Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: 3XWXmR5amZI4xVRw5zNk3k5OwxntPzNoQ3zqE2vArLY=
Subject key identifier: 17:4A:56:B4:B2:8E:36:C8:08:E7:FE:95:36:10:D1:30:95:A0:70:9A
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 019D25F207258D489B30B461806DC9D6A6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:51 +0000
Manifest this update: Wed 25 Mar 2026 17:01:51 +0000
Manifest next update: Thu 26 Mar 2026 17:01:51 +0000
Files and hashes: 1: 0U13Mcb_KgMF9K69fVfTmUTYf5c.roa (hash: 5Rvk9cCX7FFBTf2JwLTt90a00mmM2NZlX+HpUZifFpM=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: qoReOz27pywSXdBacAW+sz6X2f1talBmSOB8seN7hOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:07:25:8d:48:9b:30:b4:61:80:6d:c9:d6:a6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Mar 25 17:01:51 2026 GMT
Not After : Mar 26 17:01:51 2026 GMT
Subject: CN=174a56b4b28e36c808e7fe953610d13095a0709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:b4:dc:70:3c:69:41:42:89:67:94:81:c0:
87:04:16:75:a3:89:e9:55:3c:aa:f4:13:d0:53:57:
b3:68:1b:1d:9d:1b:18:67:08:1d:ad:f8:a9:84:7d:
47:ea:61:22:8a:f0:a1:aa:ca:33:3e:5a:46:e0:10:
c3:74:79:f0:f5:2d:6b:bf:66:7d:56:11:3e:30:95:
43:23:ab:75:5e:ca:1d:8c:64:da:47:75:4f:1e:83:
0b:3d:68:06:a4:9a:0f:d2:d1:d5:9c:6f:fc:04:72:
1d:8c:8f:30:77:87:03:7b:a4:ed:8e:87:7c:f7:99:
4a:15:7a:fd:e4:ce:16:9e:08:20:27:5b:5e:fd:51:
31:0c:89:bf:39:cf:1d:0f:cb:7b:6d:2c:71:8c:1d:
55:c0:76:19:d7:54:a0:03:95:8b:ee:fa:f5:0c:b6:
5f:99:6e:4f:e9:1b:10:a2:72:34:71:90:91:1b:c6:
d6:aa:91:68:40:3f:2a:09:68:2c:31:fa:e0:4a:42:
69:cd:3b:3b:87:84:9d:18:61:22:62:5b:8e:94:e6:
4a:4e:6c:16:5f:13:c6:e2:d3:e1:6e:2b:a0:d0:8d:
79:ac:16:61:7e:28:2b:f2:13:f5:1d:5b:f6:c7:62:
94:9e:b6:9a:f6:b6:e9:e5:ee:0a:b4:f9:0a:7b:dd:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4A:56:B4:B2:8E:36:C8:08:E7:FE:95:36:10:D1:30:95:A0:70:9A
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:97:30:43:87:25:5d:08:d4:3d:3c:eb:ea:3f:31:e7:dd:35:
fd:da:a5:d0:16:c0:10:8f:f9:5e:78:22:2f:fa:84:ec:72:91:
e8:3f:2a:22:8e:1c:7d:d7:65:54:aa:d7:68:fa:28:e9:c3:f7:
d7:fb:24:9d:18:08:91:86:52:ad:ca:d1:f6:15:2a:03:3d:05:
66:6e:58:5a:13:ca:ce:b9:24:e8:ee:de:2d:d4:92:69:9e:8c:
b8:3d:36:3e:01:df:11:8b:52:85:52:df:43:fe:52:4b:a6:16:
b7:d7:14:1b:ec:c2:14:ea:13:d0:72:d1:69:c3:b9:3c:73:74:
fe:57:2a:c7:5f:17:7f:3b:b6:c0:59:df:de:02:cc:1a:9a:c3:
a4:a1:03:15:19:94:fe:dc:0b:ab:2c:20:ee:6d:99:56:4b:8b:
2e:5f:14:50:e3:d4:e8:86:d4:d0:59:cb:ca:eb:1e:6a:e9:fa:
67:c5:34:04:b2:30:ed:ae:85:a3:8b:c0:d8:cc:f2:e1:fa:ed:
0e:1c:39:9d:e7:f8:77:eb:7d:dc:63:8c:03:05:98:26:01:4f:
b5:01:fc:0a:19:c7:f5:fc:52:09:a1:6b:ee:b9:cf:fe:80:9c:
26:8f:aa:61:19:47:4d:a4:37:d3:04:54:d6:2c:29:4d:5d:5e:
ac:03:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:47 2026 by rpki-client