Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: 6+PYfpIQuOKHV0I/bqc9CNySThrUZC+x9uTnGNOjiH0=
Subject key identifier: 11:C5:59:E0:F4:D1:19:92:B8:A5:73:1E:60:2E:91:31:5C:BE:67:8F
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 019D2884C06501E3B1C032A60A2FFCA70985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1898
Signing time: Thu 26 Mar 2026 05:01:21 +0000
Manifest this update: Thu 26 Mar 2026 05:01:21 +0000
Manifest next update: Fri 27 Mar 2026 05:01:21 +0000
Files and hashes: 1: 8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa (hash: t/Oe6Qxn1Q8l5QIgdUYlJOyiuVrQkJMwXy5rbKbKUCY=)
2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: ThLDM7FSaAy48xmPJG7XFRq+NxTwTg2jSCx4ewslRoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c0:65:01:e3:b1:c0:32:a6:0a:2f:fc:a7:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Mar 26 05:01:21 2026 GMT
Not After : Mar 27 05:01:21 2026 GMT
Subject: CN=11c559e0f4d11992b8a5731e602e91315cbe678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:eb:0d:72:9f:2f:d5:ef:a4:2e:b0:7a:09:
69:87:f0:43:c6:b9:ad:51:dc:62:e7:fe:15:16:3e:
76:ba:7f:89:48:cb:d5:bc:95:03:e1:ff:83:b1:c9:
fe:8a:f5:a6:df:ef:25:78:a3:8b:de:f3:8f:28:14:
3c:5c:dd:6e:25:b9:76:5b:28:c9:55:85:c2:89:55:
10:20:41:87:76:6a:64:52:91:0a:98:7a:ae:7c:f9:
1a:c4:44:4e:ba:2f:4f:bb:9a:f2:72:10:aa:5c:07:
4f:b5:e6:32:d5:51:bb:d5:d8:b0:62:c1:5a:3f:59:
3a:7b:b2:ce:84:f4:6a:b6:22:e9:cd:3b:3c:81:1c:
17:a3:24:91:13:da:b0:38:33:5e:03:17:d2:a7:e5:
d1:db:8c:f1:15:22:78:11:39:6a:aa:33:dd:60:81:
52:69:99:87:1d:5f:0c:5e:62:f4:fe:f9:48:80:d5:
3a:f1:8d:ae:c4:34:dd:be:4e:19:81:5b:39:22:60:
c8:90:d1:fe:72:76:0a:7b:d2:c1:99:db:dc:38:3d:
05:9f:70:0d:a8:04:87:af:5d:89:7f:f7:4a:d9:8f:
9e:bf:f7:95:5c:80:9a:97:c3:78:3b:bb:50:1d:e0:
53:77:3b:37:73:61:78:a2:a8:3b:cc:8f:fd:e8:4d:
67:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:59:E0:F4:D1:19:92:B8:A5:73:1E:60:2E:91:31:5C:BE:67:8F
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:23:a5:4c:f7:e5:ff:60:97:de:cb:3b:44:83:53:b1:cd:
d9:26:a4:41:d1:8d:a3:bf:b1:c3:ea:78:64:b0:1c:a5:cc:c4:
6a:37:d6:96:15:82:cb:54:d7:51:af:df:24:2e:d0:14:0f:2e:
ed:53:2e:ac:4b:5b:1e:14:9e:bc:dc:62:79:3a:da:25:77:58:
39:02:a9:1b:bb:8a:f3:7d:24:4e:0c:48:34:03:0c:df:fc:64:
e3:5e:8f:20:f3:d2:84:aa:d7:cf:8e:ae:2f:66:6c:88:0f:ba:
0f:61:61:50:c3:f2:f1:99:3f:1e:73:4d:c4:f6:fc:1f:28:8f:
3a:06:7b:b5:96:51:54:22:a5:73:b1:e1:db:17:c6:6f:c0:51:
3b:10:d4:7c:e6:02:f5:85:c4:e1:8e:a8:ad:87:aa:b9:95:b3:
9e:cd:02:b0:9f:a3:3a:a2:1e:d9:65:2b:47:93:ae:64:3e:fd:
f2:21:e3:4d:2d:bc:4a:05:ec:c5:ac:f0:48:c1:79:f1:23:a8:
7b:fc:83:80:db:ba:c0:3c:1a:f5:c7:95:de:60:66:29:bd:e0:
d4:13:d7:a3:ed:cd:d0:fc:1c:58:f2:7c:ed:f3:ee:d8:6d:5f:
30:eb:62:c7:7f:98:c5:cf:24:9a:c4:44:7b:47:67:32:ea:48:
4e:75:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:01:40 2026 by rpki-client