Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: ZQWgV+OtXzx7nJOzmksd5anVzRP5DZ43ufdoWP0uUhg=
Subject key identifier: 41:BA:AB:33:37:1B:4C:AB:1F:27:B8:39:1E:3E:0A:63:B0:0E:7A:88
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019D24A756EC2DAB5715A9CFF58C93ACFDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 11:00:39 +0000
Manifest this update: Wed 25 Mar 2026 11:00:39 +0000
Manifest next update: Thu 26 Mar 2026 11:00:39 +0000
Files and hashes: 1: 8b9lZJQie7cjCoccTw9o5N6jdX0.roa (hash: gCAc7Riwd4/zgCRPf+ESh5/KqUCw3rdRTwl6RhutkM8=)
2: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: Vu8JNvusM4wfhLRnYxR+F4MZal129+jm9VN/enFJzTg=)
3: OnKBtwyvSQXenD2TFYRv7-EZThE.asa (hash: BYl5J46d6e9LW3J6fkLa75ROxvNZoL/fmWrmEBx/+H8=)
4: VQ0mrMZBE8RvHwNIrTvKcr3Rhmo.asa (hash: gcfGHwtvHajEvWt/0Z+o+2PlemMysXfRKyTAuFU715U=)
5: nMAcs66LO6TjEu1sWF2MJ23tCPU.roa (hash: qDwWTIaJBe4gCFHzWktg1n8lhqYY0YQHvsLVhHqIB1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a7:56:ec:2d:ab:57:15:a9:cf:f5:8c:93:ac:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Mar 25 11:00:39 2026 GMT
Not After : Mar 26 11:00:39 2026 GMT
Subject: CN=41baab33371b4cab1f27b8391e3e0a63b00e7a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:7c:d4:eb:48:cb:68:02:8a:34:d6:77:f2:
ec:ca:c2:16:af:3d:8d:1a:ac:44:3a:88:a4:2e:c1:
00:70:4d:00:8c:24:a5:de:c8:7f:28:b0:10:17:68:
fb:c0:10:5f:fa:eb:e1:ee:45:d7:5e:70:f8:49:51:
c7:81:5b:76:37:52:5b:3c:ac:62:f9:2e:d8:bd:92:
d2:d0:d9:33:60:8e:d5:5f:9a:4e:23:11:57:68:09:
8f:27:2d:f2:d2:bc:26:c3:b6:72:75:b3:48:7b:9c:
2e:fb:20:a0:a8:9a:83:d3:4d:74:7a:2f:a1:c2:ab:
9f:dd:94:07:a9:ce:19:7e:81:2d:8e:5c:98:75:d0:
a7:65:96:2b:1f:c4:ec:d0:4c:4a:1a:82:d1:5a:2b:
c9:aa:cd:6a:33:f2:ea:f7:bf:fa:39:94:63:4c:60:
a7:db:04:39:bf:4a:df:a9:00:18:cc:d8:1a:41:2f:
ff:9a:29:73:1c:df:bc:51:17:27:a5:08:39:39:17:
c9:52:53:0c:3a:13:5b:fc:8b:f8:d5:e1:d6:a2:64:
8d:d1:22:e1:c1:e2:f7:ed:c2:4d:fd:dd:10:e6:be:
94:3b:43:82:b0:fe:ad:14:73:2c:52:1c:4c:7d:7e:
71:c9:61:d5:77:fa:34:a1:48:fe:dc:4c:3e:02:bf:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BA:AB:33:37:1B:4C:AB:1F:27:B8:39:1E:3E:0A:63:B0:0E:7A:88
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:02:4c:1c:c8:cc:17:43:e0:b0:9b:e2:3a:f0:64:17:e8:68:
cd:03:d8:69:ba:96:42:c9:65:a5:cd:51:80:f1:bc:ef:74:5a:
46:f9:bf:ba:9a:2e:6e:20:8a:d4:b6:7d:f6:52:72:fd:c0:61:
57:5b:f2:4f:a0:77:d5:b8:9e:fd:41:8a:8b:c5:5a:ed:88:1a:
7c:64:a9:ea:2a:16:66:7e:65:40:82:3f:95:5c:27:d7:37:a2:
04:3d:c0:b1:75:f1:51:7f:94:2e:f3:ef:3e:7a:5b:09:24:64:
50:a6:57:58:07:fc:3c:8d:1d:40:f5:d5:0a:bf:2a:0c:d4:37:
b9:d3:7e:ea:e2:f5:fc:81:9a:0b:aa:80:32:a0:9d:5b:7a:d7:
b0:d4:f8:1a:8c:f7:e0:59:b7:ba:75:ed:d5:ea:fe:58:34:4b:
53:1c:a1:b8:af:fe:9d:8c:a5:bd:4e:77:2a:90:5d:23:2e:f6:
43:22:b9:0c:33:63:55:f3:22:9b:71:75:0b:5f:b2:48:f7:ce:
37:2f:11:d9:7e:a2:f0:03:10:ca:82:d1:94:39:47:37:c0:91:
4b:52:0f:d5:d1:79:75:93:d2:71:67:99:88:72:84:13:46:70:
cc:37:d0:76:4b:77:6b:82:9b:5b:15:20:7e:d6:21:76:4d:53:
49:97:ff:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:56 2026 by rpki-client