Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
File: I6ec9SWGV3ZHm825K0L81ZANT9Y.mft (raw, json)
Hash identifier: ZJzHMi9+328kOdoA7/USD0wQAfRLT0ywa9nwB0PVNpo=
Subject key identifier: 3C:4A:0A:86:01:A4:D3:4C:FD:06:BE:30:F1:64:95:51:C5:BA:60:42
Authority key identifier: 23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6
Certificate issuer: /CN=23a79cf525865776479bcdb92b42fcd5900d4fd6
Certificate serial: 019D2816F4338105CDBCDEDC874BD2CCAB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
Manifest number: 0247
Signing time: Thu 26 Mar 2026 03:01:25 +0000
Manifest this update: Thu 26 Mar 2026 03:01:25 +0000
Manifest next update: Fri 27 Mar 2026 03:01:25 +0000
Files and hashes: 1: I6ec9SWGV3ZHm825K0L81ZANT9Y.crl (hash: A1SKdH/LV8VDqo16pYkOkadzW+bFVpJ0Y3ucU5M93/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f4:33:81:05:cd:bc:de:dc:87:4b:d2:cc:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a79cf525865776479bcdb92b42fcd5900d4fd6
Validity
Not Before: Mar 26 03:01:25 2026 GMT
Not After : Mar 27 03:01:25 2026 GMT
Subject: CN=3c4a0a8601a4d34cfd06be30f1649551c5ba6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:7d:43:c4:90:c7:0c:96:da:79:fe:29:75:
d9:e1:76:bf:30:4e:2a:4c:34:5a:24:67:f5:93:0f:
9e:4e:07:e9:a2:63:9c:01:ba:cd:9f:5e:59:b5:1a:
2b:d7:7e:57:df:df:be:77:fd:7e:a9:36:f7:ab:cb:
90:7e:78:b9:06:25:6d:12:e1:2a:85:4c:1e:91:98:
9d:ae:36:f7:9e:70:a9:72:f3:e7:75:2f:2a:3c:9f:
91:6a:f8:ce:08:0b:09:d5:2d:72:08:4a:38:c5:d6:
47:3d:9f:31:b4:dc:01:04:e7:2b:f2:be:1f:ac:81:
aa:dd:fc:20:3f:90:b5:c3:ed:9a:26:c6:1d:df:8e:
5f:e7:96:da:b8:ae:15:a1:8a:2c:2d:e8:45:29:95:
2c:b6:b7:8f:52:47:f9:6e:1f:77:a9:ca:91:90:cc:
f5:ab:26:f7:73:f8:c2:e9:e9:ea:26:17:4a:40:cd:
5b:7e:75:e6:94:48:30:14:b1:93:5f:2c:9e:76:ff:
7b:94:22:62:cd:59:ac:4b:80:47:71:67:bd:92:1e:
b5:54:10:f7:dc:03:8b:b9:c0:18:22:7d:57:e2:01:
42:f5:21:b9:52:bf:dd:6d:10:51:4d:63:5c:fb:58:
53:44:f2:2a:4f:36:b9:31:5c:8b:4e:a5:19:32:2d:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:0A:86:01:A4:D3:4C:FD:06:BE:30:F1:64:95:51:C5:BA:60:42
X509v3 Authority Key Identifier:
keyid:23:A7:9C:F5:25:86:57:76:47:9B:CD:B9:2B:42:FC:D5:90:0D:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6ec9SWGV3ZHm825K0L81ZANT9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/971231-83af-4f82-b10c-b6bb7eb04b25/1/I6ec9SWGV3ZHm825K0L81ZANT9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:36:93:9b:12:6f:45:f9:a7:af:f0:68:14:3b:9d:7a:41:1d:
f0:0b:41:33:56:6e:32:71:42:d1:87:d7:b3:7b:eb:be:e0:f6:
fe:dc:9e:b2:6a:b0:e2:85:27:fc:61:19:1e:6d:30:54:a8:7d:
07:56:1f:cb:41:7d:b2:74:14:98:72:83:a6:c2:71:3f:a1:f2:
f8:fc:23:78:83:e6:77:37:3e:c5:c4:78:bf:90:79:b0:a8:2a:
c6:b5:6a:3c:38:fd:db:d6:0f:31:78:33:81:5c:db:c8:77:bc:
e7:8b:44:1e:a3:b1:7c:d5:58:80:e7:47:57:1f:d6:5b:d5:71:
13:8b:dd:a8:37:12:fa:6f:53:57:1c:e3:41:a9:90:ca:63:ee:
ba:15:61:1e:b7:b7:7e:bc:eb:80:a7:c7:e0:58:3f:2f:f4:df:
d1:2d:fe:5e:d2:22:0f:d6:37:b3:dc:af:81:c2:15:34:d9:52:
86:71:7c:d7:f8:94:b2:55:3d:ef:1b:23:90:f9:2f:64:7f:11:
71:3f:17:33:59:b4:c4:9e:8a:8e:02:3c:8b:7a:a9:17:2e:c0:
34:95:3a:e5:35:5a:b9:01:6c:7d:81:b2:75:87:4d:38:03:2d:
51:64:61:bc:bd:6e:f8:65:c8:77:43:a1:3a:ad:59:6f:46:ae:
60:c7:b8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:20:43 2026 by rpki-client