Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: FucxY7bYjsWRvTQqyOVL1TOSThOgJpXCEeDgYNmHHqA=
Subject key identifier: 86:23:03:B1:4E:76:29:12:96:72:46:6E:4B:FF:D9:16:09:2D:EF:CD
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 019D270436FADF5C3B4CC342C7FC6FFDA450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: 9faIgb6vdUmIyTVjibJSuOHDYNk.roa (hash: X64msVLgNRC3fKw+NLkotQNPw2VyPcVaP4QnP3a/6nk=)
2: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: C1H8hJ10vbsSv5fsZvyhSIEwyoZpC2el/5mxm5Pvxqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:36:fa:df:5c:3b:4c:c3:42:c7:fc:6f:fd:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=862303b14e7629129672466e4bffd916092defcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:bc:f1:2b:39:6d:87:95:eb:ef:f4:d6:44:
01:85:ce:cb:a1:f7:2c:8c:83:03:33:1b:53:2a:c2:
f2:8c:0f:93:e8:2a:3d:e9:e1:79:64:57:b0:96:45:
69:ef:87:1b:c6:bd:49:7d:aa:0c:04:5b:c7:8a:d8:
7a:e1:d7:ba:20:b0:cf:65:82:c7:15:0c:c4:f1:f1:
4a:25:91:e1:67:51:fb:6b:83:94:99:7b:a0:bb:08:
73:93:8b:6e:40:24:4d:04:59:df:2e:78:24:28:ee:
d0:a9:56:f7:20:a1:14:65:8c:29:19:03:f3:5e:3e:
63:ee:75:74:7f:91:16:8d:74:5d:69:cd:02:45:de:
64:d1:0c:ac:e9:cd:28:f5:94:a8:34:88:b4:42:8d:
6c:76:d1:63:29:bd:44:18:24:f5:06:a7:d1:22:5d:
3c:36:f4:72:26:97:2a:2c:05:3c:f1:91:49:e2:04:
de:53:22:3b:b0:f1:81:58:55:4a:9b:62:49:e3:35:
72:95:77:d5:e4:b3:ee:c2:22:b5:35:15:b2:71:bd:
99:4c:66:d3:de:a6:04:5b:0c:07:ee:41:2e:81:4a:
7b:ba:af:4a:02:78:e0:68:8b:a8:c0:b4:02:27:60:
ae:44:83:6f:c9:e1:1b:82:e9:dc:1f:72:32:c5:11:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:03:B1:4E:76:29:12:96:72:46:6E:4B:FF:D9:16:09:2D:EF:CD
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:30:f1:57:1e:11:1f:ae:a5:65:a6:c3:8f:ad:1e:f7:d5:a2:
26:b8:fd:09:8a:e2:9d:7b:00:4e:c8:22:40:bf:27:48:7d:1e:
1a:c2:1a:7d:45:47:81:ef:c7:d1:fc:c6:2b:70:5e:d4:18:90:
6a:3d:6e:39:eb:41:8f:8d:6a:38:d7:03:0b:30:b8:3b:36:f5:
90:da:70:c1:30:f5:ef:5f:13:0a:75:50:b6:7c:dc:7e:0f:65:
5e:c3:d0:37:7e:67:82:35:c2:cc:b2:c8:52:40:39:ef:3d:df:
7a:64:fd:ec:bf:e9:01:36:fc:d7:bd:cb:5f:29:cc:19:8d:ed:
cb:35:81:50:19:71:fc:24:97:fc:f2:a7:84:15:cc:d9:7d:8e:
ed:81:06:cc:44:2e:be:58:4f:e0:26:a3:85:04:fa:dc:c6:9f:
9a:29:d6:ec:c5:93:64:3b:6e:57:ce:b3:44:e7:dc:7b:a0:68:
78:5f:15:99:0a:e3:23:52:af:7a:74:6f:b2:a9:73:e1:07:ef:
69:b7:69:a6:6b:58:10:ea:b0:33:22:77:96:b2:7f:2f:1c:24:
83:b5:ac:a8:c2:35:d2:d7:cc:26:d0:c8:83:a3:6c:6e:72:8c:
e6:e1:21:8a:ca:cf:9c:32:1b:41:0d:37:2b:36:2e:43:61:32:
5a:08:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:30 2026 by rpki-client