Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: +ZKG+GaFzFGdLW9oVJt/dN/x7mRPG3lDA2gsTnSjpmQ=
Subject key identifier: 6E:00:47:0F:63:EE:3E:E8:D8:88:6F:1A:AA:FE:28:8C:BB:68:5F:FC
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 019D2AA96FAD453DB4CF7F818C1B62449A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 15:00:40 +0000
Manifest this update: Thu 26 Mar 2026 15:00:40 +0000
Manifest next update: Fri 27 Mar 2026 15:00:40 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: ZOW+7Zs+UT4B2EjUTXE7suUpqKWrpRNQ+dVJubE7URs=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:6f:ad:45:3d:b4:cf:7f:81:8c:1b:62:44:9a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Mar 26 15:00:40 2026 GMT
Not After : Mar 27 15:00:40 2026 GMT
Subject: CN=6e00470f63ee3ee8d8886f1aaafe288cbb685ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:d8:62:ec:f7:ea:c2:da:4b:46:d9:74:b1:
10:1b:bd:a6:47:fb:e3:8c:03:eb:71:d3:8f:a7:2f:
da:23:8c:f3:36:ef:80:07:33:67:e3:9c:1c:cb:ff:
d8:6c:0c:a5:cf:32:d5:51:57:75:c0:19:7e:13:f4:
a9:df:29:08:dd:60:28:34:88:54:57:8a:b9:81:5e:
dc:ae:c5:cf:c8:d3:a9:60:06:b5:38:e9:e7:7a:4e:
c2:7f:4c:66:59:bf:c8:aa:4a:bc:d1:81:87:7b:af:
4f:7f:c6:4e:ce:b3:a3:9e:53:7f:eb:31:9a:f2:6a:
9a:13:22:43:a9:d7:51:58:af:e2:2c:32:67:ff:a5:
b9:6f:40:ce:e5:84:28:bd:2f:8e:7a:b2:7d:6e:78:
73:ac:f2:38:da:a5:b5:91:0d:1f:78:ab:36:99:8d:
bd:18:c8:ed:97:59:63:ff:2b:9b:7f:bb:4a:48:7a:
87:7f:4f:92:a3:3e:97:d9:46:8f:2d:3a:da:44:a4:
97:63:80:9e:3b:57:ca:09:9b:17:37:53:aa:66:a6:
17:68:35:2d:7c:0a:3c:9b:30:1d:fa:b6:22:cf:50:
a0:50:78:27:3e:0e:b5:f2:58:d7:66:d0:60:44:68:
4e:4e:dc:03:7e:c3:84:37:c5:ba:39:84:d0:a9:30:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:47:0F:63:EE:3E:E8:D8:88:6F:1A:AA:FE:28:8C:BB:68:5F:FC
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:7b:b0:b9:aa:7e:02:c6:cb:e7:74:da:7c:6e:21:ab:4b:
89:0e:2d:d9:dc:b0:f1:28:95:d3:8e:f5:1d:72:5f:53:ac:bd:
e3:3f:2d:3b:a5:d2:79:67:64:d6:e9:70:2c:ad:b7:44:f0:8b:
a9:23:5d:98:36:ec:94:4c:09:1b:79:73:66:92:1f:99:71:dd:
d0:77:57:ce:e4:3b:02:cb:e0:5a:ca:03:e9:64:ba:6b:c6:b9:
01:d8:87:21:d6:68:cf:34:8a:00:33:71:f9:5d:f5:c2:ce:e0:
0a:a1:8e:61:00:2a:55:ff:fe:b5:91:8b:33:71:86:84:8f:0f:
4d:ee:1e:3e:b8:10:ab:f4:1d:63:64:e4:59:37:f0:cb:ce:4c:
eb:4a:6b:de:0d:c0:9d:70:5f:dd:d8:21:8b:51:ba:20:a7:f0:
27:97:38:74:fe:4f:37:65:b0:f1:0d:4b:de:33:99:a4:62:02:
66:32:e6:42:b6:46:50:b3:f0:59:ed:07:c2:83:da:29:49:50:
1e:49:f9:54:fe:a0:13:bd:ad:a4:d9:65:e4:2c:cf:6e:f8:d8:
f1:67:30:09:9c:b4:f0:3e:e6:8c:93:60:1a:8e:ae:a8:e6:9f:
f2:95:cf:18:cc:9e:bc:2b:61:c1:ae:92:47:fb:34:f3:e5:e3:
44:e8:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:02 2026 by rpki-client