Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: /ig4lOUVKtDtNCwpJUgxRm/+5/FgBa2jBQWUwBmpXzI=
Subject key identifier: F2:38:AC:89:0F:AF:1F:3E:EF:B4:49:68:B4:14:25:E8:7F:11:84:43
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 019D27A8F2FC3BCE4CFA4D09942211E87C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 0709
Signing time: Thu 26 Mar 2026 01:01:16 +0000
Manifest this update: Thu 26 Mar 2026 01:01:16 +0000
Manifest next update: Fri 27 Mar 2026 01:01:16 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: A5ua+Tj0ZDnbBwL/0KFQy6PlCMRg07BguSVg/nditnk=)
2: oBg9GLd04rSGrEFacgZRWrxKe2o.roa (hash: qgYYBQiy/vwO/EgGIM4ixoYVfm4vaImrqtxG63hASRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:f2:fc:3b:ce:4c:fa:4d:09:94:22:11:e8:7c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Mar 26 01:01:16 2026 GMT
Not After : Mar 27 01:01:16 2026 GMT
Subject: CN=f238ac890faf1f3eefb44968b41425e87f118443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:0e:cb:13:73:4f:31:9d:f0:00:28:ff:cc:
04:46:24:07:ef:a0:3d:21:c7:61:9b:d1:fb:85:0b:
46:2a:ac:b6:e5:a8:36:53:d2:be:8a:8b:34:a8:35:
20:87:1d:7e:b5:9b:c3:b7:48:55:98:10:93:38:03:
86:ea:39:21:95:aa:13:ea:c0:16:43:38:b1:44:c9:
11:85:b1:df:b4:3a:28:a1:79:bd:9c:af:5f:db:3d:
3a:25:c9:8f:c9:48:4d:5c:d0:93:fd:9c:7e:e2:60:
e6:7b:e3:cf:cb:bf:7a:7b:72:6a:7e:23:0a:46:f0:
55:69:69:c8:46:bb:25:ae:08:d6:0e:2d:b3:03:51:
77:df:a7:40:2f:40:e8:fc:1e:3f:46:14:93:c2:b9:
7a:4c:8e:cc:45:8e:51:ec:5d:cf:2f:82:f1:95:82:
2b:38:05:89:13:70:6b:ad:85:39:58:b5:43:66:ae:
3a:18:5d:96:4c:c8:51:bf:6c:eb:7d:3f:c8:7b:77:
3b:93:7d:64:57:38:8b:19:48:2f:01:d5:d3:d1:08:
9e:4b:04:5b:86:cf:6e:c3:5f:0f:97:73:08:72:be:
14:8a:de:ec:57:ee:10:2d:83:95:8c:58:2e:be:61:
0a:55:61:2b:3d:3f:fa:55:5b:37:4a:8f:b6:39:9a:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:38:AC:89:0F:AF:1F:3E:EF:B4:49:68:B4:14:25:E8:7F:11:84:43
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ec:27:e1:9e:71:2a:59:11:04:10:c7:44:e8:bf:37:dd:aa:
31:68:ce:f4:0e:86:02:02:55:24:51:28:2f:75:86:f7:b3:06:
98:d6:68:16:17:ba:99:eb:76:96:34:8c:bc:40:cc:8f:ad:66:
4a:af:1b:42:55:7b:28:66:ba:8d:12:3e:fd:ef:af:17:98:b3:
fa:82:c7:7f:9b:fa:68:91:40:da:e0:2b:21:e7:8c:8e:af:12:
0e:87:3e:43:5c:bd:c0:b9:da:a5:93:99:69:48:80:84:1c:9c:
ba:f6:f4:6e:fe:44:7f:77:83:79:b0:22:1e:2e:c9:8f:e8:9e:
62:4b:f1:6b:80:44:e9:ff:89:28:41:77:63:e3:85:c2:b9:d4:
c7:ba:ea:c0:9b:16:29:a5:28:5b:f3:1e:66:36:fd:60:c7:31:
68:ad:c1:b4:20:0d:25:a1:f9:8e:52:d6:66:19:a3:10:b4:f7:
10:ef:33:61:27:94:fe:92:94:48:cc:b4:be:08:1f:e4:95:e4:
e6:2f:37:39:7e:69:73:55:99:ea:b5:5e:1c:50:60:f9:72:02:
95:41:f7:1c:b0:ff:d8:60:ab:b9:63:a8:e0:1d:71:71:bd:cd:
aa:45:b1:f1:82:c6:4e:a5:e9:d3:c9:49:e7:db:b1:55:74:b3:
48:31:a1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:40 2026 by rpki-client