Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: FMwFFf36TTvrYLuDI4iyHyEO5JBzdfLNqqKXRFyOPmU=
Subject key identifier: FF:C4:71:BC:9D:7E:8F:D0:37:C2:B0:AB:5F:59:AC:33:E3:34:46:E3
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019D28169A1D8FB21DDF049FBF12C560F996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: Wt+u7TV5c6sv5h+/xjN5UanSK6ZRBR9WIp4waCYWQIQ=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9a:1d:8f:b2:1d:df:04:9f:bf:12:c5:60:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=ffc471bc9d7e8fd037c2b0ab5f59ac33e33446e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:ed:b4:fb:7d:9f:dc:45:97:d4:21:c5:7a:
ee:dd:8b:63:5f:12:30:7a:71:cb:68:14:76:59:b5:
df:c4:32:42:aa:4e:f7:27:95:50:ce:a6:4e:fc:27:
f2:ae:cb:9a:95:a2:f4:13:30:d8:88:7d:17:ec:02:
78:7a:31:e7:ea:5c:ed:0a:0d:6b:d4:e3:36:93:88:
f0:f2:a9:2d:0f:b9:b7:91:ae:de:cd:ec:3a:0a:1b:
a5:9a:d5:cd:ae:d2:f4:94:84:e5:77:b9:d8:3c:5e:
22:2f:0a:18:b4:75:8e:92:79:db:bf:c9:44:40:21:
d5:af:6d:ea:8c:b4:4f:e9:58:df:72:b3:b0:a2:31:
85:e9:5a:72:85:75:59:51:72:9e:c5:36:de:4a:d4:
77:40:d7:09:93:b1:6a:8e:72:e9:60:cd:51:96:74:
6d:5d:af:64:ea:7f:bf:3c:fa:c4:5b:0f:bc:eb:97:
2b:07:93:70:07:d6:31:35:eb:68:f1:f6:56:48:fc:
e6:f5:de:c0:d6:41:b9:f3:69:2d:68:e2:2e:a3:11:
bb:6f:35:7c:ca:eb:c9:9d:27:ec:87:e0:c6:18:3c:
ee:99:7a:e6:c9:b0:26:83:18:5b:f6:f7:82:ad:06:
3c:28:48:4c:a1:9d:6b:90:af:0b:1e:29:dd:af:12:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C4:71:BC:9D:7E:8F:D0:37:C2:B0:AB:5F:59:AC:33:E3:34:46:E3
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b2:e5:3b:f9:e6:6a:15:8e:11:e8:76:02:8c:05:ee:35:29:
cb:b0:1e:23:c3:ba:d4:91:62:b4:cb:68:05:68:1a:f1:2f:2e:
ea:60:ad:eb:86:65:20:af:16:ad:75:92:10:80:6a:85:6f:68:
bb:bf:8b:08:10:cc:bf:75:c2:75:cd:bb:1a:2c:19:38:a4:86:
02:32:3f:8a:61:2c:df:c6:29:45:96:ea:df:21:7d:20:8a:41:
9f:38:f0:89:f0:39:c4:85:7b:df:5c:65:55:86:2f:c9:23:cb:
9b:c7:2f:97:34:e2:ae:ef:df:fe:18:c1:a5:fa:cf:70:c4:85:
57:3f:40:f2:e6:6a:a1:f5:c9:3c:cd:3a:12:58:95:4f:6f:fe:
31:53:b9:43:c9:ae:b1:1f:27:2c:ce:04:10:76:75:0a:6c:77:
2b:e7:65:91:fe:f1:f3:03:9e:02:be:60:5e:13:22:a4:2b:ab:
e1:a7:25:0a:69:fd:45:86:ee:d7:ce:2b:bf:4e:14:d8:0a:66:
2d:89:8b:17:e5:a3:ed:ef:34:39:94:04:98:4f:52:4c:55:e1:
87:7b:7e:00:8e:c1:3a:d6:c0:fb:32:71:59:1a:86:a4:40:ce:
70:9c:62:61:ec:94:48:30:77:dc:23:c6:05:7b:1e:dc:35:59:
88:e0:10:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:00 2026 by rpki-client