Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier: YvfjxmwxcHAtUtkGrNx7CpanFQNmTyTXxLC/OZe8pn0=
Subject key identifier: 6A:FC:4D:28:1E:C6:FC:2C:DB:AD:6D:4E:97:A5:B6:73:9A:19:FB:3B
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 019D2960C6FB5D99F9FB47AA7221157D67A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number: 0B3D
Signing time: Thu 26 Mar 2026 09:01:41 +0000
Manifest this update: Thu 26 Mar 2026 09:01:41 +0000
Manifest next update: Fri 27 Mar 2026 09:01:41 +0000
Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: GoKzSh6hjlKUxPxyLhPrM1lt6P5ZLl6wqjuFrXfU1Lc=)
2: wtI-ANmO5FYIJpLW-Qu0MuFucv0.roa (hash: XSrjLqDdhhY/61FiPVrXSlTMC93qGR+lfOxNMEV5xSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:c6:fb:5d:99:f9:fb:47:aa:72:21:15:7d:67:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: Mar 26 09:01:41 2026 GMT
Not After : Mar 27 09:01:41 2026 GMT
Subject: CN=6afc4d281ec6fc2cdbad6d4e97a5b6739a19fb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:5d:b7:ab:9c:b4:50:75:ea:e5:da:4a:06:
52:f8:6f:05:86:7f:83:0d:32:8a:93:1a:2b:12:89:
59:9c:0c:66:7f:70:cb:c6:a1:b7:6d:ec:13:24:94:
3d:29:7a:cc:8a:6c:37:42:6b:27:55:51:6e:95:85:
84:cc:e3:f6:09:12:a6:ca:0f:29:2a:1b:8d:ee:b3:
cc:4a:31:bd:6e:3c:92:c6:20:e9:08:28:88:18:ee:
f2:1d:af:8c:69:fa:84:d3:d9:56:4e:4e:70:85:73:
f0:8a:f7:04:ff:1a:37:0d:63:f9:f8:e5:c6:a4:cb:
48:00:3d:2e:21:14:ea:e5:62:d5:c4:22:e7:bf:15:
d7:cb:49:9d:86:44:36:d4:f8:df:8f:29:02:10:a3:
e8:ef:62:d5:78:16:d4:73:ed:6d:de:79:bd:e0:b4:
f7:a4:60:73:8c:b5:09:89:07:73:f6:08:40:3c:5a:
fe:f0:1e:af:44:7e:0c:94:e8:be:94:ab:82:6c:90:
74:18:d9:d1:7f:81:45:bb:e2:1f:8a:43:db:25:5c:
70:ba:6b:af:2c:09:18:ae:b1:2d:c0:10:b3:c7:5f:
cf:a8:07:1a:78:82:eb:de:d3:51:fd:0d:6c:16:d9:
0e:7e:d8:07:52:b4:71:85:25:a7:cb:40:8d:99:cd:
e1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FC:4D:28:1E:C6:FC:2C:DB:AD:6D:4E:97:A5:B6:73:9A:19:FB:3B
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:83:e3:22:96:49:f6:d8:f2:a2:a9:23:87:cd:50:d2:a4:1a:
38:d1:29:88:c1:eb:0a:49:08:5b:62:b7:87:cb:1a:70:31:e6:
ed:8d:bc:c8:8d:c4:6b:5d:a2:62:d7:fe:59:a4:68:bd:cc:25:
89:96:e3:ed:92:48:06:b3:73:ff:5a:23:60:ff:78:dd:51:d1:
e2:dc:4e:c8:28:09:12:9f:e0:16:67:08:a0:af:4d:76:50:1c:
76:ca:49:7a:03:23:d0:54:5d:1f:0e:8e:91:5a:33:bd:b5:0d:
09:4a:09:8c:95:ac:c6:15:78:c4:d6:07:60:7f:d3:15:3e:bb:
2e:cd:71:09:5b:d4:4c:be:d6:10:6c:8b:86:b6:2f:9c:80:c6:
ad:11:1b:06:8a:14:be:0d:d2:49:d8:df:ca:e7:7d:a5:48:f0:
a3:ba:f8:df:d5:2d:de:6f:b7:d7:86:7a:6e:80:2f:31:a1:c4:
67:4d:35:48:38:74:86:0a:fb:21:9d:5f:f2:7e:fc:c8:d7:d6:
a2:d9:01:08:0a:e5:f0:ec:d5:aa:1f:89:2c:53:c3:2a:7a:06:
54:91:18:73:29:54:43:fb:75:1b:8b:a4:2c:13:d4:98:fc:94:
a7:7f:9b:26:c1:e1:53:fc:5c:a9:81:0f:31:a8:df:2a:bd:b4:
ad:76:7d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:47 2026 by rpki-client