Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: sBpv2MjUvhsttufNsxWscLpVz70ihY8qwuAqx76qJew=
Subject key identifier: 38:7D:B6:4F:42:81:FB:3D:A1:27:45:86:F0:8D:A0:3F:E6:A7:50:0C
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 019D2627EDB10F0BCCC8F5B48BF0A8C6443A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:44 +0000
Manifest this update: Wed 25 Mar 2026 18:00:44 +0000
Manifest next update: Thu 26 Mar 2026 18:00:44 +0000
Files and hashes: 1: A7CQTr5pBgBzIdzy1eaJ3Q65E7g.roa (hash: SCCyAlxlyBAjRTD3ubr+rnpQzQMC0C+nrznDyncGUqc=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: PqeX+uH3Naf4+sjyW9gfLshCTirh8ZibgHTKQoXGdaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:ed:b1:0f:0b:cc:c8:f5:b4:8b:f0:a8:c6:44:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Mar 25 18:00:44 2026 GMT
Not After : Mar 26 18:00:44 2026 GMT
Subject: CN=387db64f4281fb3da1274586f08da03fe6a7500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:76:b9:75:18:36:6c:73:b5:bb:cb:70:ba:
99:a9:78:34:29:69:cb:47:16:45:12:b4:89:0d:f5:
23:17:31:4b:3f:c6:f0:82:37:e9:05:dd:84:3e:0a:
16:16:74:b4:f1:aa:89:a0:65:9a:58:9d:1e:a3:07:
6a:53:33:a0:57:89:15:73:45:2b:0a:5d:27:e7:ab:
79:7b:65:e0:a7:5c:be:ca:27:c2:5d:4d:f0:7b:d1:
d8:ec:33:02:5d:2e:b6:8d:c2:f8:b4:15:bb:85:91:
60:cd:a4:3d:96:8c:fb:ea:be:0e:2c:95:27:bb:47:
ac:c8:58:04:79:fc:d8:d0:58:a0:5d:7a:20:39:5b:
7c:0a:30:ba:37:13:08:cc:2c:93:bc:93:bf:4f:05:
17:ea:8a:b5:ec:48:80:a1:32:f5:1c:a0:d3:13:e5:
53:a9:c3:d6:b0:f4:89:d6:bf:2e:8b:e1:eb:ec:f0:
13:d6:6a:20:5f:00:cb:c3:9f:60:b8:d6:d2:1e:24:
38:5f:b2:6d:c7:de:16:82:26:e0:24:1e:00:24:7f:
ea:79:40:ef:fd:22:65:21:bf:f2:ea:cc:a4:6f:b1:
79:d1:b0:cd:20:4a:98:43:53:6d:6e:a4:1a:d8:49:
73:a8:7a:92:04:de:d0:6b:74:3b:7f:22:d4:75:fb:
5c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:B6:4F:42:81:FB:3D:A1:27:45:86:F0:8D:A0:3F:E6:A7:50:0C
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:f9:35:81:cc:20:78:02:49:b3:7d:92:55:5b:b0:e4:15:
f3:46:90:75:18:70:54:4f:13:f9:63:5a:59:f4:db:05:00:ba:
06:01:ef:f1:e2:5f:85:e9:eb:7f:bb:82:bb:72:67:a4:8a:50:
fe:d4:ac:ae:e3:89:e9:9d:a0:69:4b:14:87:0c:a5:24:f0:31:
5c:a8:a7:57:cc:25:48:91:8b:d6:d3:bc:b9:94:a1:c4:8b:58:
b5:0e:9f:3e:b9:ed:8e:26:e9:7c:64:65:2e:06:f3:c8:7e:2a:
dc:5d:e3:28:e5:f4:60:2b:ad:bc:76:ff:e5:bc:96:e9:b5:f1:
05:c1:55:6f:3c:26:c2:c2:3e:b7:87:e2:d0:80:6c:ba:46:63:
07:9c:84:07:27:ff:22:51:c0:de:29:9d:9a:24:d6:9c:9a:bf:
74:4c:7f:dd:e3:bb:0a:7b:b4:ca:9e:5c:21:6e:34:33:1d:08:
38:1c:6d:70:49:cb:49:09:ed:01:eb:78:d7:f3:71:a7:cd:ae:
31:93:31:c5:e1:20:ee:00:8b:e9:eb:27:6d:49:f5:07:24:85:
24:86:8d:3d:44:59:e1:02:80:1e:0f:2d:6f:a0:58:16:af:83:
70:0e:52:7c:9d:57:3a:32:18:59:69:86:68:63:7b:45:75:7b:
d3:f7:e7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:31 2026 by rpki-client