Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier: OSbbg6cN6D31tMr4h12XQzoBBmimN4bhRR4cVqI6Qhs=
Subject key identifier: 3A:21:E6:1B:E6:51:95:96:64:63:F7:03:BF:F1:1D:36:6C:D9:BD:6E
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 019D284D91B518A57D81E6ACA2AE583E59B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 04:01:05 +0000
Manifest this update: Thu 26 Mar 2026 04:01:05 +0000
Manifest next update: Fri 27 Mar 2026 04:01:05 +0000
Files and hashes: 1: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: 03nlYYZ1v+Tz99v/Sk5pEVr5oCvCfhGgf5Yxr6TqMho=)
2: MTOjup8y1UXD0CJugetRyShLlFM.roa (hash: did6Im7PvxOeWT+FnqE9v3BCYzUp9wbU09/sziP8S8g=)
3: y2dvaW9BE_hgA52pK6ndrIlUQD8.roa (hash: 8aYMWWwaNFDI51SXRVa0hNzXB/57zeHnGU+/Ox3JcPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:91:b5:18:a5:7d:81:e6:ac:a2:ae:58:3e:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Mar 26 04:01:05 2026 GMT
Not After : Mar 27 04:01:05 2026 GMT
Subject: CN=3a21e61be65195966463f703bff11d366cd9bd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:0f:8d:98:90:48:7d:60:d3:b6:ec:e8:8b:
23:cc:a4:77:1c:05:85:19:22:c3:60:9f:9f:e4:e8:
0d:a9:99:8f:d0:90:c1:d3:ae:1e:b8:b6:02:53:35:
72:6a:56:69:c6:e1:a5:e8:aa:f5:1c:d9:b9:9b:6b:
3c:0a:d7:98:9b:02:bd:a0:ee:a6:f2:a5:9f:e0:22:
de:89:d9:8e:7a:11:b0:aa:5f:71:0b:f3:a8:11:95:
55:17:e8:bc:e4:03:62:ab:95:c3:5e:b3:50:d8:56:
4b:11:40:40:85:f8:c8:dd:27:e8:5c:f2:0b:77:58:
95:25:f1:d8:47:14:f5:90:2a:68:f7:ad:3f:b0:f5:
36:9d:1a:19:f3:75:23:64:8b:f9:7d:9b:b3:60:dd:
5c:2a:29:36:32:2e:3b:2d:d8:40:7a:62:57:2a:9f:
c0:54:cd:6a:ff:32:21:30:2d:c7:f9:38:ba:77:13:
e5:6c:a8:bc:9f:24:db:48:01:cc:ea:7c:23:2d:dc:
8a:10:23:f8:39:51:90:57:84:a5:94:81:90:7e:91:
61:6e:c8:c5:bf:74:5d:71:de:de:a5:ac:a7:a4:64:
e0:ae:b7:37:90:05:69:a9:d9:cf:b4:61:b0:d0:78:
26:1f:55:dc:a3:7c:30:12:3a:69:1f:23:27:d2:6f:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:E6:1B:E6:51:95:96:64:63:F7:03:BF:F1:1D:36:6C:D9:BD:6E
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:e5:dc:c3:aa:71:a7:34:00:31:34:30:ef:b3:d5:92:b1:
04:c1:5f:41:ee:58:21:61:44:89:7f:ab:35:7e:b4:67:1c:56:
78:74:fe:85:ae:69:6d:4c:80:f6:0e:af:43:26:ef:31:c1:b6:
ee:ba:9f:78:18:f4:c2:fd:d5:3d:69:8c:c0:6d:4f:74:8a:77:
f0:f6:e8:ab:6f:e9:48:a6:86:e4:94:2b:0f:0e:89:cd:2b:e5:
5e:23:1b:be:70:33:cb:e5:b1:4b:e8:5f:f3:e5:37:d0:fb:6f:
5b:9c:d8:30:31:89:32:61:0c:a3:c8:d4:a1:fe:c5:d6:45:fe:
00:04:d9:b8:74:0a:c3:64:92:ce:42:96:a4:87:eb:4f:d8:36:
42:be:29:52:7a:a6:83:fd:14:10:06:6d:12:81:bc:b2:d2:a4:
c9:84:16:cb:e2:10:98:b8:27:e1:fb:80:f6:17:6f:7c:c0:60:
75:58:73:a4:ec:48:50:e8:2c:62:4d:76:3d:f7:2c:f7:c9:7e:
bd:b7:fb:65:bf:cb:1e:c7:64:b4:0f:4a:70:b6:bb:67:51:54:
f1:cb:2f:59:25:6f:3d:36:ce:c3:db:75:d9:c7:f6:9e:0c:62:
dc:ca:d5:b0:63:51:2a:16:1e:29:ec:e7:92:59:fa:51:15:e7:
d3:49:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:57 2026 by rpki-client