Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: oYaCNdjYCqJX4lu/aP1Ff5QE2lCzmibcS8wY+z8UTf4=
Subject key identifier: B8:AF:10:1B:E4:D6:B0:81:11:B1:92:25:9F:FA:91:E0:56:FA:B1:38
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 019D27A8FF2E7E6181386B23BDAF3C620079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 11F3
Signing time: Thu 26 Mar 2026 01:01:19 +0000
Manifest this update: Thu 26 Mar 2026 01:01:19 +0000
Manifest next update: Fri 27 Mar 2026 01:01:19 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: QoAl8e3nHpYnKqr4JYxyM1cTMEFh5MwLuBrM9IVqeLo=)
2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ff:2e:7e:61:81:38:6b:23:bd:af:3c:62:00:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Mar 26 01:01:19 2026 GMT
Not After : Mar 27 01:01:19 2026 GMT
Subject: CN=b8af101be4d6b08111b192259ffa91e056fab138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:30:ac:dc:e1:30:8d:8e:bd:fa:9c:54:40:
65:c7:a5:6d:ee:e0:cf:4c:bc:0a:94:5b:27:91:e6:
8f:2d:59:62:d1:ed:02:7a:0d:ea:0a:47:53:32:a8:
63:07:68:5e:86:82:8e:e3:33:34:75:cd:12:91:d2:
af:56:16:7f:c0:21:98:24:dd:4a:1d:f7:1b:16:3b:
cf:3c:7d:57:42:64:d7:d7:b4:3d:81:ad:df:ba:08:
79:e3:52:1c:7e:6e:8a:46:5a:ac:a9:f1:1e:be:1c:
a2:f3:90:b8:d8:8a:73:28:bf:ba:63:b4:41:4c:d0:
45:e5:5b:40:42:66:53:ba:b4:13:fb:81:8c:05:6e:
3a:8e:6c:bd:59:f5:9d:22:aa:9f:8e:1a:ad:4d:5d:
f8:23:54:fd:c1:15:e4:df:0b:26:f7:bf:6e:e8:14:
5e:44:2a:34:46:9a:3e:93:d9:fb:3f:56:a8:3e:68:
ec:79:64:ba:34:4a:da:b2:b7:96:06:f7:54:e7:b9:
e6:ac:3e:8b:32:68:4f:0c:dd:15:c7:32:a1:fa:c3:
7c:9c:79:30:2e:06:4e:1d:ae:35:6a:0f:29:b9:2d:
5c:2f:29:79:a1:8c:07:91:52:7c:e3:94:2b:d2:0e:
b4:cf:b4:3a:94:a1:d1:a3:84:48:d4:73:71:66:1d:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:10:1B:E4:D6:B0:81:11:B1:92:25:9F:FA:91:E0:56:FA:B1:38
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:af:9e:07:46:1a:b6:36:a4:1c:40:31:95:93:e6:52:a4:
ed:f9:65:af:bd:f1:bf:cf:f6:64:d2:81:f8:4b:05:14:79:57:
50:a1:5c:0f:bf:ae:8f:98:17:f6:bb:1b:62:47:58:25:81:ec:
4e:dd:09:b3:56:52:16:7a:2b:31:94:15:0f:18:fb:50:0d:79:
8e:94:89:f3:9c:b1:2d:ab:e6:ff:63:74:13:ac:4a:46:cb:6c:
b7:1d:f5:fd:54:cb:a8:c4:1b:e1:38:33:47:20:a5:e6:a2:26:
65:da:ae:aa:2c:90:ca:fc:fa:3f:d7:db:0e:6c:f0:8c:ee:c5:
45:c4:e6:71:20:59:f2:d6:c4:13:28:d5:aa:40:25:6a:92:50:
b7:44:17:59:e2:e3:86:07:17:aa:c0:d1:1d:3b:7d:47:61:48:
14:ed:ec:f8:40:33:5c:13:55:ed:74:2d:44:03:3b:93:85:15:
b1:10:5b:c9:be:76:0b:7d:d4:a1:a3:9d:a4:83:d1:ed:a2:e9:
18:8b:d8:20:89:c5:0f:be:87:49:55:75:e8:f6:aa:62:f5:60:
ee:0f:c6:85:d6:c6:e1:c7:79:ff:30:50:fb:84:b5:94:ae:c8:
06:20:12:80:c8:28:b7:3c:77:84:6f:b1:b8:ae:6b:19:aa:61:
58:b9:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:29 2026 by rpki-client