Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: ISHxoFZcg3J/74Zm9zbXZJXlneFJ8y5TqAAi0mcJSng=
Subject key identifier: 07:D5:3A:F5:BF:00:99:03:4A:2C:D2:EB:01:FB:60:B0:DD:56:E5:47
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019D25832A8144CE7B3ABCB7064C8DEFB686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1589
Signing time: Wed 25 Mar 2026 15:00:46 +0000
Manifest this update: Wed 25 Mar 2026 15:00:46 +0000
Manifest next update: Thu 26 Mar 2026 15:00:46 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: mbKFkRdi2WBkoCXL8iK2V0Qmasyh8FFtZKHsvA8i+7Y=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:2a:81:44:ce:7b:3a:bc:b7:06:4c:8d:ef:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Mar 25 15:00:46 2026 GMT
Not After : Mar 26 15:00:46 2026 GMT
Subject: CN=07d53af5bf0099034a2cd2eb01fb60b0dd56e547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:da:e8:06:ff:2a:b3:d7:23:23:b9:2c:b6:
84:66:d0:e6:26:67:03:70:d0:f5:3f:b9:94:63:df:
74:e4:7a:28:fa:57:c7:83:ae:11:25:1c:b0:8c:9f:
4a:e5:a8:77:e8:86:8c:29:27:a7:31:8b:7c:77:1c:
3d:70:f5:ed:d7:3e:43:19:e4:4a:ea:96:93:d9:2f:
0c:e4:e9:f1:a7:c5:5c:2d:5f:72:67:e4:63:ed:39:
1a:8e:38:41:fc:10:47:02:5d:e2:2f:52:0b:75:df:
df:12:95:ba:c8:c3:86:e6:d8:33:e3:cf:bf:2a:9e:
55:c5:5e:79:78:57:df:46:5a:28:a4:26:ff:9b:ee:
63:03:cd:80:45:a4:f3:f9:c8:21:04:cc:9f:fe:db:
e2:e2:0d:b7:f3:a9:aa:6f:7d:77:80:a2:bb:82:67:
d5:d0:e8:30:9b:a2:56:39:c2:95:a0:e9:79:d4:e0:
2e:63:a3:ad:d8:8e:75:5b:9b:b0:b9:67:be:ac:e2:
c2:97:1b:81:7d:e9:b5:2a:a9:cc:db:c4:cd:fc:36:
42:0d:ca:66:88:73:7f:e6:af:81:8b:47:c4:92:05:
26:4c:68:8e:52:ce:d0:b6:2f:e7:78:90:66:d7:e7:
8c:79:fe:dc:c8:98:76:0b:22:c1:f8:ca:1d:cc:ce:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D5:3A:F5:BF:00:99:03:4A:2C:D2:EB:01:FB:60:B0:DD:56:E5:47
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5e:f6:35:cd:5a:ae:af:44:08:fd:fa:07:63:0e:f7:68:55:
d5:30:fd:3d:ee:5a:51:fb:85:b2:48:39:66:90:5f:89:0a:3d:
c5:71:e1:99:24:de:0a:3d:12:11:db:68:04:59:d9:86:b6:55:
e0:f9:57:c5:a0:88:78:0a:b0:33:50:57:70:67:91:c3:51:9a:
4d:48:6a:fb:1f:20:b3:97:cc:61:54:26:c6:51:e9:b2:e0:b2:
27:d2:e3:99:c3:ff:99:75:03:49:d3:ae:f0:29:67:86:26:df:
5e:88:36:05:ac:fd:56:21:86:03:7a:9c:31:22:30:92:5a:6c:
95:f0:b4:52:60:bf:0e:5c:65:9d:20:92:d1:07:e1:79:16:f6:
8d:f4:59:97:d0:fa:3c:53:86:a2:1d:9c:04:e8:ef:81:48:d3:
12:81:f9:db:3c:72:d4:c7:8a:09:07:6d:8f:05:c9:82:86:65:
27:cc:30:17:ba:1e:d1:96:74:80:0a:cf:4e:40:b9:61:06:dd:
47:94:98:ba:a2:7d:53:b1:d7:13:61:16:7f:f8:56:8f:c9:ed:
45:ab:9a:b4:22:03:9c:6e:dd:e8:1c:e2:11:ce:35:3f:a5:64:
c5:5d:b9:d8:2a:56:91:f4:1f:7a:fa:88:8e:43:5e:63:73:bc:
56:fe:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:04 2026 by rpki-client