Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: YklIKOh9fB0zKA4TzAI7LPQBB2Sm8eGsYR6+4/9Gv9A=
Subject key identifier: 3B:E7:4E:AC:7E:F6:7A:F4:65:DA:07:0E:37:EE:E0:83:84:09:26:7A
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 019D2771BB3EF1A1C844D7A2973CC1994CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 15CB
Signing time: Thu 26 Mar 2026 00:00:57 +0000
Manifest this update: Thu 26 Mar 2026 00:00:57 +0000
Manifest next update: Fri 27 Mar 2026 00:00:57 +0000
Files and hashes: 1: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: pZlLWqeiC3OFtBJhdcEaig484yeyNEfFbUFaNSl+dkA=)
2: JYCsV2i5N2HKe8jWnVBbskEk35g.roa (hash: bJ+6gtzP1kZJb4K84CU9VOHZvtsvVD/JCSadOrdU128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:bb:3e:f1:a1:c8:44:d7:a2:97:3c:c1:99:4c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Mar 26 00:00:57 2026 GMT
Not After : Mar 27 00:00:57 2026 GMT
Subject: CN=3be74eac7ef67af465da070e37eee0838409267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:bf:a0:63:c4:1a:3b:1f:4a:5f:00:64:a1:
4d:ab:be:c0:f7:a8:87:29:90:d3:a8:c3:89:62:bb:
f7:c2:15:84:2f:70:24:01:97:e5:bf:fa:b8:74:d7:
9c:a6:81:d2:75:16:c4:28:61:bb:51:1d:38:09:a4:
4b:6a:8b:53:65:ec:f0:36:f7:78:ec:d5:f9:d2:67:
fd:8e:75:da:ac:77:eb:cb:8b:cf:53:f7:5e:39:7b:
7f:a2:e6:4a:38:77:eb:5b:4c:51:8b:d4:61:cd:4f:
ed:fe:97:ac:84:d8:51:0d:cf:1a:d1:01:93:de:a7:
61:dc:63:be:12:ce:41:5a:c5:97:1d:ff:67:d2:e2:
00:9a:64:ca:13:a5:19:2b:37:0c:a1:ce:f1:ff:78:
1e:de:ae:77:8f:ef:bb:b6:fe:57:e9:fb:1d:bf:f5:
bd:0f:54:88:36:79:73:e3:45:77:52:57:5b:87:7d:
56:6e:a9:de:39:03:0c:a9:f3:ad:9e:bd:34:cc:22:
80:67:5d:1c:b2:8d:7a:be:63:a3:ac:e6:e0:61:63:
ea:42:cf:22:90:af:78:23:7d:22:84:66:a5:6f:d3:
ae:6c:40:3b:ea:1f:5e:52:61:9e:40:e3:69:03:61:
36:70:0d:7f:c6:7e:1d:c0:fe:ab:74:65:2b:d1:05:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E7:4E:AC:7E:F6:7A:F4:65:DA:07:0E:37:EE:E0:83:84:09:26:7A
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:0f:3c:a1:7f:a6:40:09:71:37:10:0b:cd:bf:77:d8:03:
ec:a3:c7:b6:f7:41:b9:91:b5:78:1c:5a:2a:d5:af:09:bd:57:
97:ff:52:9d:da:95:79:ab:f4:a4:92:1d:86:e3:f0:ca:d8:ca:
cd:02:84:ad:74:10:9e:bc:4e:72:a1:4e:86:77:6f:b6:da:5e:
0b:2b:43:31:0b:32:72:d4:96:06:80:68:98:d2:b4:b0:69:1c:
45:81:85:a6:97:d2:9d:ec:2e:a1:d0:23:92:96:d4:d8:83:66:
48:b3:fd:26:74:f8:2a:78:fe:7a:b0:6b:04:1e:0c:8e:92:5e:
c6:19:fe:e5:29:b7:6d:ad:ea:40:6a:18:92:2f:8b:b1:2f:de:
df:1b:26:40:c2:45:ca:b5:74:cc:a8:e0:cc:eb:11:75:5f:52:
47:7c:11:b1:1d:1d:e4:15:b3:ac:f5:e9:4b:a0:9b:6b:14:ba:
28:fd:81:c1:5a:88:9c:58:4c:5f:4c:5e:94:a5:75:78:ed:a7:
f3:eb:a3:34:5c:09:80:3a:92:3a:0e:13:6e:e4:df:1a:64:53:
94:7d:50:12:a4:df:0b:23:d2:af:04:eb:97:29:a2:96:d8:f2:
bc:51:9b:50:d6:0b:2c:53:c1:b4:af:85:ea:5a:c7:8f:3b:3c:
42:8b:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:15 2026 by rpki-client