Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: MO5sul0nrzVShxSoMM7wCs3dcuWsYhIUv6uXInKB3L0=
Subject key identifier: F4:52:1C:AC:3F:15:B4:AD:96:F6:97:21:78:74:C5:1B:7D:2A:EB:01
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 019D28BB7789BF471B9017A88AF04956586F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: 3nTdD7wfM2GrxPaacwSk/gk3w8A8DDXuWzhxRkE0wdg=)
3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:77:89:bf:47:1b:90:17:a8:8a:f0:49:56:58:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=f4521cac3f15b4ad96f697217874c51b7d2aeb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:ec:49:0a:4e:9b:cc:d1:5f:92:33:12:c8:
96:8d:c1:0d:4e:15:fe:3a:81:17:1b:1d:3d:a9:fb:
7d:39:3b:54:a4:56:fe:33:fa:95:68:cc:1f:42:f8:
4f:a2:67:d2:92:cc:35:e4:c4:d6:fd:66:1e:0b:32:
c4:3c:2e:81:b4:85:84:07:7b:81:c2:ef:24:04:5f:
78:25:a8:9c:5b:61:7e:4d:15:25:06:b1:64:a2:64:
a2:9a:07:f0:84:9d:ed:40:83:27:d3:77:70:25:8a:
90:ee:24:b5:2b:5f:dd:47:5c:de:94:1f:59:13:51:
3b:2e:5d:98:8b:6e:89:1b:6b:1e:44:2e:7a:24:75:
98:7e:b0:46:73:f0:98:7d:7f:93:ca:11:df:75:ad:
f7:e9:f3:02:34:c1:ad:e2:54:6f:59:41:9a:37:60:
e0:80:48:98:f5:fa:db:cc:cb:36:d5:d8:12:82:b8:
e0:a1:4e:79:ca:51:f7:55:b8:4b:f8:52:09:83:ac:
25:51:d4:39:b6:c1:90:0c:55:78:6a:3c:ae:aa:4a:
33:98:73:4c:80:24:5e:6e:7c:a9:0d:52:59:c9:ed:
c7:04:26:1b:87:5d:c8:6b:2f:f0:03:89:3d:af:49:
b8:3c:a7:c6:5e:0a:d6:ae:71:a5:4e:a1:91:75:d3:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:52:1C:AC:3F:15:B4:AD:96:F6:97:21:78:74:C5:1B:7D:2A:EB:01
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b5:27:ea:7c:6a:71:41:98:50:a5:5c:52:28:66:38:7a:f0:
5d:01:6c:f7:60:c5:12:4a:4a:f6:3f:1d:96:a0:b8:97:e2:0d:
3c:f5:df:7f:c5:a6:44:30:b2:78:76:df:50:f0:8d:b1:77:aa:
79:06:f3:66:83:37:4e:84:b3:96:8c:19:bc:de:9f:0b:83:75:
ac:8d:8f:7d:bc:31:7b:a0:9c:f1:b4:90:e1:18:31:e1:37:90:
8f:4a:ba:6b:3c:4b:b3:6d:0c:f8:52:50:9c:59:89:ac:2f:00:
05:54:69:f3:be:6a:b1:5b:95:68:bf:f5:c6:28:af:39:1a:91:
ed:19:f2:e7:33:e5:fb:d2:db:cf:2d:c0:27:97:16:d3:09:00:
42:77:cd:dd:f4:8b:69:d2:bc:9b:0f:81:3b:89:05:6b:ae:4b:
a8:a9:00:25:0e:d8:88:15:c8:91:48:51:4f:ce:39:2c:c8:4e:
24:ff:af:3a:54:9d:70:95:36:c3:ac:c0:19:30:c9:1f:94:c2:
5e:16:73:b8:76:ce:b2:ca:c0:1f:ea:cf:40:1c:23:cc:e6:96:
77:af:09:b0:a1:00:e5:69:67:46:a9:28:27:2c:be:a8:9a:b7:
26:1a:17:ac:06:d6:98:c2:30:3a:e7:6a:82:45:00:51:16:c5:
9a:ed:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:33:29 2026 by rpki-client