Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: kWe0G9gfSIYJS3Zyac911K2Ci1AwehcM35AQf1oJtVI=
Subject key identifier: 86:50:AF:E6:B1:75:C0:B4:55:85:40:D0:1D:FC:2A:95:66:8E:23:B8
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019D284D5240DDAB198BD5DFE0FCD24B2A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1473
Signing time: Thu 26 Mar 2026 04:00:49 +0000
Manifest this update: Thu 26 Mar 2026 04:00:49 +0000
Manifest next update: Fri 27 Mar 2026 04:00:49 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: KH9re2RM+7mixNZLrJXPSgvc7KR6Aje94H2hKM1/9qk=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:52:40:dd:ab:19:8b:d5:df:e0:fc:d2:4b:2a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Mar 26 04:00:49 2026 GMT
Not After : Mar 27 04:00:49 2026 GMT
Subject: CN=8650afe6b175c0b4558540d01dfc2a95668e23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:83:df:81:56:ba:75:bf:a3:25:2c:c8:3a:
c8:d5:a3:85:25:03:24:f7:66:44:f5:87:a6:32:12:
d9:5f:cc:25:03:3c:2a:78:c2:d6:de:22:e3:9a:33:
78:aa:48:f8:78:d2:85:5a:eb:72:14:b2:b6:55:8c:
d3:74:03:aa:e4:ea:52:44:ff:f1:43:ed:f6:43:00:
e5:e7:c7:b6:4b:6b:3d:6c:c3:42:46:c7:24:d5:35:
2a:15:ef:4a:9a:20:1d:40:92:99:69:40:ff:15:a5:
82:36:c2:b4:9b:79:12:6a:e6:4d:ea:30:2c:fd:ff:
67:ef:a2:c2:52:be:9f:39:a6:65:b4:e1:22:d1:1a:
d0:36:08:96:a2:6a:79:16:c4:b6:ff:69:18:06:f7:
22:a9:46:00:a5:53:d8:3c:4d:68:46:db:49:a8:31:
de:32:be:fd:2e:67:60:dc:c5:23:f8:c2:ee:1b:b6:
dc:57:f7:b5:9b:6b:34:97:73:48:4e:22:7d:c3:57:
86:4f:47:36:b3:33:2f:76:2e:99:8f:10:46:e0:f1:
72:6a:bd:3b:81:f3:4b:93:c1:a2:ed:51:96:03:55:
2a:83:12:95:d1:37:8c:0f:5e:4c:2f:01:89:03:38:
33:a8:e3:6f:d6:b0:6d:97:7d:0f:9d:3a:07:10:f9:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:50:AF:E6:B1:75:C0:B4:55:85:40:D0:1D:FC:2A:95:66:8E:23:B8
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:be:8a:22:cb:b7:30:fe:b1:a7:66:d4:65:0d:75:50:c6:70:
c9:e4:53:b3:8c:8f:98:ba:d8:f1:a4:92:2f:ab:13:80:7b:7e:
cf:94:b5:86:e4:9a:b8:67:3d:a1:48:99:ba:d4:e2:a5:17:72:
65:26:79:64:d0:0c:d1:cb:aa:2a:6f:81:2e:10:2e:05:59:c3:
0d:d5:3b:12:9f:b3:f4:e3:67:86:68:ee:f6:a0:12:b1:a3:ee:
94:0a:2a:db:80:e2:9a:3d:4b:b5:50:3f:c3:51:24:1b:52:53:
76:3a:a6:d4:94:87:57:f9:84:ec:be:81:92:20:a1:bd:c7:86:
93:97:e1:f8:b9:15:90:d0:01:5b:b9:c3:77:cc:de:65:13:4f:
71:e8:22:da:64:75:dc:6b:8b:b6:71:c1:36:3a:c9:15:1b:ad:
c3:38:c4:db:aa:4d:62:48:86:4a:8a:9f:11:9f:a8:5e:8a:4f:
2e:1c:55:b1:de:6e:1b:88:06:2c:1e:31:07:1b:3c:f2:80:cd:
89:af:d0:5b:c4:b7:b9:fe:82:33:f1:1d:83:6f:eb:e1:63:b4:
13:14:99:18:4b:36:05:d8:c5:85:1d:41:be:c9:0a:c2:d8:fc:
3b:ea:e6:18:6e:b7:3d:c2:ad:d4:86:5a:0e:9f:17:a3:12:92:
e0:6b:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:47 2026 by rpki-client