Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: Nl3DvtI4pG9bwznH88r2qlA5mwxxeWYhTi1WP1zXclI=
Subject key identifier: E2:96:25:A5:33:89:65:9C:1F:47:50:F4:BC:89:84:17:7D:32:AE:A1
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019D27A8D56670BC9F7DBF947C0F5F0890C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0C4D
Signing time: Thu 26 Mar 2026 01:01:09 +0000
Manifest this update: Thu 26 Mar 2026 01:01:09 +0000
Manifest next update: Fri 27 Mar 2026 01:01:09 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: +CLxqFjFrUXWCqCaq1NZA7cQ1zX4UdBij6PfQLvSxAU=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d5:66:70:bc:9f:7d:bf:94:7c:0f:5f:08:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Mar 26 01:01:09 2026 GMT
Not After : Mar 27 01:01:09 2026 GMT
Subject: CN=e29625a53389659c1f4750f4bc8984177d32aea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:82:93:02:8b:c9:fa:0d:f4:34:9f:0b:66:
64:ac:30:5b:0b:09:ac:46:f2:81:f1:0d:dc:d5:19:
d1:2e:04:5e:71:94:20:e4:9d:ac:bf:c2:7b:95:39:
50:98:e8:ef:c6:d0:60:48:0f:75:35:d4:fd:98:01:
d5:0d:b1:03:f1:86:b0:d0:71:d8:8b:fc:89:7d:cf:
d8:40:2e:5a:c6:37:f8:a3:68:6e:1f:ac:f1:6d:92:
a9:d1:b2:f2:1f:0d:46:25:fd:1e:d8:be:81:d3:5e:
9d:a6:30:5a:d3:74:c5:ba:8c:74:81:7a:f0:9d:de:
29:eb:76:9f:3e:50:36:29:9c:d3:07:9e:1f:84:e8:
5d:71:a1:93:99:fd:25:ea:27:90:0f:e6:62:50:a5:
9d:f0:be:e2:aa:02:f7:59:f3:ba:e5:1a:d6:94:c3:
cb:d5:51:bb:8a:d3:02:f5:ff:9d:cd:02:12:de:03:
13:dc:96:01:41:89:e9:dd:1f:1f:27:c7:4b:a1:b6:
45:59:e6:f3:88:bb:c4:6d:18:81:05:e8:ca:b9:74:
7a:93:bb:fa:c5:a0:29:5c:f9:23:8b:92:bd:fa:e9:
46:9e:0e:30:12:f7:e6:49:8a:cc:b3:a2:09:10:b6:
e6:d9:78:a3:1f:83:fd:67:cd:53:d1:23:fd:e3:dd:
fd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:25:A5:33:89:65:9C:1F:47:50:F4:BC:89:84:17:7D:32:AE:A1
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7e:c5:db:e6:68:e7:0e:c1:e1:e6:e3:70:15:6a:00:88:4a:
0f:a6:44:d5:f9:1e:4f:a1:f0:a1:21:3b:7f:99:c7:ae:2f:fa:
fc:bf:1e:0d:f5:ee:a1:8c:57:6f:05:b3:08:0c:02:a9:e0:fd:
ad:1e:c8:dd:52:4d:ff:e2:ae:19:1d:7a:a9:f0:f3:f5:3a:52:
d8:3a:9a:a7:49:e2:9b:f3:83:58:78:e7:fe:e3:00:9d:d4:7a:
65:68:28:a3:96:f1:a8:6c:a4:d6:3f:7d:20:97:65:ec:8d:b6:
aa:d7:52:88:32:0d:d8:6b:d0:19:9d:9c:e6:0b:5e:7e:2d:8a:
b8:2e:67:e6:90:d9:ad:6e:a0:51:2e:64:85:2a:7a:c9:cd:95:
bd:3c:c7:18:52:34:4b:e8:aa:51:b7:3c:ec:b1:a9:63:01:48:
f0:90:37:28:4e:3d:e8:8e:80:8e:59:9a:fe:cf:03:14:1a:c7:
a6:53:af:d5:f1:a8:39:be:dd:e2:11:d9:1b:ad:7f:6d:5f:16:
4c:81:95:25:03:5b:dd:a4:09:05:e2:eb:1c:84:5b:e9:88:3c:
36:0c:54:76:17:83:f3:b0:e8:ba:17:97:a2:40:59:83:8e:88:
8f:61:11:f2:2f:b0:2d:e8:72:54:5e:41:0b:66:4a:de:02:2b:
62:31:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:52 2026 by rpki-client