Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: +DbacLU1wFUVRc/4Hp27c8tcKDSc+raHy3Uhur+FqFc=
Subject key identifier: B0:22:63:1F:81:9E:CB:F9:9B:46:10:59:30:4A:2F:A6:57:50:A8:BC
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019D258310D318BBC571BB5EF5187E4CF554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 03D1
Signing time: Wed 25 Mar 2026 15:00:39 +0000
Manifest this update: Wed 25 Mar 2026 15:00:39 +0000
Manifest next update: Thu 26 Mar 2026 15:00:39 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: lp/tKNFZ396JBY4TYR1rQ1z0A3d4rU2/k7fQVDIkkHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:10:d3:18:bb:c5:71:bb:5e:f5:18:7e:4c:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Mar 25 15:00:39 2026 GMT
Not After : Mar 26 15:00:39 2026 GMT
Subject: CN=b022631f819ecbf99b461059304a2fa65750a8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:5c:35:8c:a4:6d:2e:0a:10:0e:6d:35:b1:
ba:40:d5:31:1f:9d:f7:f7:66:f4:43:03:e4:d5:dd:
ca:82:b1:ac:5d:88:99:dd:30:85:49:3f:3d:95:dc:
20:ac:54:e5:62:aa:cb:a7:69:e8:68:2b:b4:92:7e:
b0:03:1b:c7:23:bd:bc:a9:9d:ef:97:83:e0:8a:48:
29:3e:8d:3f:dc:41:32:3c:d1:86:8b:5b:9f:4e:a7:
de:61:03:a9:76:38:2e:38:45:80:81:22:1b:c5:36:
36:e4:f8:1f:fc:a3:d0:64:4e:e2:3f:9f:59:ae:7a:
7c:61:df:93:e9:4e:2f:4e:b2:1c:bb:a3:83:05:31:
21:a0:52:77:50:33:3b:dd:68:63:57:46:36:05:64:
8a:89:ba:01:ac:9a:84:4b:c6:82:05:5b:05:ed:cf:
e5:1b:ff:db:4d:8b:a7:49:6a:85:89:3b:3e:f4:7d:
b6:2f:e7:22:b7:19:83:89:7f:4e:9d:35:b9:3c:b4:
ae:40:bc:2c:e9:79:d3:ab:ca:ff:45:d9:cb:3e:2c:
dc:84:f2:35:e5:7b:3a:42:25:27:0b:4f:56:ad:63:
20:54:06:e2:ac:eb:08:60:89:c9:da:91:61:34:14:
0f:f9:7e:a6:ac:55:e4:db:27:13:a3:56:aa:4a:5c:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:63:1F:81:9E:CB:F9:9B:46:10:59:30:4A:2F:A6:57:50:A8:BC
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c2:cc:36:46:e0:29:d6:c5:94:73:0f:49:a2:d1:e3:b7:56:
a5:8c:81:2b:68:55:6b:64:62:1d:6e:b8:2f:c6:81:1f:9c:dd:
cc:ff:71:6e:d4:f1:d2:9c:35:b2:8c:d4:24:1b:48:6a:d1:0a:
7f:90:72:c4:7f:f8:a3:60:17:04:26:3f:42:8e:02:4e:57:df:
00:3b:8b:8a:e9:0a:66:60:5f:4b:96:70:5e:e4:08:17:71:df:
d6:aa:04:95:3a:c8:7f:83:0a:bd:3a:0b:ea:84:dc:25:d6:b7:
6a:4f:0e:8e:12:ca:b4:53:dd:1c:96:27:5c:df:d8:68:66:bc:
39:0c:dc:a7:37:0e:48:22:32:d1:61:ae:61:77:7d:75:74:f7:
75:87:2f:ec:24:e9:83:ad:e8:ad:93:49:66:98:b9:e6:cd:92:
02:ff:3f:c1:31:18:86:bf:4a:bc:27:1a:10:e6:cf:90:bd:c3:
62:75:4e:5a:3e:7d:59:fb:4e:c5:f6:48:0c:17:0b:a3:53:cd:
04:30:3e:9f:34:fc:a4:b9:fc:59:1e:7c:af:f5:08:4a:06:ed:
02:c1:e3:86:b4:36:9d:1e:4e:b1:8c:f9:11:e8:7e:f4:b9:51:
12:ad:18:bd:e3:e9:1b:eb:c6:a5:54:f5:52:6d:64:eb:b5:52:
69:a8:44:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:58 2026 by rpki-client