Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: DutuxyAZm1PAfpCR85FEdRHMjOij+Kn+QFsevNkvVRE=
Subject key identifier: 84:13:9E:61:CE:D8:70:71:21:A5:6B:8E:79:C2:D6:6C:7D:42:1B:01
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 019D2A04FAAC2B691218900F9AAE7EA40D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 12:01:02 +0000
Manifest this update: Thu 26 Mar 2026 12:01:02 +0000
Manifest next update: Fri 27 Mar 2026 12:01:02 +0000
Files and hashes: 1: fe5q7Ym0eOTsgMAB1IUrjncVBXg.roa (hash: 5UUqkfEzMB1xSChuf7PbFjMq0H7jo6WK6DJ2it+YBAc=)
2: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: qjALKlGhHIg6gllAd1M/q4d1z5jF6oRbV4ijDNTkALI=)
3: tX7VJWazlnGg57nYx0SdqCcW42M.roa (hash: a4ThqNr+E56D9pM0rGPy4dnLeWvNfcYrPQOSDN6v3Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:fa:ac:2b:69:12:18:90:0f:9a:ae:7e:a4:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Mar 26 12:01:02 2026 GMT
Not After : Mar 27 12:01:02 2026 GMT
Subject: CN=84139e61ced8707121a56b8e79c2d66c7d421b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:38:8c:0b:a5:16:66:25:c7:47:68:ee:33:
74:c8:81:92:c0:fe:e0:8a:c0:96:3c:25:8b:24:51:
39:a0:d9:cb:a2:8d:7b:c7:07:2b:35:79:47:92:5b:
3c:37:a8:af:2b:32:ee:98:89:e9:ce:6a:1a:18:20:
9c:63:26:f6:41:d9:d7:f5:76:cc:c0:fc:96:cc:b5:
bb:98:bc:b0:1c:fc:11:e9:75:d4:a4:08:52:85:41:
d5:5c:d6:a1:6e:27:fe:c2:37:4c:e6:0a:70:41:1b:
7e:1e:c7:e7:96:8e:3b:d1:f7:f4:08:95:37:d9:34:
7c:ce:9a:6e:01:46:bf:d2:5b:43:94:37:4f:08:3a:
85:a0:93:10:7d:96:95:9a:36:40:35:ee:a7:9c:98:
a6:39:88:7f:28:f3:76:c9:92:6a:fe:78:7e:0a:86:
4b:7a:0c:39:e2:d4:df:bf:37:7a:9e:df:e3:eb:70:
67:8a:3f:ea:61:b0:4b:93:a5:a3:85:6b:27:0d:8f:
47:89:ce:da:10:4f:8b:b2:54:42:48:32:32:2f:63:
f3:8a:a6:af:84:92:ff:8a:a4:1b:4f:5b:c3:d5:b3:
7b:5c:71:b1:73:bc:2c:68:03:51:09:fa:70:a3:6f:
94:a7:31:66:11:28:d7:19:ca:21:b7:e5:fd:01:88:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:13:9E:61:CE:D8:70:71:21:A5:6B:8E:79:C2:D6:6C:7D:42:1B:01
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:71:90:b4:3f:0d:37:96:91:39:03:ef:5e:0e:d4:67:ea:e3:
d8:fe:e3:60:f4:fb:2a:f3:94:76:95:fa:81:fd:4d:eb:72:4a:
29:e2:e6:27:42:f0:1c:d8:5b:65:45:7f:96:d1:32:d2:57:f8:
32:48:54:22:80:35:a5:07:4b:1b:fd:7a:fa:e5:30:65:0a:75:
ab:52:0c:cb:c8:bb:c7:6d:20:09:0d:d4:a6:ad:ee:b9:0f:02:
88:71:b4:91:21:62:81:43:70:8b:a1:98:3b:91:ba:2e:32:cb:
5d:bf:31:bc:7c:fe:aa:c5:b2:0a:81:b5:b5:00:ba:d8:1e:db:
ab:cf:bb:a2:40:d5:31:be:0b:fd:11:77:81:fe:0f:32:73:8b:
78:be:13:b2:ba:29:9a:17:56:5f:8e:d5:79:f4:1b:36:35:e0:
bb:1f:ca:f6:68:98:18:44:8c:c9:20:89:a5:17:4d:07:ee:cf:
ba:79:d0:52:63:24:19:99:fe:68:49:01:3c:1b:19:f3:6e:f2:
20:1c:de:68:2b:e9:45:92:b1:e3:07:73:3b:b0:3d:ab:5e:1e:
ff:df:94:16:d2:e8:52:cf:e6:ee:63:7f:42:05:3a:65:15:32:
df:fd:d1:1c:4f:d0:25:45:64:52:a2:e4:41:53:5e:3c:49:1c:
1a:4b:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:22 2026 by rpki-client