Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: iPJVgrlNsnOl998A1xHKWtHVIttWQpjEiUXS7TzrvOM=
Subject key identifier: A4:52:80:9F:07:03:02:04:7D:E9:AD:59:B8:AA:C4:D1:35:3F:3B:26
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 019D284E1CEBBA5BA4769FB151BED53AE566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 04:01:40 +0000
Manifest this update: Thu 26 Mar 2026 04:01:40 +0000
Manifest next update: Fri 27 Mar 2026 04:01:40 +0000
Files and hashes: 1: 1QjvKCsvTR0ccDdXAfoDfJPSyJE.roa (hash: qPTH0R4OHCDFXj8DShsOufuFq2W68jfp5X6XHwRILiE=)
2: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: wp2fJMQVY2lNx83H3dLb09cXMUknzGzNgEK2rrJbDw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:1c:eb:ba:5b:a4:76:9f:b1:51:be:d5:3a:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Mar 26 04:01:40 2026 GMT
Not After : Mar 27 04:01:40 2026 GMT
Subject: CN=a452809f070302047de9ad59b8aac4d1353f3b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:90:8a:f6:0e:60:71:91:a4:af:1e:23:bd:
2f:71:58:b7:d4:95:a7:69:47:19:b0:55:d8:e4:2a:
a6:f3:ec:4a:a0:bb:b7:e2:1b:85:b3:44:92:a3:11:
d6:9c:a3:86:33:af:66:f2:42:3a:9d:5b:6b:3c:86:
44:08:a3:4d:dc:1f:d6:8b:aa:87:81:05:2c:dd:79:
08:45:af:9f:5f:89:b6:ca:3f:cd:34:69:1e:de:4c:
ba:0e:38:2c:73:d7:83:eb:e6:fd:90:a1:78:bb:f7:
bb:73:8b:b5:98:d5:31:3f:54:77:6a:da:6e:26:32:
1b:ab:68:ef:4b:32:e8:fd:b2:c2:4f:3c:3c:54:95:
a2:d8:70:65:9d:1d:05:9b:74:6e:b2:b2:49:df:f8:
e8:80:99:47:15:8c:3d:bf:9c:c8:b0:91:0d:90:ff:
f5:a1:75:d1:fc:68:2a:b3:af:a2:c4:9e:75:1b:15:
b7:35:a4:12:a5:fb:fe:3b:df:26:36:37:46:ea:e2:
86:3d:5e:b0:43:87:80:96:3c:ea:39:7b:44:b9:fc:
f2:a1:7f:d5:e6:00:ab:fa:42:94:97:66:0d:fc:de:
c9:21:7e:12:85:0c:36:47:9b:18:e7:aa:a5:b9:b9:
80:66:33:f7:7a:64:40:7d:70:65:95:62:67:ee:e4:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:52:80:9F:07:03:02:04:7D:E9:AD:59:B8:AA:C4:D1:35:3F:3B:26
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:63:36:7e:5e:8e:f6:26:b3:79:c0:6b:dc:9f:78:69:63:
b6:60:40:6b:09:6c:0f:ba:2d:eb:71:ed:a7:9f:99:c0:f6:75:
2d:f6:e8:51:f5:d4:fc:3d:82:54:2e:3a:24:39:4e:9a:b7:de:
17:05:2b:84:00:c2:56:92:a8:ff:27:c6:27:02:fe:0d:bc:c4:
42:33:cb:47:c6:76:5d:1e:2f:bc:8b:57:5d:77:ae:eb:8c:1d:
eb:5f:cb:f5:8b:94:13:3a:37:73:d1:eb:65:0c:5f:db:59:dd:
50:61:75:3f:65:e8:8e:fe:5b:78:b4:79:e0:a9:46:b7:b0:9b:
c0:28:37:d7:54:12:c5:6c:97:fc:b0:78:91:4f:97:fb:c5:64:
9d:a1:93:c8:83:fc:71:76:0a:78:f0:7e:39:03:92:0b:0b:0d:
e3:cb:6f:22:28:64:c3:98:4a:e2:5d:39:a0:f0:47:42:cc:65:
5b:55:33:4a:24:be:0d:17:b1:ac:26:04:05:43:e4:84:0d:ef:
5c:69:e5:fc:c4:af:cd:f3:39:bc:44:c6:b8:1b:e4:c1:fa:0a:
5d:38:47:c9:47:be:11:5c:29:aa:44:58:4d:50:12:ab:d6:f1:
a8:7f:60:17:0a:19:52:61:15:db:5a:ab:43:2d:3c:22:64:eb:
6b:4b:1e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:24 2026 by rpki-client