Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: 4BajITqiTJxGfK+TvIoa8ZsBRE2GSB8dETS8CM/V3N0=
Subject key identifier: C3:22:D0:5C:CF:90:A4:87:C1:DB:9B:F7:25:57:3E:23:94:96:56:9A
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019D273AFDF81E8FEB7AE72B8352224F9B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: 7RmWU5ai3z/pp5yw/KHHnP8xbJYBr8GmjIinNqcmggw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fd:f8:1e:8f:eb:7a:e7:2b:83:52:22:4f:9b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=c322d05ccf90a487c1db9bf725573e239496569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:4d:93:9d:41:36:68:f1:7f:45:80:f1:ad:
b4:e4:5a:5a:f0:6e:6f:31:10:f0:38:22:61:a5:b9:
b9:4b:e6:fe:8f:a5:66:9f:aa:a9:04:97:e0:11:ac:
1e:2e:85:b7:36:28:42:eb:4c:2a:71:72:e9:b0:4c:
d3:04:cc:82:a2:71:d9:3d:23:4b:81:e4:94:0b:25:
8a:8b:bb:d7:5d:51:98:71:f0:56:5a:d9:6a:87:dc:
5c:2c:88:5c:65:57:cc:53:1b:06:35:ee:03:eb:d4:
2f:9d:ae:e7:c2:12:f5:4d:70:d7:76:a8:07:62:d6:
19:f1:08:7c:aa:63:3c:6b:87:f3:09:47:9f:1d:0f:
fa:7c:ed:93:65:2c:a4:0b:3c:a5:58:1d:f0:52:b1:
43:8d:78:c3:4e:58:dc:0a:51:e2:c2:fb:b5:cd:72:
87:28:fb:68:7a:c5:5b:30:61:12:4a:d6:64:4d:03:
59:65:ba:ef:79:91:9e:96:84:6f:7b:5b:b1:93:48:
c8:f6:3e:04:1f:46:fd:da:b1:da:d0:b0:aa:83:ba:
e9:69:02:04:74:ea:b7:11:40:b4:67:8a:63:70:be:
14:96:a5:54:2f:e4:e0:60:35:31:f5:2a:b4:cc:4c:
b2:d6:f6:fd:67:73:7a:bf:e0:77:f0:02:82:8a:85:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:22:D0:5C:CF:90:A4:87:C1:DB:9B:F7:25:57:3E:23:94:96:56:9A
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:ed:b6:3e:7a:06:93:c1:78:14:89:a5:46:b8:87:37:28:
fd:1c:14:e5:95:3e:32:8d:fd:96:57:06:c5:ca:16:a8:94:de:
50:7b:07:02:45:1b:f5:9b:d0:e1:b1:a5:26:58:3a:ee:ad:50:
1e:1c:fe:4c:68:ce:11:7b:b6:a7:f2:a3:aa:71:a5:08:cc:b4:
97:67:d5:14:7e:a8:94:45:58:10:c2:ed:6f:8f:18:21:a5:e0:
50:2d:00:11:e0:4e:db:63:ca:5f:8e:62:36:20:56:1a:96:16:
0a:7d:f3:05:ef:f7:1c:05:b0:ea:1c:de:83:d5:b9:5c:57:79:
80:7a:55:b1:c6:eb:e8:b3:af:de:bf:42:f8:72:92:40:e1:b8:
aa:4a:2c:04:6f:2d:a4:42:e5:2d:87:e1:82:c5:54:d9:4c:62:
22:46:85:12:bd:62:b5:d2:94:39:c4:cb:f3:70:4a:f2:ea:29:
d9:53:bf:c1:73:b6:dd:6c:71:41:5e:fb:92:a0:a7:22:96:d6:
9e:73:69:13:9d:2b:54:44:78:f9:8c:b9:ba:03:a8:79:24:4d:
bc:35:12:86:ce:12:d4:b8:c5:60:dd:cf:4a:c0:9b:86:ef:cd:
e4:a7:58:5c:89:e0:9c:78:1b:12:e8:fb:9c:ac:f4:32:37:e6:
3f:17:51:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:31 2026 by rpki-client