Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: RsBG1en0ugW59cw9GgLnMDshp86zQU4VCox1wj5tMs4=
Subject key identifier: 90:24:A3:FC:E7:28:5C:75:E0:A1:D9:17:A2:FD:D4:22:17:30:BC:F1
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 019E1F10D58F86C49364A2B212583D92162F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0C4F
Signing time: Wed 13 May 2026 02:00:57 +0000
Manifest this update: Wed 13 May 2026 02:00:57 +0000
Manifest next update: Thu 14 May 2026 02:00:57 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: ZOxdvwLk7uRSa6hPF/mqXRTEHPfppFnhsrWBbU2AiJk=)
2: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (hash: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d5:8f:86:c4:93:64:a2:b2:12:58:3d:92:16:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: May 13 02:00:57 2026 GMT
Not After : May 14 02:00:57 2026 GMT
Subject: CN=9024a3fce7285c75e0a1d917a2fdd4221730bcf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:94:74:6e:9e:14:5e:c5:2b:83:c7:98:38:
30:9d:3b:ea:ac:b1:db:d0:e3:23:35:7b:ad:1c:a1:
90:16:b8:81:88:8c:56:97:65:e4:d9:17:0a:c2:98:
41:0c:7b:2a:17:5e:05:4c:44:9b:b0:85:8c:7c:bd:
e8:87:14:45:2e:36:08:c5:2f:a3:67:4f:df:3a:8f:
f6:fc:81:e9:64:da:0a:0e:5d:88:80:80:9b:cb:f4:
28:20:61:a0:c6:1d:59:f3:be:3c:22:f3:d0:d9:60:
b6:04:81:36:51:0c:ab:09:d2:ef:73:6e:db:99:25:
b8:0d:38:af:d4:20:50:e6:d4:bf:05:46:44:33:f6:
62:e3:e5:3a:c8:7e:96:5c:3d:a4:02:2f:6c:50:cc:
7b:e2:9a:6d:cc:43:c2:49:de:12:9b:2e:05:5b:99:
16:4c:67:60:54:0b:68:f9:dc:85:33:04:43:a2:55:
a3:08:3d:e6:03:65:a7:7f:3a:ad:6d:7e:7d:50:6c:
fa:28:fc:73:9c:5c:22:4d:35:56:1f:c7:c4:52:b6:
9f:92:c0:5b:0c:99:a3:fc:6b:94:9a:f7:ad:cc:83:
fd:db:dc:03:d3:ba:d8:2c:15:ae:47:94:33:d8:ff:
6b:dc:63:6f:81:d0:2b:12:d9:cb:66:0e:d7:99:f0:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:24:A3:FC:E7:28:5C:75:E0:A1:D9:17:A2:FD:D4:22:17:30:BC:F1
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:82:05:2e:84:64:c3:77:99:41:e0:13:c2:13:02:ab:c0:b6:
ce:f6:a9:01:55:0e:04:b7:67:32:e1:78:89:06:e6:d5:74:3f:
fb:94:dd:26:f0:67:bf:c0:6c:13:71:73:ee:96:f7:26:1e:f1:
84:bf:8f:ab:da:49:9a:91:ba:22:c0:5b:5e:11:c9:b5:12:a1:
ee:33:53:c2:71:c6:97:1a:99:cd:1c:48:f0:94:57:46:1e:26:
88:91:c7:9f:ec:c7:bc:c9:76:bf:9e:ef:57:c6:1a:53:4c:4b:
b7:f5:ff:fd:96:86:0c:73:49:96:cd:25:43:0c:69:c1:66:17:
c7:83:a6:a7:9c:0a:9a:07:c8:fb:9a:ec:8d:f1:26:9c:d6:b4:
d9:65:2b:e8:6f:60:8c:d2:ec:27:a6:98:39:b8:fb:6b:1e:02:
32:d0:64:05:7e:93:19:28:3d:bb:f9:2c:47:df:7f:f4:46:16:
76:fa:16:9c:ef:8a:57:f5:73:da:6a:b1:92:b8:3c:31:e4:7d:
17:43:27:72:b5:e9:a9:32:0b:97:e4:dd:d8:09:e1:23:f1:26:
ca:19:31:b2:de:49:1e:3b:8a:59:50:97:7c:32:4f:1e:44:96:
6e:6d:b5:37:ac:fb:1a:e1:56:c1:44:10:8b:06:7e:9e:fe:f1:
2f:5b:bd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:27 2026 by rpki-client