Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: xRMFGC76SWtZcrGTI3B3+1pIFgTWhuSMs93n0HtltvY=
Subject key identifier: E4:0A:CF:54:7E:3D:90:0F:F0:68:91:4B:20:6A:D3:5F:31:E3:3F:3B
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 019D27E05062FC6CECC63D9E0B60707BF573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 02:01:45 +0000
Manifest this update: Thu 26 Mar 2026 02:01:45 +0000
Manifest next update: Fri 27 Mar 2026 02:01:45 +0000
Files and hashes: 1: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (hash: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: xlzaRuUSZdHGcBOijU1mP+GTSCa0BnXLvQE3JEXGXvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:50:62:fc:6c:ec:c6:3d:9e:0b:60:70:7b:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Mar 26 02:01:45 2026 GMT
Not After : Mar 27 02:01:45 2026 GMT
Subject: CN=e40acf547e3d900ff068914b206ad35f31e33f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:af:a2:00:a9:21:9d:e7:61:e3:8e:d9:1f:
f3:09:e9:e8:97:04:94:e2:75:b8:08:e1:0c:31:ce:
bb:65:0e:6b:e7:42:51:4d:9d:71:4f:0a:58:db:cc:
4f:00:15:3a:4d:07:4f:bc:ed:e2:13:cb:a5:44:80:
af:9f:dd:e8:0d:7e:96:e6:39:93:e2:c2:ae:75:3d:
11:de:c8:94:7e:75:05:1e:93:0d:49:11:77:1b:cd:
9e:a5:25:f7:ab:63:d5:51:1a:86:ca:85:e2:0d:3d:
a9:79:dc:f5:fd:04:dc:03:74:4b:58:23:49:de:a7:
c6:9a:33:7a:6b:9d:b8:56:5d:39:2a:a7:e3:46:88:
08:43:b6:af:e1:de:70:b1:fc:7c:9e:94:38:8a:b9:
a3:c9:01:7d:f2:32:9c:e0:c6:98:58:00:33:1d:a6:
8d:32:c4:26:19:e6:41:62:f4:4d:dc:24:88:63:ba:
a9:49:6d:03:d1:07:91:9e:b3:45:2e:d0:48:5d:f3:
69:da:9c:d0:ce:4d:01:1b:34:4b:2c:06:5d:21:29:
07:92:2c:6a:c7:4e:bd:44:4c:dc:a5:83:6e:fa:72:
e8:5b:31:59:c9:ff:ba:a9:fa:79:1a:54:78:a2:a2:
31:16:b8:1d:8c:1f:a2:b7:c2:a9:4c:b3:24:f0:73:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:CF:54:7E:3D:90:0F:F0:68:91:4B:20:6A:D3:5F:31:E3:3F:3B
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:76:7f:bd:6a:c4:09:77:a9:4a:ee:20:62:74:c3:4c:3d:91:
5b:2e:b0:88:f6:d1:f0:ed:19:05:82:b4:20:0c:bf:88:3f:e6:
47:df:27:df:4d:f3:5a:10:80:4f:b3:86:dd:cc:d1:c1:b2:b4:
45:1e:26:8f:1a:4e:e1:2c:f0:6f:4b:bf:ed:6c:c9:cd:c7:57:
24:92:a0:08:80:4f:31:01:60:9a:ca:1c:dc:9c:17:d1:92:ba:
8e:d6:98:5a:3a:9e:7b:40:3a:e7:c9:92:39:04:ac:d4:a0:f4:
80:6c:97:0a:68:0e:30:e7:5c:a6:10:28:07:39:bd:96:5c:6f:
ee:01:8c:29:f6:ff:3c:90:9f:28:98:6f:15:5b:4c:4c:81:6d:
ff:88:0e:53:17:1d:e7:31:b8:d6:cc:13:76:70:7a:56:7a:34:
da:06:d2:ae:04:eb:46:47:06:1f:95:03:73:87:7e:0e:39:7e:
00:ef:b1:28:2a:42:2f:2a:99:2a:87:13:93:8a:d8:03:37:9a:
7b:5f:51:e6:b6:ad:a2:33:71:d1:60:7c:f1:02:58:e1:20:4c:
79:a2:0e:35:41:79:9b:c0:1c:f6:a2:2c:cd:a0:d8:15:25:b5:
ae:1b:f6:1e:76:97:4a:69:66:12:87:e3:07:51:af:ce:65:d6:
70:a2:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:50 2026 by rpki-client