Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier: CIpdWXlSQtnoyrfqyv0Y8Z/D2rFiqcaVV/KDclpk250=
Subject key identifier: E9:D7:04:5F:56:FE:2D:B1:67:B9:4D:F7:02:78:8D:91:63:E8:18:1C
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 019D277267EB9347BD2862E0B35E27733A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:42 +0000
Manifest this update: Thu 26 Mar 2026 00:01:42 +0000
Manifest next update: Fri 27 Mar 2026 00:01:42 +0000
Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: DrxRZ8XTHi8LPqFAD6pmfZvjtRmktHy8fEAfQiGBXr0=)
2: iJzZtljWIar5Fy83XWae5YmptnU.roa (hash: J8Td44gvEJyFMk2Q3nnnz2KQYHmuhOMCV+hhX1uovQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:67:eb:93:47:bd:28:62:e0:b3:5e:27:73:3a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Mar 26 00:01:42 2026 GMT
Not After : Mar 27 00:01:42 2026 GMT
Subject: CN=e9d7045f56fe2db167b94df702788d9163e8181c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:ac:b9:c0:a5:2f:30:02:c6:bd:1c:64:eb:
3f:cc:d3:d6:1f:4c:f6:eb:73:32:42:d1:11:22:c7:
ed:12:31:2c:2e:1f:5c:95:c9:92:2f:b3:fa:3f:5d:
5f:ac:e4:65:d2:50:45:9a:f5:6c:ac:d7:ee:5c:2a:
7d:f7:c2:f2:0a:ac:1a:df:24:d0:80:a5:41:d0:96:
d9:7c:7d:55:dc:c7:01:c1:22:70:2d:71:34:e1:e6:
cc:ec:5e:22:c4:33:e2:8b:a4:29:09:ca:4d:70:70:
01:07:dd:83:09:11:03:69:11:7d:13:6a:a1:9b:b1:
2d:be:d5:33:ee:48:27:7d:5a:93:9c:29:9a:41:69:
19:59:90:c7:fe:0d:a2:11:c9:aa:c0:8e:c6:86:5b:
8f:51:79:c7:c2:c0:21:3e:73:f2:df:5d:06:95:a1:
5d:5a:00:08:d1:59:e4:e0:ae:77:eb:56:08:a8:c9:
60:7e:79:9b:4a:bb:bc:2f:b3:63:b9:2e:3a:c8:91:
06:ea:9b:de:31:32:84:15:07:01:b8:1a:39:d7:59:
18:06:a2:c3:cd:1c:2d:2d:44:20:52:73:df:da:83:
c1:7a:47:56:b6:b1:d9:8a:4b:06:e0:62:32:5a:b9:
56:8b:7a:d2:f6:55:73:68:46:c9:d4:c7:01:b4:0d:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D7:04:5F:56:FE:2D:B1:67:B9:4D:F7:02:78:8D:91:63:E8:18:1C
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:08:0d:43:c0:0e:18:bd:ac:a1:20:d8:61:d0:18:20:7f:
11:24:2c:96:32:7e:e2:3c:59:09:64:2c:4b:c8:14:3d:ce:43:
df:43:95:7a:41:82:0d:fe:96:20:37:04:f4:b9:cd:30:28:b4:
8c:30:cd:0a:09:e1:91:31:59:a1:2a:bf:6a:2d:23:07:48:54:
db:39:cf:3d:16:17:b3:9b:dd:52:52:7d:cb:6e:be:9f:ce:3a:
a6:4f:15:e6:8f:8e:30:86:ef:89:25:c6:b0:dc:45:a9:c9:6b:
f3:b3:d2:bd:f2:0e:98:55:d6:ff:5c:1e:b9:b0:43:2d:9f:0e:
52:f7:a8:f0:23:9f:dd:dd:ba:fa:10:33:b5:13:7e:f0:bb:40:
59:55:d0:d2:30:bc:03:b8:cd:47:e2:d6:1f:aa:fd:0e:2f:34:
40:52:ad:65:d9:3e:1d:ba:88:16:6e:76:94:78:62:22:c8:a3:
cc:2f:c2:1f:4a:13:ac:a9:99:7b:0d:51:32:7d:45:17:bb:b4:
a1:6d:86:ed:4c:f9:00:e7:05:60:75:68:eb:98:36:95:89:39:
e9:78:ab:7b:d0:39:43:43:f9:85:85:0d:35:ff:70:ba:03:5c:
19:54:6c:d8:8b:ff:9f:aa:56:4d:3e:7f:e7:ec:a3:b5:c0:da:
89:17:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:13 2026 by rpki-client