Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: 4FnpKaGxs10FysKqKenD79Sg8bwjRQfbpS1Rkjfw2tI=
Subject key identifier: 53:5E:2D:2F:5A:4D:EA:15:CB:6C:D3:63:0C:36:50:99:FA:09:59:DB
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019D265F6211081A98F1595AD25E2AFB9110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: Lv/7/Bi2+/thnjzcgf5M5CV6XDkuMpxcEw8gebofD1s=)
2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
4: fQxumP61VhB9FVDhoZcA_ZnxqZE.roa (hash: QVf5rDdwShREzqt48QWp/0TmeWtlZGZgnBrXgvvda9I=)
5: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:62:11:08:1a:98:f1:59:5a:d2:5e:2a:fb:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=535e2d2f5a4dea15cb6cd3630c365099fa0959db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:45:22:15:7c:0d:e6:29:c3:64:1f:83:ed:
54:60:65:c2:f5:ca:dc:91:7c:80:30:f9:ec:85:73:
90:69:95:fe:6e:86:f7:f9:90:22:1d:e4:61:45:3e:
89:f6:2d:d0:da:69:6d:bf:12:7a:84:dd:c1:ac:0b:
cb:71:1b:93:9c:18:27:85:72:8a:16:93:0e:9c:23:
a1:44:12:e9:22:3c:de:9d:3c:69:8a:48:19:68:9a:
0b:28:47:aa:8e:fd:c0:f6:1c:e2:06:28:10:76:94:
97:ba:cf:0a:47:e5:f0:4f:de:c8:db:53:e7:2a:b4:
e0:da:7c:34:f6:e8:52:13:82:a8:a0:17:fd:f0:8e:
ed:14:84:dd:7e:70:ab:cb:fa:89:70:c7:7e:96:e5:
a3:db:79:1c:86:86:06:2c:a7:f2:f9:47:58:e3:52:
47:61:c2:d0:09:2e:42:5d:44:a9:48:35:42:31:e9:
08:b6:ba:64:8b:21:64:b0:43:7f:3e:cb:4b:b0:42:
61:84:d0:a4:7f:cc:e8:95:a4:e3:10:00:61:61:de:
11:1a:d4:6d:4b:ad:5c:cc:f7:1c:69:de:7e:99:0d:
93:68:c0:ef:33:df:51:67:3b:5c:22:fe:8b:02:94:
e6:7f:25:4f:b8:e7:40:fd:2e:49:8c:7f:45:a8:7e:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:2D:2F:5A:4D:EA:15:CB:6C:D3:63:0C:36:50:99:FA:09:59:DB
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0d:80:97:6b:99:d6:58:98:db:19:88:49:f4:1d:b8:e9:a6:
c7:34:c8:16:78:20:88:11:4e:05:e9:33:0c:04:a2:7b:1f:36:
b3:bf:83:46:bd:c5:70:c0:28:5d:71:65:27:76:e1:18:bf:89:
31:1f:e2:19:68:d5:16:fc:d8:08:c5:e9:be:df:18:71:a6:ec:
18:7c:43:00:61:3b:a6:d5:33:c3:df:23:e0:31:d7:0c:41:a6:
e4:42:fa:74:e8:44:f6:3c:43:e4:48:5e:34:e5:67:1c:2b:29:
9f:76:3c:01:e6:1a:d0:65:ee:d6:ce:29:b8:a5:82:22:ad:84:
6b:d6:0a:b9:91:ef:ad:c0:76:68:c9:49:89:ac:fc:0f:48:c1:
27:c9:9e:35:ca:11:61:48:5e:4c:48:f4:df:df:69:16:11:a5:
dc:04:f0:2d:27:ac:39:d1:bd:14:2c:c3:68:56:a1:c0:49:0e:
0c:96:fc:0f:0f:64:74:c7:e1:0f:71:29:a1:26:0b:dc:da:41:
f4:21:9e:48:ec:99:39:d0:69:f0:ce:99:68:66:1f:a4:d3:6e:
33:30:10:fe:55:28:a1:e7:4b:51:08:88:1c:e6:26:7a:a0:3c:
f9:1b:c6:75:59:d8:eb:3a:41:b2:7b:7e:14:bd:dd:ec:45:fe:
55:2e:8e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:56:32 2026 by rpki-client