Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: quTXv5JpuyK+QMWBY7/8KEuBSydcEtMtZqyJkjxCnzo=
Subject key identifier: 2A:C1:5F:B4:E1:02:51:A3:E0:3B:73:EF:B9:D4:94:A6:E9:52:D3:23
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019D265FA60054C5D47C7A779788EE8A8DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0489
Signing time: Wed 25 Mar 2026 19:01:35 +0000
Manifest this update: Wed 25 Mar 2026 19:01:35 +0000
Manifest next update: Thu 26 Mar 2026 19:01:35 +0000
Files and hashes: 1: 6JgmEKDGlYfzHxrPWMbCBHvEv10.roa (hash: O2i0/jw0uO+3EKrKnGSgKnk++IC3F7+eUGLyqXW46bc=)
2: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: V9eOAKHDwfzRTY1spwq0nNt4S6FC/DeWBtO2nsgBd2A=)
3: w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa (hash: 034E8i64C+y8Jw/x/z2Co+QWwQMda1HQeLdB0UlAnnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:a6:00:54:c5:d4:7c:7a:77:97:88:ee:8a:8d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Mar 25 19:01:35 2026 GMT
Not After : Mar 26 19:01:35 2026 GMT
Subject: CN=2ac15fb4e10251a3e03b73efb9d494a6e952d323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:63:24:be:9e:17:95:0f:ea:cd:f8:4e:74:
cb:8e:e5:ed:38:b1:5c:03:7f:53:11:c2:88:21:52:
8c:8f:f2:fc:c8:99:7c:f3:da:82:31:c5:ad:87:dd:
b0:ec:3c:da:2e:c8:b7:c5:a0:1f:94:ad:ae:59:5e:
07:e4:12:3b:5e:f7:81:f2:fe:af:a2:14:27:14:c0:
96:83:5a:3a:b1:23:f1:b6:d3:73:b9:cf:10:37:ae:
9e:dc:c3:de:d6:c2:3b:63:a7:03:11:8b:d3:96:90:
5e:2a:e4:7e:36:c7:cd:cb:0d:93:7b:75:3d:4a:c8:
a7:0e:1d:42:7f:35:f8:b9:06:ea:08:e1:a6:f1:a7:
1d:36:56:32:d6:d1:60:99:18:c1:3a:7d:6d:39:88:
96:3f:60:8a:e5:3d:81:fa:fa:a4:6f:a3:ce:56:46:
0f:77:6d:8f:61:39:7e:c2:af:47:6e:07:23:da:ff:
d2:29:8b:d5:73:d0:bd:f1:f8:db:20:85:44:88:12:
0e:28:92:f6:41:84:d9:ae:66:d2:11:07:04:75:83:
c3:55:26:cc:dc:e6:6d:f5:15:f4:e2:84:19:de:27:
d7:e4:59:19:b4:df:a2:22:41:ae:a6:23:88:70:b0:
ae:b4:0b:f6:43:69:b2:c8:0e:32:48:49:f5:a5:de:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:5F:B4:E1:02:51:A3:E0:3B:73:EF:B9:D4:94:A6:E9:52:D3:23
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e7:1c:2c:b2:60:fd:42:30:d9:9b:b1:70:53:21:69:7d:33:
48:af:0c:7a:b9:ea:99:d5:2f:66:18:8f:49:f0:f6:57:1e:b2:
f8:20:e4:ec:cf:fc:8d:aa:59:eb:ca:7e:78:72:90:5b:0e:01:
a4:c9:3a:e8:c1:f5:a7:92:ec:f4:ae:a8:ac:9a:eb:94:b9:93:
4f:e0:ea:82:57:20:c4:61:0a:41:77:95:15:5d:19:5a:09:7f:
94:a9:d6:37:14:56:05:09:3b:92:fe:e9:99:a1:91:f3:1f:26:
81:fc:4f:82:27:c7:19:75:68:67:44:75:41:d6:f8:da:8a:18:
24:dc:2f:3a:3a:47:1a:ae:dd:cf:6d:1a:76:c4:17:ca:ca:cb:
2e:17:31:0e:6b:59:7d:65:85:c1:7c:5e:02:33:c6:7e:63:97:
58:55:64:cb:35:2f:f8:b5:63:45:c6:2b:07:5d:57:fc:4a:48:
2e:bd:6f:38:dc:93:64:b8:07:e2:c0:c5:9e:39:f3:fe:90:73:
f6:ef:cc:59:58:eb:69:fc:c0:8c:72:e8:e8:e0:d2:67:89:24:
53:bc:25:98:53:c4:c5:96:5b:6a:a3:94:e1:e8:3e:a2:3a:ee:
b1:5f:ea:22:25:d2:44:e5:d5:10:74:d7:48:cd:1c:37:28:16:
2f:d0:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:05 2026 by rpki-client