Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: lRUgTNqreEQ/2eMuCKzRl1wMvtYNBKc3/VtqV0Tyg5Y=
Subject key identifier: 5D:84:28:AF:12:BB:CF:84:F1:94:B0:B0:09:DA:A2:DB:23:77:E5:27
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 019D26CD39CFD68FBE3B5D5BEC0C090B4FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: 02FC
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: WYq_SwOSBS5C2flPsPwqJm7TWQ0.roa (hash: 6TuNzzukIi+p4GfJ3ZlekfC6HWDwvlGuM10xKCq4iF4=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: lSIltPSM6Yfx/heXCz9dvQ6SZm/2+MmlYWNVhLMXXSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:39:cf:d6:8f:be:3b:5d:5b:ec:0c:09:0b:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=5d8428af12bbcf84f194b0b009daa2db2377e527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:74:0d:d3:14:01:01:9f:79:b1:62:85:6c:
07:be:d1:04:70:48:ed:89:04:a2:5c:38:1f:11:4e:
59:be:f6:2b:4b:50:a7:4b:0e:63:32:90:09:f7:5b:
00:2a:12:fe:32:2b:57:c9:5b:ae:6e:68:c9:d2:8b:
d9:8e:db:48:0f:c3:3d:81:f1:7a:75:cc:f1:80:ee:
22:b1:64:72:2b:d6:74:02:ce:c3:10:fc:8b:b3:9e:
89:9e:0f:09:27:fa:90:61:c9:6c:8a:e7:98:f5:84:
36:68:c8:d9:66:1b:79:03:d6:8a:3e:c0:bd:38:a8:
1a:4d:51:f6:64:84:11:17:6c:0b:32:49:e3:51:02:
ab:1e:61:d0:b4:ab:7e:34:f5:61:fd:00:ec:95:76:
da:7c:95:7c:ba:c2:0a:10:15:52:b1:8e:87:f8:34:
ca:0b:c2:d1:99:c3:8d:85:d7:6b:33:02:1e:5d:50:
96:f5:61:6b:d7:ad:97:94:9f:72:d9:8b:64:89:d7:
3f:89:1d:94:1f:ec:b6:3e:78:75:7a:67:81:11:b0:
da:e7:aa:d0:06:ff:c0:90:bf:fb:3d:de:08:11:fa:
53:be:5a:5c:20:14:9d:c0:8d:99:ba:1f:f7:23:9a:
93:48:68:aa:91:e0:ab:6c:f8:93:e8:cb:17:d6:9f:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:28:AF:12:BB:CF:84:F1:94:B0:B0:09:DA:A2:DB:23:77:E5:27
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f4:68:8d:35:b2:0f:27:0c:5d:f4:97:72:b2:c2:e9:ca:75:
73:75:de:1f:e1:75:9b:d4:72:bc:c3:38:42:57:aa:ee:0d:84:
9c:01:a4:bc:68:27:93:d9:ad:ae:1a:03:1f:20:f7:ad:b6:33:
93:3e:f2:05:85:82:59:07:47:2c:90:12:5b:7c:13:c9:82:c5:
29:e7:cb:0b:e9:e4:a4:8e:6a:02:cb:b0:1b:42:85:c2:e4:12:
af:f7:d9:fa:53:48:c2:70:1d:c0:bf:1b:06:c2:20:5c:7b:b7:
28:59:e7:78:73:4e:4f:e6:64:0f:41:66:41:ff:f4:58:45:72:
74:2e:8d:4c:03:d0:d7:26:4e:ed:8c:80:6e:3d:c4:5c:94:69:
e5:e6:e1:d5:01:ba:1e:42:cd:34:55:88:a3:9a:03:e0:f2:c2:
26:9c:3b:98:ab:55:b4:eb:cb:27:98:61:27:58:7f:3b:5a:25:
97:15:12:f4:f0:f1:f0:6f:e3:e9:8c:4c:49:ab:df:45:db:72:
0b:92:ab:7b:59:42:48:ed:e6:26:27:fc:dc:1a:2a:40:f6:3f:
62:92:80:86:89:fa:f0:a0:34:08:3f:48:b0:d7:7a:b0:b5:82:
af:5c:dc:b2:f2:f3:3b:f4:f5:81:03:6a:6d:96:b1:6d:5f:3c:
fc:67:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:19 2026 by rpki-client