Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: Q5LNZRJwgkH4+7Dfq2JcGqsOR9pqYnRRRA0BxAPHy0M=
Subject key identifier: 5D:2F:9D:58:5E:44:7C:F2:17:31:B0:A9:A7:CB:7A:A2:E4:43:AC:05
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 019D28BB7678FE936BB3DA2D4F894011227D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 0BBA
Signing time: Thu 26 Mar 2026 06:01:07 +0000
Manifest this update: Thu 26 Mar 2026 06:01:07 +0000
Manifest next update: Fri 27 Mar 2026 06:01:07 +0000
Files and hashes: 1: dMqC-n6aTOCbSL8Ykp9feAUQoHU.roa (hash: zTuoRHdXLep95ed7e0hmPYJZjgqTN3feHiOb9GoDWDQ=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: JQu1Jgg13aNo9R7KcO3pBgJ53/6ia8KurWWOBIlu9e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:76:78:fe:93:6b:b3:da:2d:4f:89:40:11:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Mar 26 06:01:07 2026 GMT
Not After : Mar 27 06:01:07 2026 GMT
Subject: CN=5d2f9d585e447cf21731b0a9a7cb7aa2e443ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:12:1f:a4:b1:42:10:a1:ef:6e:50:c2:ac:
10:8c:76:ac:89:2b:92:6b:24:40:be:b9:04:85:2e:
fa:39:f0:5e:07:59:ca:f0:cd:9d:3c:30:1a:7a:73:
7f:9a:e2:8b:71:39:01:9e:71:cc:7c:01:71:2d:0a:
3b:2c:65:ab:be:da:f9:29:6f:99:8b:53:70:94:64:
9a:53:34:53:52:bc:79:9c:db:fe:d7:72:1f:ba:41:
b6:26:0e:3d:8c:c7:41:04:2e:ff:4c:85:33:2e:95:
8b:fc:25:fc:60:a3:c4:3c:ea:9a:92:96:5d:6a:35:
76:11:d4:37:1f:af:94:5a:75:3a:cc:a0:3d:c5:7f:
60:76:bb:6f:68:19:13:41:d7:a2:25:31:17:5a:8c:
f7:8c:b2:c4:02:8a:5f:76:f2:42:3d:17:c2:a5:bb:
29:ca:c9:99:7c:6f:c0:2e:d1:1b:c1:b9:a7:e0:8f:
00:13:86:76:8a:2d:29:3a:1f:7a:1c:8d:93:1a:51:
90:35:d7:bb:05:0f:c8:23:31:c9:c2:17:00:17:39:
61:7c:28:5f:35:88:8f:69:1a:b2:ef:7f:35:1f:7e:
b3:a1:30:07:41:c8:ec:8b:f8:0b:78:ac:f4:0e:b3:
ff:25:36:c0:20:14:09:3a:ef:81:f9:05:3e:2e:b3:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:9D:58:5E:44:7C:F2:17:31:B0:A9:A7:CB:7A:A2:E4:43:AC:05
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3f:03:c0:1a:f7:fb:51:64:4e:e8:ba:0d:05:5d:74:d6:d5:
42:a5:0a:db:bc:b0:b3:6d:dc:02:80:11:d5:b3:23:d6:93:bd:
30:22:78:41:ba:fa:94:9b:54:9c:cb:bb:d7:96:c7:bf:ac:53:
e2:26:33:aa:05:86:db:c6:6b:84:28:56:30:37:c3:c5:e5:10:
c4:fd:2e:dd:9c:83:3f:6f:f6:c8:dd:dd:f0:1f:b8:11:0d:73:
71:18:8b:a5:d2:95:09:f5:14:e4:78:57:a6:5f:c0:18:b2:cb:
b5:d8:06:83:dd:2c:3f:91:d9:61:2f:05:dd:83:fa:e5:44:8e:
cc:98:e1:6e:36:f8:67:31:36:d1:21:5a:95:81:f5:08:e5:1f:
2b:ec:b4:10:8c:b0:f8:c0:59:73:cb:26:18:35:80:5a:8a:4c:
e8:92:43:ee:39:8c:7a:f7:85:78:9b:fc:8e:3c:0c:72:f1:6e:
55:11:4f:83:8b:1a:8e:c9:8d:71:99:75:61:21:cd:58:2e:b6:
00:e5:f2:9e:b9:f6:05:a5:e7:6e:8f:dc:07:f5:06:2f:ab:8d:
83:f0:e4:38:b0:04:aa:08:c2:6d:82:85:23:74:cc:af:8c:6b:
10:ba:15:23:b7:cd:b1:fd:92:1d:de:6b:ed:cc:f6:38:a9:b0:
c7:6a:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:14 2026 by rpki-client