66:32:24:31:98:8d:1c:05:ef:a2:
68:a1:99:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:27:42 2026 by rpki-client