Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: rFjzyBGUIa5LaA7zdKhsorSr6O/2BeldHOkHBPnE7a0=
Subject key identifier: 98:7C:4F:CC:41:11:22:E1:EA:7B:CE:12:1B:60:2A:CE:AD:2E:D6:82
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 019D2997499F92208FFA2E3F825C1805809B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa (hash: AuLdH8lMRAM53ImTxBSwBIPLZa61IiJ7LX4/1Usrvg0=)
2: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: 0XgHg2/Pi46AINI8HROEpi5tUZHbyUS9EfEDzNaI+Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:49:9f:92:20:8f:fa:2e:3f:82:5c:18:05:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=987c4fcc411122e1ea7bce121b602acead2ed682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:34:68:da:19:b3:0b:ef:e7:dd:ff:b8:d8:
4e:a0:97:82:6a:19:15:a5:ad:b8:fd:e2:da:3d:eb:
f7:fb:18:f2:69:ab:53:53:05:73:47:93:0d:31:88:
da:6d:57:92:ee:d0:04:aa:f8:4f:95:a8:19:25:8a:
0b:07:ad:73:c8:4f:b7:23:5b:a2:2f:f0:aa:d2:8b:
bc:9b:2e:c3:ef:39:7d:c6:06:e8:7b:7f:42:21:b8:
21:32:00:16:4d:14:0e:18:9e:90:54:a4:56:6d:01:
2a:bf:7b:38:85:1a:f0:ab:8a:5b:4c:e9:3c:65:df:
3a:c3:cf:d9:2f:49:f7:2a:71:a7:b0:3f:0a:e5:c5:
f7:1e:e5:a0:99:dc:a5:f4:92:0d:77:3c:98:f1:4d:
c4:f8:5e:3b:2d:8b:95:8b:a1:8b:78:df:62:70:f7:
58:b0:86:9f:a8:b2:c6:43:91:b7:6c:15:a4:17:25:
d6:63:39:35:82:a9:ec:78:e2:31:12:d5:1c:bb:51:
38:8d:01:c5:e6:07:06:6f:cd:71:f8:2a:65:11:f6:
52:4a:55:0b:db:5d:8e:58:b9:91:dd:15:7c:76:a8:
64:9f:36:c5:9e:86:fe:c2:d8:ab:7a:6e:16:6d:7c:
03:5b:7f:94:08:d6:fc:1d:e8:83:09:8d:a4:4a:21:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:4F:CC:41:11:22:E1:EA:7B:CE:12:1B:60:2A:CE:AD:2E:D6:82
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b0:99:1c:d5:e2:bb:e8:2d:ab:56:46:9c:c0:d7:83:ef:ea:
5f:64:28:57:f2:ac:8d:36:78:f8:0d:15:8c:31:4c:1e:35:f2:
b9:bc:ab:8a:48:1c:f7:4a:5d:3b:94:e5:35:ec:ea:3c:de:fa:
84:8f:58:3b:ee:f4:c4:80:f7:4e:2b:02:b7:77:cd:ec:55:2a:
3f:30:b8:ba:9a:0a:2f:ad:ec:4b:3d:1b:44:88:f5:19:63:c9:
1a:00:f2:99:9e:33:3e:2d:ce:f6:41:49:66:f5:8a:90:16:ef:
a3:6c:19:50:36:8b:44:9c:b1:e1:34:3c:7f:0a:fb:f9:38:6a:
af:fd:32:af:b7:a0:7d:1a:29:99:cb:a4:35:db:11:0d:4b:51:
60:43:1b:d5:ac:22:f8:5e:f1:3a:91:a4:d4:ed:f1:bc:ae:9c:
6b:55:81:5d:8e:5e:2c:41:1c:01:33:08:df:9c:e4:cb:49:bc:
2b:fb:d8:38:9d:8e:1a:08:9e:e2:77:a6:77:6a:59:1b:99:13:
5a:7c:ae:8c:39:27:a5:19:42:5b:c4:57:13:ea:78:9b:8a:80:
9d:c2:20:64:ee:95:af:96:71:38:8e:97:d1:63:48:f5:3e:d3:
55:64:15:78:ef:38:9c:fc:f0:39:47:7a:c0:11:89:f6:d0:38:
7b:8c:01:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:17 2026 by rpki-client