Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: oOtxglXoMciJE2CPe0Dpv3toYzflI0pOVDrYceGAX4s=
Subject key identifier: 24:AC:39:5D:4E:99:7B:A0:43:74:97:78:1B:26:E5:1E:D5:F8:7D:F6
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 019D27DFE120BFC5718725BFEF1AAEC296A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 0D30
Signing time: Thu 26 Mar 2026 02:01:16 +0000
Manifest this update: Thu 26 Mar 2026 02:01:16 +0000
Manifest next update: Fri 27 Mar 2026 02:01:16 +0000
Files and hashes: 1: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: 8HX0GhDBc0qq6cFtU6617AebTe3UGK4+2O7pY6wDZRM=)
2: p44ZTLaNJwPrOIP5p5pZUGavoYE.roa (hash: B8cHOO2fu5FxQlQTcxJxtbQRyHkAMsxsU+Gd1QwUliA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:e1:20:bf:c5:71:87:25:bf:ef:1a:ae:c2:96:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Mar 26 02:01:16 2026 GMT
Not After : Mar 27 02:01:16 2026 GMT
Subject: CN=24ac395d4e997ba0437497781b26e51ed5f87df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d8:34:05:0b:86:4f:28:97:c7:7f:11:64:61:
13:17:69:35:8e:7a:69:34:93:35:19:1b:62:96:ac:
04:b5:1b:e8:18:98:26:78:44:89:a1:39:21:0e:cd:
2d:71:1c:e4:57:5f:fc:bc:36:29:f8:d5:9c:43:ed:
ca:04:64:13:de:0a:e7:e7:dc:7b:58:aa:18:7b:ee:
09:43:a0:ab:fc:f8:09:bf:b4:bc:f8:63:de:92:ea:
06:2b:1e:68:cb:c1:2a:15:1b:78:a1:b5:c9:49:dd:
1a:5d:bd:a5:7b:ae:d6:84:85:52:64:ec:df:7b:c6:
d6:64:db:08:12:cb:c8:f2:c5:4c:9d:9e:a1:d1:8b:
ab:b9:eb:8b:42:f7:67:03:28:28:b6:88:de:65:50:
37:26:d0:bc:88:40:a0:26:c2:ec:49:87:13:09:9a:
cf:10:71:ba:d8:5a:db:58:e3:37:6d:d6:86:ef:fc:
ac:b3:29:4e:ec:f8:1b:a8:95:7c:57:85:79:38:d0:
e3:85:45:bf:87:00:af:59:0a:2d:67:f4:66:a9:b1:
82:f8:66:8d:c1:86:31:63:9c:d1:03:1b:3d:6a:17:
86:ae:c6:53:28:0d:b2:38:0f:71:ee:e7:65:16:00:
fd:f1:ad:49:b8:8b:6e:64:8d:4a:19:3d:9b:fb:8c:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:39:5D:4E:99:7B:A0:43:74:97:78:1B:26:E5:1E:D5:F8:7D:F6
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b4:07:95:14:1e:f7:fd:80:d2:8d:a2:c2:61:8d:ab:90:e7:
07:1d:44:69:2c:00:ef:26:1e:ef:55:cc:55:78:77:3f:6e:c5:
d2:bb:c4:b7:45:81:5e:1a:eb:1c:20:d9:9c:4f:4a:3f:19:b5:
3a:7c:1d:37:a5:a9:3f:32:ee:e1:3b:df:46:c4:69:e9:af:a7:
7c:18:c6:b6:78:17:32:76:57:cc:b3:62:de:fe:f9:3d:8c:c8:
e6:40:b9:04:ae:d5:3c:00:4b:ab:8f:35:8a:93:da:5e:a4:8f:
60:53:50:4c:8b:c0:d1:8f:83:b9:fd:3e:40:be:c3:ec:1d:0a:
d4:e9:01:c4:33:79:76:d9:90:f3:a8:85:74:78:e6:90:52:b5:
81:f7:3b:39:ae:95:dc:2d:8a:d7:4b:70:ca:00:5c:13:08:65:
07:d1:68:fd:fc:43:3e:d1:a6:fb:fb:58:33:0d:3c:9c:d1:e8:
a8:5e:4c:75:08:6d:2d:23:41:60:f9:ce:2a:9a:bd:27:a9:4a:
63:a7:6d:b6:f6:e4:bd:c4:3d:9b:94:f3:36:ef:b2:cf:4b:81:
d4:81:e5:0e:b8:8f:57:77:c9:cf:bc:dc:8a:b8:f5:83:3a:df:
3d:82:e3:cd:bd:af:89:26:f0:59:6c:19:7a:c5:ec:9f:e7:45:
38:81:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:46 2026 by rpki-client