Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: +myLUTn8RiB4aa21Mg3sjtHBVDbSGTI4FehXH5n7WdE=
Subject key identifier: 50:F3:45:20:CB:5A:09:77:54:8B:56:39:4A:3B:09:96:B7:64:29:74
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 019D25F15B47DD801D5F226DD94BAFCD9FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:07 +0000
Manifest this update: Wed 25 Mar 2026 17:01:07 +0000
Manifest next update: Thu 26 Mar 2026 17:01:07 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: LX1sc9+J5966rSP617Mqv30MFAmgim5laXMiqJqeJv8=)
2: Yf6ZWqUXXhcxyz3yHShQ-wPMSrs.roa (hash: Mgnv3OuUKOPzy7mBsU09wit3ti136EdMHMxaYU6rvTU=)
3: wP20WFZup3bISfc_Az9m_KnK__k.roa (hash: 8g/UdUihVktN9azZ2xN449i/gKlFKKRPLjoY2fK8Miw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5b:47:dd:80:1d:5f:22:6d:d9:4b:af:cd:9f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Mar 25 17:01:07 2026 GMT
Not After : Mar 26 17:01:07 2026 GMT
Subject: CN=50f34520cb5a0977548b56394a3b0996b7642974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:3f:81:5f:f5:d8:02:09:19:4e:7b:f4:fc:
90:cb:8b:61:2e:cd:bd:cf:c7:c4:fd:c5:c3:e0:1b:
93:2d:65:c3:3c:a1:3f:57:db:9d:f3:b8:e8:df:0a:
e2:07:eb:e5:8f:23:12:94:44:cf:1e:d6:db:49:ba:
4d:5e:c9:9b:f7:57:b1:ca:e8:77:ea:fe:a4:f8:10:
0c:8a:d3:fb:69:45:8a:a5:fe:57:6d:b4:ff:80:03:
75:43:b1:f6:16:fe:16:5e:fe:10:c9:20:f6:9a:c0:
1c:57:07:cd:ea:16:a8:db:5b:1f:47:5d:c5:23:79:
a8:e5:66:06:76:51:9d:8a:a1:0d:80:b2:ff:1e:c8:
b6:03:15:94:5b:5a:59:69:b3:87:00:57:04:8e:a7:
3f:96:a9:d2:db:dd:a8:d6:a6:94:09:66:24:58:74:
9c:f9:25:e5:1f:16:fd:e7:e4:75:20:8c:33:e7:00:
9d:d1:29:75:00:57:5e:1f:f5:6a:20:6c:29:d1:1a:
e1:11:9e:db:e1:8c:84:ee:80:34:3a:1b:62:c4:fb:
03:70:e8:f9:66:21:4b:c1:5b:b0:99:15:65:09:ac:
41:a8:8d:0c:da:27:cd:e5:c6:94:08:4c:e4:b3:f4:
36:01:47:d5:81:8c:b6:40:0f:e3:6e:03:f9:11:13:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:45:20:CB:5A:09:77:54:8B:56:39:4A:3B:09:96:B7:64:29:74
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e5:45:7d:f8:d6:6c:2a:43:ae:b4:79:8c:98:d3:89:a3:8d:
ae:60:fe:34:7e:ba:d8:22:b9:d8:c2:b4:70:a8:80:84:5a:dc:
c7:e8:3b:46:a1:c7:86:f8:f8:92:6c:d4:66:24:8d:05:84:f5:
c3:44:6e:92:61:40:41:0d:27:5e:79:ff:6a:23:78:b1:a4:2c:
50:d0:9f:5d:2e:ea:fa:9a:c4:aa:1e:3e:87:72:9a:c7:25:b9:
c4:c3:47:aa:c1:18:78:86:0d:a3:e7:56:83:b7:e4:f7:aa:7f:
d0:ca:0b:d9:ed:73:0d:e9:98:8b:c6:3f:2d:04:de:d9:44:c4:
f1:af:3e:bd:cf:5f:49:78:4b:b4:84:84:37:f7:c1:48:ad:e3:
c2:46:f8:ef:59:c2:a5:87:6a:80:f5:93:14:69:a2:e7:d3:9c:
4a:ce:c0:26:a1:14:49:9b:cd:de:37:5c:98:fc:f5:e0:d7:ce:
4d:ea:51:08:10:14:a1:de:f3:9a:7d:ef:aa:24:a3:82:5b:9b:
9c:58:34:88:19:86:6a:5a:40:a9:3b:67:30:c3:da:aa:cd:77:
c4:51:4f:92:e1:af:84:f7:9e:e1:85:3e:bf:66:b7:5f:98:22:
92:3a:b5:ad:46:be:f6:73:9f:20:4a:36:3e:64:82:48:d5:a8:
a6:3d:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:29 2026 by rpki-client