Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: SFnTBeZNTcOancoki0eXZmYw1n7GaDdF4z6yRL3DdQE=
Subject key identifier: 3C:58:91:31:C2:A2:4E:D8:B0:7E:27:2F:2A:93:3B:C6:A8:1B:49:48
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019D2A728A89F66A2C3691DB6F9E7AFA0806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 14:00:42 +0000
Manifest this update: Thu 26 Mar 2026 14:00:42 +0000
Manifest next update: Fri 27 Mar 2026 14:00:42 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: KcOhb0sk/GhwA4ltmhdMay4NTqwmVmk+DDzg3nK5vWQ=)
2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:8a:89:f6:6a:2c:36:91:db:6f:9e:7a:fa:08:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Mar 26 14:00:42 2026 GMT
Not After : Mar 27 14:00:42 2026 GMT
Subject: CN=3c589131c2a24ed8b07e272f2a933bc6a81b4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f8:56:9e:70:67:5d:f0:d4:9a:f0:ba:0c:13:
9c:b6:a1:7b:ef:9c:5d:5d:24:5a:e6:ee:91:bf:e5:
3e:f3:4d:63:2b:9a:59:60:2a:38:18:c0:d8:8a:0f:
74:d0:22:95:26:e8:09:ed:9b:90:42:e2:a2:ae:73:
43:90:26:28:76:4a:4b:d5:48:4e:b2:96:5d:12:c2:
48:19:1f:09:f5:a7:56:a6:15:18:eb:c9:2d:73:43:
00:92:10:ed:be:c1:50:93:2d:96:5c:3d:ad:aa:6c:
e5:c5:15:47:f3:f3:39:13:9c:4e:44:b3:e5:01:51:
04:a0:27:1a:54:d0:96:d4:a3:cd:67:f7:2d:11:a0:
0c:cc:08:20:18:df:63:cd:5d:3d:ba:bf:5f:46:80:
ca:7c:d1:33:fb:15:0a:59:1d:18:82:78:96:d6:0e:
8d:d1:41:31:4d:0f:6f:62:2b:87:90:3b:1a:d9:8c:
62:d0:ff:77:e3:ed:15:8a:e1:be:4d:0a:11:52:fb:
b8:4c:cb:1a:bc:e6:62:ff:71:67:ae:7c:7d:23:6d:
c9:8c:50:4d:37:f3:39:e9:de:35:58:b2:f7:c4:cf:
a2:e1:49:b4:04:a1:16:af:d9:05:57:30:1f:88:82:
00:c3:74:b9:04:2c:54:be:10:ce:96:f3:3e:87:12:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:58:91:31:C2:A2:4E:D8:B0:7E:27:2F:2A:93:3B:C6:A8:1B:49:48
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:f1:21:84:67:e4:69:f3:b6:eb:63:df:81:e9:08:dd:5a:
9c:c2:c0:2f:68:ef:5d:73:8a:83:07:3b:00:75:d6:81:a8:de:
3d:3b:ce:01:b4:27:e3:5f:b7:db:68:8e:f0:fc:89:85:7e:7b:
b8:10:02:72:b8:74:7e:9c:b9:a2:dd:cf:a5:08:b0:fd:c5:39:
04:cb:55:77:6d:5a:dd:64:0f:0a:66:cf:19:92:2f:b2:38:b6:
7e:95:0f:2d:a8:32:27:a4:a3:ab:70:32:5c:2f:32:41:70:f6:
76:18:f3:b0:c4:11:7c:54:46:31:5c:ea:38:98:a1:5e:29:db:
b9:d3:d0:7c:64:a8:06:51:37:e7:3c:0a:83:73:3b:e7:d8:22:
9c:c1:07:54:e6:12:01:89:d6:67:f7:6c:73:b8:73:90:25:4d:
59:7e:d9:2c:17:72:81:f0:e1:66:4f:28:98:b5:cb:31:92:1e:
c3:9e:94:d7:6b:f5:c8:6f:77:9a:c1:79:49:05:0f:7c:75:a8:
59:d2:59:52:ff:c6:67:bf:88:f0:57:c3:36:20:de:eb:9c:7f:
ef:32:b9:c0:6e:3b:a9:ee:83:dd:1e:2c:74:d7:b3:1f:26:0e:
00:52:eb:c4:c1:da:99:77:6f:c0:1b:9e:b8:16:3c:f3:ac:a2:
67:27:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:55 2026 by rpki-client