Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: L06fEKZPCP8Wrtm+uJUZyYMd5QlzgEWmTGROBaI82Pc=
Subject key identifier: 3E:50:92:B7:42:A8:C1:E6:39:D0:A8:3C:DD:A9:78:AE:92:16:8F:14
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 019D29299452759128BDCDC12A2F272F2EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0C95
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: MUU8YNa6WcEG9k_BNcyCAU81gbs.roa (hash: iUfmHZuTUmqZJa+o0yYc9bKFcBXasUBUKIVVT3wP+6Y=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: R65tZdeDFJsC9GJuT+aq832+KWL0mSS34AjGUhd5VIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:94:52:75:91:28:bd:cd:c1:2a:2f:27:2f:2e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=3e5092b742a8c1e639d0a83cdda978ae92168f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:a0:bd:ac:0b:3d:4a:30:cf:9a:dc:d6:9b:
f6:ad:b1:af:19:33:7a:79:93:69:9e:f1:77:f3:44:
d3:02:54:82:12:79:6b:1f:c4:dc:d1:a2:bd:7a:e5:
c0:dd:e5:80:02:db:7e:18:62:44:26:fe:1a:22:c1:
4c:92:37:72:0f:f2:21:12:1b:ae:91:3b:7e:b4:1a:
84:27:92:e8:19:42:f3:9f:80:19:82:f1:0f:a8:69:
b5:0b:08:77:92:c1:5d:c9:f6:ea:68:19:99:8e:45:
5d:86:23:ae:0e:b5:6e:25:51:83:d0:50:8c:a7:49:
83:6f:fb:79:02:c1:91:f4:1d:f8:63:9b:10:0e:56:
1e:1c:c6:09:37:37:46:f2:ce:b7:d9:0b:21:cd:6f:
ed:bc:89:85:89:76:25:99:25:15:c0:b9:c5:d0:46:
11:b6:f2:c2:be:15:3d:15:6f:40:bb:74:dc:75:a5:
91:d7:77:69:ce:77:2e:ae:11:8c:1e:ac:41:95:8e:
24:9c:74:89:d3:ee:3a:ec:0d:5e:7b:05:06:dd:ea:
04:b9:c4:74:bb:a5:58:09:d9:7d:e2:b6:23:57:11:
7f:ef:86:3c:08:32:98:4f:c2:e4:88:1c:2e:88:01:
ba:b4:29:02:ef:fa:8d:78:22:42:46:00:f0:0c:a1:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:50:92:B7:42:A8:C1:E6:39:D0:A8:3C:DD:A9:78:AE:92:16:8F:14
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6a:f4:09:1f:3a:17:21:bd:73:22:4a:fe:eb:8e:f3:9b:3c:
b1:bf:c2:15:c5:a7:25:13:fe:49:c9:d9:86:82:2f:c1:3e:09:
fd:01:78:b4:6d:eb:18:8c:e6:64:51:6d:52:55:4b:18:46:de:
31:86:c3:4b:61:47:4d:7f:ea:8c:ae:fe:84:23:1b:33:ee:16:
4a:b5:92:be:b4:61:3f:75:e3:d9:9d:72:40:72:68:49:ca:6c:
4b:85:dc:60:4a:12:b8:a4:43:18:b2:e1:fa:5f:d2:73:a1:cc:
38:49:bb:5b:9b:da:ef:97:89:ef:a3:f7:85:3d:4c:e6:41:22:
ca:29:c8:cb:96:9a:ba:b1:eb:7a:23:3a:0f:61:17:0a:2e:47:
27:dc:ab:65:f5:78:e2:d3:06:b7:cc:4a:21:a0:84:05:bf:7e:
ae:6a:fc:84:b3:19:ba:66:0a:9b:bd:b6:a3:2c:18:1e:6e:8a:
2f:7e:6e:91:88:25:34:59:da:e6:6b:be:03:a2:d8:6e:86:c3:
23:a4:76:0d:79:dc:99:d2:68:e0:e3:80:40:98:0c:b6:4f:57:
3a:bd:e9:a5:e7:63:42:0a:69:7a:d9:ef:69:b4:00:91:bd:58:
12:bd:3a:b3:3b:03:72:8b:f7:00:79:8b:e0:b0:8a:ad:40:80:
8b:26:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:17 2026 by rpki-client