Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: 8Qs1xbFO+Nu/vLhup+L7yWnFNKXknOc1lV6Ty7EbtLo=
Subject key identifier: 2B:5F:65:6B:F5:33:72:FE:0D:6D:C1:5D:8E:7F:86:19:72:30:E1:33
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 019D25F10FB19A20891063B1642FF037B005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 0C71
Signing time: Wed 25 Mar 2026 17:00:48 +0000
Manifest this update: Wed 25 Mar 2026 17:00:48 +0000
Manifest next update: Thu 26 Mar 2026 17:00:48 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: JblydEjhMhCOjD/W//swy2pYgiseE5LNJy2pWDkbtaY=)
2: vXDjFBq71vr1IHmRZPDL7wXcmG0.roa (hash: NqguKijKf4+Gz8cTHroyn7BkPdAYo3NsoAn4kS9xt0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:0f:b1:9a:20:89:10:63:b1:64:2f:f0:37:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Mar 25 17:00:48 2026 GMT
Not After : Mar 26 17:00:48 2026 GMT
Subject: CN=2b5f656bf53372fe0d6dc15d8e7f86197230e133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:de:90:15:c4:83:e8:36:d8:02:56:3f:ef:
58:1d:92:fe:3d:72:86:a8:bb:c4:bc:c8:30:17:07:
4e:b7:12:9e:db:25:58:84:bf:20:66:2a:4f:fe:34:
2b:f8:60:17:48:29:83:19:40:47:0b:07:86:b6:44:
af:d7:98:75:8c:ed:6e:d4:06:04:52:d3:6c:ce:e4:
03:2d:24:79:13:06:e0:a3:a7:ae:35:a6:93:f8:20:
83:41:f3:d5:9f:f9:e9:b4:4a:7f:0c:7c:65:1d:be:
be:f7:70:ba:16:50:d2:06:db:5e:54:90:35:15:50:
6a:a3:9c:d6:a1:88:96:96:69:d8:fc:7c:1b:39:2d:
49:2a:a5:07:61:7e:22:bc:7c:c6:95:cc:eb:da:16:
a1:1f:36:5f:33:38:12:17:13:78:2e:2e:d3:ac:f5:
97:82:55:29:57:dd:9d:c2:cc:51:75:80:51:07:b2:
82:bc:9b:a1:27:3f:37:26:71:87:8c:79:c1:9a:de:
22:ff:a9:0b:8d:31:ab:b0:31:1d:e0:08:b0:33:95:
60:80:d5:3f:e5:22:3c:db:66:1a:ab:fe:bc:93:7d:
3d:ed:ab:37:90:c3:86:04:e6:7a:a6:14:5b:af:a6:
a8:cf:29:16:41:15:25:37:29:e8:79:47:95:24:d8:
d8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5F:65:6B:F5:33:72:FE:0D:6D:C1:5D:8E:7F:86:19:72:30:E1:33
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a4:0b:5f:af:a9:74:34:cf:cf:6f:07:ab:da:99:ad:00:aa:
98:05:e4:d3:a6:15:45:d4:b7:7a:2f:b8:72:e0:e2:5d:a3:e9:
fa:91:dc:0c:52:69:48:9b:21:73:2c:7d:9d:40:57:94:e6:d8:
f2:64:b3:0e:e8:62:f9:56:3b:c5:93:b0:a3:d6:e2:cb:e9:94:
7b:e7:a4:11:7c:69:69:84:9c:a1:e7:3b:af:9e:69:3b:64:49:
54:ee:1f:b2:ec:9c:e8:f8:73:47:ce:93:db:17:bf:16:bb:06:
6c:f1:06:3c:73:95:b4:35:c5:e3:b8:06:0c:55:e5:83:2b:e4:
28:bd:63:86:ed:88:e1:e7:37:47:f4:6b:22:ad:b5:c8:06:85:
0a:da:dc:85:36:f7:49:c9:a7:96:7a:f5:30:1f:ae:87:3d:b5:
9f:c1:de:fd:7a:0b:d7:f9:0a:5e:9f:0d:04:57:43:90:aa:76:
bd:55:3f:a9:b6:07:63:38:22:bf:5d:d5:53:23:6a:c3:5f:bb:
e3:18:ba:60:d6:dc:1a:7c:25:82:e6:42:eb:f1:13:cc:14:81:
5a:5e:62:f3:bf:a7:05:35:41:ff:eb:37:7f:d8:a1:9f:15:83:
72:f2:68:0f:ea:ae:27:08:07:ef:4a:e5:19:f6:e7:16:f3:bd:
15:e8:93:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:11 2026 by rpki-client