Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier: LZI6cZNygW7wgIIrNOo7+VgD2KLYasKYVqXjdPPtr/8=
Subject key identifier: A9:AC:B8:C5:9A:81:BA:6C:B1:9C:6D:F6:97:3E:8E:2B:84:9E:34:E2
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 019D2583D45B6750D7D9494F8A336A9AD7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number: 051D
Signing time: Wed 25 Mar 2026 15:01:29 +0000
Manifest this update: Wed 25 Mar 2026 15:01:29 +0000
Manifest next update: Thu 26 Mar 2026 15:01:29 +0000
Files and hashes: 1: PatdG5AHcJXdhxLeM5tM5L_BcII.roa (hash: 5h1/nVhqLUoRO6qPdWe0A5C0Fr5YO1aWm/IO1htZdyc=)
2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: psA7iP0XhphOy86i8XEYuji2StB6vYFfG+AKNa0R+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d4:5b:67:50:d7:d9:49:4f:8a:33:6a:9a:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Mar 25 15:01:29 2026 GMT
Not After : Mar 26 15:01:29 2026 GMT
Subject: CN=a9acb8c59a81ba6cb19c6df6973e8e2b849e34e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:52:e7:e8:51:d0:d5:49:70:55:75:6e:d6:
30:b2:71:a7:94:48:35:2a:bc:da:02:ce:ea:b0:44:
87:af:c7:52:09:1b:c3:33:eb:11:8e:31:85:9b:60:
10:7f:1c:c6:07:6a:48:3a:cd:0a:6a:36:54:a2:03:
fc:6f:54:fb:58:d3:de:ca:41:c9:36:24:7c:a6:8f:
dd:33:2e:57:ed:c3:9f:6a:11:6b:25:bd:ab:9a:d8:
e4:e0:00:19:b7:ee:6f:f1:97:9d:0d:eb:db:91:ab:
bd:bc:9c:62:09:92:38:d4:6b:64:2d:1f:af:09:8e:
07:8e:aa:62:fa:d2:4c:4d:f6:10:e7:fa:a0:80:23:
df:22:7c:29:cd:a2:a5:74:af:1a:99:59:fb:ed:a2:
97:6d:fa:8a:7a:6b:30:27:4b:d1:1e:7d:ba:8f:a9:
f3:93:9b:c1:0c:54:82:66:f6:12:3a:7e:68:95:00:
01:36:9b:e8:51:26:9d:cc:3e:82:3d:cb:08:ce:49:
fa:b6:79:fe:09:f3:18:3d:48:89:ad:28:0d:4e:6f:
9f:8e:c4:d3:84:06:4f:fa:a8:30:c2:19:0a:bd:df:
a7:c4:f0:18:65:fa:ba:eb:e2:77:95:a1:ac:91:b1:
be:66:3f:2b:af:17:67:51:8d:5d:44:4b:a5:c1:4f:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AC:B8:C5:9A:81:BA:6C:B1:9C:6D:F6:97:3E:8E:2B:84:9E:34:E2
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f9:86:09:c6:d6:d7:24:e3:7b:22:e6:be:19:7a:40:0e:77:
4e:dd:5b:25:d6:54:68:48:c6:4c:fd:75:08:2e:2e:f2:23:ff:
24:5c:19:bd:85:73:d1:dc:7c:4b:34:08:63:5c:01:21:f6:11:
af:c2:26:62:9c:6e:54:1d:04:97:63:c6:eb:58:39:8d:a9:22:
6c:4b:f7:2e:b5:e5:89:c4:8c:12:89:88:f0:ab:7e:ac:54:25:
75:ce:62:10:ed:03:25:19:dc:17:86:b7:11:cf:1d:33:9f:e3:
e3:27:40:72:f3:3e:44:15:f0:1a:e3:e8:20:0a:01:ba:73:a9:
74:a2:5c:7b:d0:d6:44:47:37:36:9d:5d:3a:e7:2b:8f:d8:7a:
12:a1:e8:ce:9b:41:a4:06:5c:e8:9a:5c:1e:d2:5c:e5:4f:71:
95:cb:17:df:14:0c:1b:42:d1:36:53:70:4f:33:45:0a:03:ff:
3a:79:2b:67:16:53:5b:74:de:51:ca:56:bd:86:6a:0f:f2:d3:
21:e0:3f:f8:02:5d:d5:7f:42:b4:d2:b3:9e:a8:af:d0:41:c5:
f4:6f:01:ec:c1:1a:8e:63:c8:e8:35:ad:43:4b:c6:03:1b:05:
a1:a8:0d:4e:d2:5e:2a:00:6c:3d:41:6e:46:11:dd:ec:3a:86:
5a:bd:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:58 2026 by rpki-client