Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: MY7W+cX35w0LsGF1kwZyEpFh+PQXNiBWfDUE5Fye4wo=
Subject key identifier: 7E:F3:51:93:24:BD:90:17:8D:B1:42:8E:79:77:6E:5D:5B:C9:01:C1
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019D24A80D305A26D7C546F380C64A3DB7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: 26
Signing time: Wed 25 Mar 2026 11:01:26 +0000
Manifest this update: Wed 25 Mar 2026 11:01:26 +0000
Manifest next update: Thu 26 Mar 2026 11:01:26 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: O2F1FBQkMGKOdlLB0TBB//we/Cv09SikJtFrRSkLZrQ=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a8:0d:30:5a:26:d7:c5:46:f3:80:c6:4a:3d:b7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Mar 25 11:01:26 2026 GMT
Not After : Mar 26 11:01:26 2026 GMT
Subject: CN=7ef3519324bd90178db1428e79776e5d5bc901c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:98:56:91:35:1e:ec:8e:94:2e:15:38:50:
18:8a:4b:cd:2c:f2:ea:68:bf:d5:ba:c0:63:78:5d:
df:dc:0f:7a:32:47:70:9e:bd:f7:4b:d5:e1:41:1e:
db:23:d1:4d:a3:68:50:8e:f9:7e:05:8c:ac:ba:14:
ab:87:10:89:fa:b3:68:5d:44:2b:6d:79:ec:92:9a:
b3:cf:8b:9f:89:b8:84:1e:fe:6a:59:75:be:49:22:
72:0d:03:a7:8c:4f:64:be:e6:71:ab:81:55:c9:50:
0e:60:af:f3:a0:51:89:a7:a9:78:71:f0:b6:e6:97:
bd:d3:bc:88:64:d3:7a:3d:ed:b1:89:5d:39:4e:20:
75:3e:85:f3:46:08:ab:ef:c1:d8:8e:72:8b:73:26:
f1:02:62:ca:a6:b3:4b:82:69:6d:27:7c:9f:19:4a:
c7:2d:ac:18:e4:c2:d0:e6:92:04:97:63:8b:f3:11:
7a:9f:32:a6:6f:1f:a9:af:69:fb:d3:ab:26:f5:95:
55:b2:9e:49:25:57:bb:4c:49:e6:4e:90:87:13:e0:
d4:74:82:30:fd:58:3e:cb:43:69:52:57:e8:32:8e:
6c:48:65:f4:2c:6e:25:a8:cc:0b:b7:ab:b1:09:ba:
73:02:c8:86:a7:f3:6b:cd:68:74:4a:1c:cc:73:49:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:51:93:24:BD:90:17:8D:B1:42:8E:79:77:6E:5D:5B:C9:01:C1
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:08:f2:66:a7:2c:3e:88:d7:48:0e:fb:23:bb:10:82:62:1e:
a4:d6:b9:69:bd:79:cb:44:cf:19:3e:99:4c:5d:f4:af:78:95:
00:d4:5d:1a:0e:f9:c6:18:40:35:03:77:c4:67:d5:54:c5:1a:
8b:12:11:56:91:10:34:7f:bd:7a:42:6b:2d:96:5c:7a:f9:0f:
b3:44:1d:26:ff:52:de:fa:0f:9b:88:ae:62:1d:e5:e3:18:d2:
2d:98:aa:d6:60:9c:a4:c4:d7:3f:d7:87:e5:a3:b9:e3:16:f7:
71:2c:78:35:88:d6:77:8c:86:a8:a5:64:43:14:e1:54:6e:2b:
94:5a:7c:b8:17:b9:66:c7:13:68:89:61:bf:3b:55:12:be:c2:
b1:75:be:ed:5d:4c:62:9b:7e:8c:8d:cf:59:79:23:61:48:89:
b2:f0:c2:6e:20:28:d5:f0:83:fa:3f:37:6d:86:78:ed:d6:5e:
16:86:0c:a1:6d:89:1f:3b:de:b8:f6:11:26:5b:c8:c7:87:ee:
01:44:89:ae:6b:3a:ea:ed:a6:6d:84:01:a7:ad:94:60:ae:a9:
35:e2:95:ed:7e:02:39:63:5e:55:d9:2a:50:38:f1:9f:94:ac:
a1:b9:b3:d2:c5:83:a4:5d:37:45:be:28:82:1a:13:77:31:63:
a5:84:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:17:04 2026 by rpki-client