Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: m4+EKnkKd2IG1/OwesuqWUxjKKOPbx3KFBTD/4VMAT8=
Subject key identifier: B9:00:D8:7B:C5:28:EA:9F:5A:CC:24:91:8F:0E:CD:CD:5D:7C:F6:C7
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 019D2AA9CD9BE773EE5DF23B4BB86E5BA324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 15:01:04 +0000
Manifest this update: Thu 26 Mar 2026 15:01:04 +0000
Manifest next update: Fri 27 Mar 2026 15:01:04 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: RojI3gU4psJs6ojz/M3i3WW06DWtyhbMT5lsrd9Byek=)
2: MkZDnhBWSDVFNPdTIbLySY13AZo.roa (hash: G0tZaVek6hHuGJJA8eubBZEIhMXdNUS6nfdqgnLslHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:cd:9b:e7:73:ee:5d:f2:3b:4b:b8:6e:5b:a3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Mar 26 15:01:04 2026 GMT
Not After : Mar 27 15:01:04 2026 GMT
Subject: CN=b900d87bc528ea9f5acc24918f0ecdcd5d7cf6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:52:54:4b:a5:81:15:24:6d:44:1e:24:a2:9e:
6f:f3:a1:2a:63:74:99:d3:8e:da:e6:d5:e6:0e:bf:
7f:e3:0e:ae:3e:43:f1:cf:62:cb:51:8f:47:3a:b3:
84:9e:32:c0:64:ef:b2:f2:6a:9c:8e:db:59:30:76:
07:f1:b3:70:13:8c:91:b6:e6:d6:f9:a2:a1:d5:b8:
f4:ba:a4:5f:fc:9c:ca:4c:1d:bc:37:8d:02:93:63:
5c:aa:36:32:c7:da:6c:71:79:7b:cd:08:f5:3e:a4:
d7:e2:6d:02:84:9f:bf:a5:2e:3c:e9:c9:4d:39:da:
2d:0c:85:b5:ba:d1:fc:26:00:80:ff:80:c6:1b:2d:
34:05:07:81:64:a2:f8:29:12:3b:da:35:c3:8d:65:
bf:72:db:21:b6:32:39:c6:9c:23:cc:dc:c7:fe:8b:
42:87:23:f0:46:4d:a6:c0:be:65:eb:51:55:63:c0:
56:d9:bf:c0:9d:e2:2e:e8:a2:e1:71:13:d6:9e:3f:
57:2a:08:fd:72:32:77:81:db:52:d6:f2:ce:4e:ce:
73:4c:5f:b3:81:80:3a:61:b7:19:45:5a:dc:ec:7d:
5a:b9:85:42:17:61:b6:c4:d1:3f:ca:1a:64:bc:77:
e2:53:b8:03:34:22:9e:31:e9:25:2e:5e:e0:d9:d0:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:D8:7B:C5:28:EA:9F:5A:CC:24:91:8F:0E:CD:CD:5D:7C:F6:C7
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:91:32:75:c3:86:ae:4a:b6:ba:7e:91:85:6e:eb:a5:65:13:
1c:e3:8a:49:38:9f:46:e9:0d:85:c7:72:c4:7b:e6:32:b9:c6:
ed:f8:f7:5d:68:c5:95:cd:50:f5:3a:d6:01:5e:1d:e7:bd:ed:
d4:5b:54:77:aa:7c:4b:5d:9e:b5:d2:e2:b6:5c:e8:17:c3:81:
24:47:00:70:69:e1:7a:7a:2f:22:00:d8:d6:ae:d5:06:7d:ca:
be:c2:94:5a:00:16:97:0c:83:43:9b:5b:7f:2f:09:6f:5f:d3:
c6:5c:b3:ba:61:f2:48:48:ad:3d:d1:b9:e6:c8:ec:00:76:5d:
80:a4:51:8c:77:e7:8b:e9:b9:7d:33:bf:bd:67:62:3d:12:67:
2b:e2:7a:d0:58:fd:ff:e1:cb:be:a3:f6:b7:6f:8c:c8:03:0d:
f0:17:4f:90:c9:bf:95:d2:87:76:63:be:40:1b:c8:3e:0d:c0:
32:2f:c2:d1:8c:36:08:9b:ff:d9:b6:77:ae:d4:4c:ba:15:bb:
16:e9:3c:0c:ec:95:51:e5:e1:78:55:63:c7:ce:46:16:be:25:
74:85:f1:b1:b0:0e:25:54:2c:4d:17:c5:c0:ba:69:cc:90:37:
2e:bd:34:d7:fd:36:74:34:0d:06:99:bb:7d:95:5b:6a:7f:9e:
d0:1e:c8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:53 2026 by rpki-client