Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: m02n3bv3ytCNyr81239xNIgANBia6Y/0uYXlw0LDllg=
Subject key identifier: 9D:2C:99:23:D3:CB:60:46:1D:6E:65:0F:56:30:63:DC:B2:50:29:B2
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 019E1D59512F3A6F5DCE12D9B462F5D86D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 1625
Signing time: Tue 12 May 2026 18:00:53 +0000
Manifest this update: Tue 12 May 2026 18:00:53 +0000
Manifest next update: Wed 13 May 2026 18:00:53 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: ABVOew4TMR2o5WlwRVS35SpQixMOo3nnm675AzipYcQ=)
2: gJIL-yyLSZQ86WF72F2-y7lREqA.asa (hash: 1TPh56ssE+BAjyg4JEIEBgYU8LSU5sYtrun0tWfhLP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:51:2f:3a:6f:5d:ce:12:d9:b4:62:f5:d8:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: May 12 18:00:53 2026 GMT
Not After : May 13 18:00:53 2026 GMT
Subject: CN=9d2c9923d3cb60461d6e650f563063dcb25029b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:cf:b3:84:11:3a:a4:41:b4:3d:21:b8:a7:
cf:89:29:3e:79:ca:77:e3:2c:2f:f6:fb:48:ab:c4:
72:72:74:4b:1e:ce:1b:83:d6:97:6c:7a:f5:89:f8:
e4:2f:cf:c2:da:95:17:d2:2b:8d:97:5f:2c:a3:c4:
b8:5d:ff:85:fd:bf:6f:8c:cd:83:ad:54:4e:18:fe:
57:ea:9f:80:fe:71:00:b8:29:78:e2:37:43:a7:77:
87:9d:7b:db:42:af:46:ca:09:e0:79:18:ac:d5:8c:
1f:b4:20:71:ec:3b:52:0a:1a:ad:49:8e:f3:06:71:
88:1c:6e:92:2f:b0:2c:7d:dd:d3:a8:50:0b:06:ee:
98:28:df:eb:a6:90:f6:0f:cf:07:0f:8c:39:54:58:
4d:03:2a:01:3f:d9:8e:03:32:aa:29:4d:0f:22:60:
09:b3:f9:32:5e:4d:67:1a:0d:39:37:74:5d:48:78:
a6:e7:57:c4:8c:11:13:0f:ba:52:af:71:9d:97:25:
0d:84:fd:ae:16:16:fc:c4:17:28:b8:f2:cb:46:67:
cb:a8:6a:c0:cd:e1:d6:bc:75:59:e1:83:60:b0:82:
64:01:e6:d2:16:fc:c8:e6:5c:bc:e1:33:1d:a5:8d:
4f:98:4c:10:29:08:ec:77:b1:0b:df:ea:4a:af:a7:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2C:99:23:D3:CB:60:46:1D:6E:65:0F:56:30:63:DC:B2:50:29:B2
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:96:6e:a2:2f:4f:f0:9a:5d:be:c0:73:cf:69:ae:80:ba:2e:
73:bd:b4:d9:c3:a8:8e:01:dc:9c:c2:f1:c2:12:0a:76:45:1e:
9f:f5:b6:49:dc:e6:13:0f:eb:da:d9:2a:ff:48:68:ff:ce:49:
84:5b:48:77:24:1a:8e:2b:19:de:2b:2f:8d:69:0b:10:fd:fb:
bf:eb:04:55:41:57:dc:7f:36:35:96:bf:68:c1:bb:9a:3a:6f:
ef:d5:11:46:c6:a9:03:2b:b8:1a:09:04:14:b9:e3:dd:20:8d:
6a:b5:6d:f9:f2:4e:4b:65:af:d8:75:d4:0d:35:12:67:0a:46:
fd:bc:f9:19:72:b7:9c:f3:84:a1:38:be:41:b8:55:20:35:23:
25:34:0d:dd:99:d2:c5:49:38:dc:1d:33:a4:1c:64:a0:d3:de:
b2:12:51:65:59:0e:0e:3f:30:6c:a5:b6:79:fe:42:94:aa:4e:
63:28:fa:ee:c7:70:72:65:29:c5:53:5d:1c:9f:98:e4:d7:2c:
99:78:cc:af:08:85:8d:04:0c:20:7e:5a:78:72:c8:01:5b:56:
2d:07:66:aa:e6:79:1b:17:5c:8b:f7:b6:20:5e:16:70:eb:8d:
b6:c0:6a:17:13:e2:d1:47:4e:03:86:07:fb:b8:fe:d5:3d:29:
51:df:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:25 2026 by rpki-client