Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: aGJTnWjtKvy7InM1dTGqH1xmtgPYL7VlFgAMweb5OPw=
Subject key identifier: 6A:A2:68:85:46:00:E3:00:89:AF:36:13:E3:1B:EE:D8:00:50:F5:91
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 019D27DF6805B80475C3ADA2D130BA7F46BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 03AD
Signing time: Thu 26 Mar 2026 02:00:45 +0000
Manifest this update: Thu 26 Mar 2026 02:00:45 +0000
Manifest next update: Fri 27 Mar 2026 02:00:45 +0000
Files and hashes: 1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: n4rAX3Db0K64uPXQkLiZm9RNKGKxSJks4WsSeLdVOWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:68:05:b8:04:75:c3:ad:a2:d1:30:ba:7f:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Mar 26 02:00:45 2026 GMT
Not After : Mar 27 02:00:45 2026 GMT
Subject: CN=6aa268854600e30089af3613e31beed80050f591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:15:f4:8c:44:29:dc:60:fc:2c:40:0a:6f:
12:60:60:bf:c7:a3:61:4e:a2:96:9c:cf:8e:e1:b5:
bd:7b:1f:af:3a:a4:09:f5:90:a1:f6:10:8a:30:13:
f9:98:1e:4e:2a:3e:e3:c4:aa:22:f5:f6:3c:1e:ec:
e0:f8:ac:de:f8:e3:79:ca:c1:82:b6:32:8b:c6:7b:
9a:86:c8:1c:04:a3:3d:95:80:23:ba:fa:db:c0:30:
71:e3:76:42:21:83:72:18:12:9e:17:88:46:f4:21:
02:a5:cb:9e:08:9a:d9:90:45:63:f0:b1:f8:78:ff:
ea:16:7a:c9:65:83:ef:cb:18:21:9c:3a:47:5d:ff:
1d:1b:f0:c5:a6:04:02:fd:ca:66:3b:c7:83:ec:46:
61:82:d5:d1:52:02:68:93:19:b6:ad:cd:2b:45:16:
90:cd:6a:0e:66:83:b8:b4:dd:2e:0b:c7:4c:73:70:
89:33:70:1f:07:2e:6e:ed:0e:ef:f2:c2:07:79:78:
46:a4:ba:2b:2c:58:72:fb:2c:c0:d4:c7:4d:0a:9f:
b7:fc:a1:dc:3d:60:8f:e4:51:0b:9a:f2:30:49:64:
b5:04:61:52:97:cb:d4:e3:08:46:15:93:a8:f7:b4:
3c:93:c1:84:57:19:3d:82:dd:8f:f0:26:9c:b2:fa:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:68:85:46:00:E3:00:89:AF:36:13:E3:1B:EE:D8:00:50:F5:91
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a2:9b:10:89:97:ad:0c:1c:98:08:f6:6b:8c:07:b5:8c:9b:
89:18:f0:22:4b:af:12:33:7c:ae:dc:c9:b7:c6:9c:c2:fd:e5:
d2:29:39:2c:f4:26:d2:19:e0:cc:6c:3f:d7:d1:c3:87:18:7f:
c3:7a:74:a1:fa:97:44:53:c7:9f:19:8d:04:cb:1d:b9:88:53:
22:10:5b:bb:3f:c6:cb:f4:6f:c5:d0:58:87:ce:da:58:55:57:
ea:a8:29:75:76:4b:bf:6f:72:37:c9:e1:5c:2c:a1:b7:cd:21:
76:9d:c9:fb:a6:39:b9:ab:60:40:70:da:fc:bc:fe:79:a7:7f:
ec:2c:d1:09:85:d4:5c:2b:0b:46:64:26:7b:61:65:19:6c:00:
1e:0e:8b:11:8d:44:6f:79:51:13:59:64:e4:7d:dc:7b:2d:22:
89:05:50:af:a6:aa:69:11:34:cd:4b:1d:f2:25:a6:9e:6b:07:
6f:64:36:00:25:57:d6:a0:50:53:6c:8c:1d:34:90:72:c7:87:
ba:16:0e:9b:6c:99:50:79:fa:1c:fa:0d:a2:12:40:90:3d:44:
f6:e3:2f:0e:84:93:b6:5d:b4:e7:17:eb:4d:3a:0b:8c:36:7d:
0b:2b:7f:18:6a:6f:81:61:d5:09:3c:17:21:02:7f:fd:55:9c:
70:74:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:22 2026 by rpki-client