Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: jxJaGCq+mULTbaT+LIhM+SEllocrO0wunlpb3bn6Kpw=
Subject key identifier: 43:BD:EB:CD:C1:33:27:7B:50:FA:A3:30:3B:58:16:4F:F9:2F:5D:2A
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 019D27DF4DA68A6AF2847EE485C9E48A1C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 17DC
Signing time: Thu 26 Mar 2026 02:00:38 +0000
Manifest this update: Thu 26 Mar 2026 02:00:38 +0000
Manifest next update: Fri 27 Mar 2026 02:00:38 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: 8sm2gZXd/LDQeG6PWTH6PmDEd4vP2+wZo8luolBXYqY=)
2: bj3I_g97Yahu7vddzs1BZpAT61I.roa (hash: Umd8xcEXcey7lYUK9Epa+37FhJD7JxD8DRhMnzG18gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:4d:a6:8a:6a:f2:84:7e:e4:85:c9:e4:8a:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Mar 26 02:00:38 2026 GMT
Not After : Mar 27 02:00:38 2026 GMT
Subject: CN=43bdebcdc133277b50faa3303b58164ff92f5d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:70:54:73:ef:9a:b2:14:2a:5e:8b:82:ef:
0e:0e:49:b8:70:7d:8d:5d:26:55:73:fc:75:d1:2b:
e6:ec:90:fb:df:93:9f:0a:a5:e6:85:51:2f:ab:e4:
bb:27:ba:96:b5:92:a7:a1:ee:db:01:df:d3:05:51:
76:5a:d4:41:bb:1c:7d:4e:ef:6a:a5:37:c1:f1:45:
26:fd:37:ef:ec:a7:63:d8:41:61:40:f0:fc:db:d1:
63:bd:28:7c:d4:fd:c3:12:0a:c5:30:0d:f0:ac:5d:
d4:8e:0f:cd:d6:7b:0b:fa:9f:cc:76:e0:d7:57:68:
79:06:64:97:2a:06:cf:1d:a8:0a:5f:d9:95:19:9e:
e0:1d:27:ec:31:51:64:fa:0a:c2:3c:f8:ef:13:98:
a4:13:79:9a:bb:6b:b3:e3:ed:26:d2:9a:01:ac:f7:
67:2a:d4:b3:1c:7c:9c:39:fb:bf:f8:07:aa:ba:57:
ef:1d:91:01:f8:3a:76:8a:28:27:2f:ce:59:7d:7f:
6f:b1:27:ad:03:5d:64:22:0a:ca:60:28:4d:8b:cd:
ac:b2:27:67:5b:d9:cd:0f:fe:0e:c9:78:3d:aa:fd:
f3:6b:f3:19:ea:46:c9:2f:63:a5:37:d4:e6:3f:be:
0a:f3:34:bc:61:66:32:8f:40:60:5e:b9:76:0b:ae:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BD:EB:CD:C1:33:27:7B:50:FA:A3:30:3B:58:16:4F:F9:2F:5D:2A
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b7:2e:b8:bd:42:9f:62:29:12:d7:91:77:a4:a6:41:2c:7c:
a7:b7:8e:47:be:77:1e:18:8a:99:92:fe:98:f9:11:b1:ff:19:
74:19:c3:08:6e:5a:f0:8a:48:5a:cf:f8:3a:27:50:db:43:9d:
08:a6:16:4e:8a:5d:12:b5:8f:aa:b5:7c:3d:06:3d:2b:84:ba:
a3:3c:3d:a8:ff:9e:37:df:b3:84:60:32:05:1f:68:bd:9b:b3:
51:6f:e3:90:ea:85:1e:8d:13:d4:86:3a:1e:17:ca:75:00:48:
cc:97:ff:6d:85:b8:fa:22:cf:03:47:8c:02:df:ce:54:ba:65:
6d:8c:55:34:9f:53:b6:c3:43:6a:c5:17:48:97:c4:1c:e8:a2:
40:16:2b:81:4f:3c:85:34:6b:8d:18:d5:52:ea:f8:b9:a5:49:
ea:c6:05:62:ea:3c:e1:0a:6a:3c:8b:3d:3d:cf:c4:64:6c:56:
a8:df:f8:97:8e:10:ce:25:4d:bd:f3:57:2e:77:04:3a:9d:eb:
b2:c3:aa:16:99:24:af:c7:39:54:f3:47:6c:e1:c6:54:af:f0:
3c:00:67:61:af:45:93:b2:74:13:2a:e7:09:cb:af:1a:75:53:
b6:c0:68:b9:2b:04:68:e1:ad:f9:de:2c:a2:38:7c:93:96:14:
de:8a:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:57 2026 by rpki-client