Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
File: I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft (raw, json)
Hash identifier: A4DjPSZBMF2Y9OZEyTvPIgfhNEKulLfXtzJRg9k+Uzc=
Subject key identifier: FF:10:68:EC:B6:07:EF:2E:43:08:B8:81:4F:63:C0:CD:84:6E:38:0C
Authority key identifier: 23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
Certificate issuer: /CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Certificate serial: 019E1CB5044A5A5DA165B268FAA95B5501B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
Manifest number: 36
Signing time: Tue 12 May 2026 15:01:25 +0000
Manifest this update: Tue 12 May 2026 15:01:25 +0000
Manifest next update: Wed 13 May 2026 15:01:25 +0000
Files and hashes: 1: I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl (hash: 3h7rNu+iJh39i+k0cUht3VVasaJbJfDekfJVubxesXk=)
2: Z1FAr4NSj_9E4vgngoY4iZIbd6w.roa (hash: TNaTsbZBUY9cnfgT4Gqq06IHw66GAFg4ule0/lO0mw0=)
3: b89OtE1WAM5mSDz-HnqsCyirLw8.asa (hash: WwQIyDPTpparBL/aU3tgaOWtU26s+wxcO28wS+CM+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:04:4a:5a:5d:a1:65:b2:68:fa:a9:5b:55:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Validity
Not Before: May 12 15:01:25 2026 GMT
Not After : May 13 15:01:25 2026 GMT
Subject: CN=ff1068ecb607ef2e4308b8814f63c0cd846e380c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:36:46:5c:a4:c0:62:02:1e:8a:4b:92:75:
a8:00:37:7a:07:73:f7:bf:5f:57:81:19:b0:57:88:
ae:80:13:46:95:cf:33:62:39:73:79:0f:19:52:dc:
fe:5e:a1:64:19:e0:ff:74:99:d6:29:ae:d8:6d:00:
24:29:61:75:9b:ea:6c:69:7a:0c:0c:98:8c:6f:b5:
39:82:1c:67:f4:91:1f:97:b0:09:52:af:10:02:c1:
e2:7f:86:6b:6f:c6:5c:80:42:65:db:21:ac:c0:a1:
12:ce:83:33:97:1b:02:6c:ef:e3:80:d0:9f:08:3a:
27:6b:41:03:9a:de:68:63:88:cd:d1:44:11:a3:d6:
e2:da:99:1c:3e:05:d1:9e:1e:93:ba:8c:3c:c5:52:
75:56:d9:d7:26:94:28:f5:8b:7b:e4:c5:d0:4f:48:
03:39:6d:c4:90:7f:10:de:54:fe:2d:5f:c0:c0:8b:
45:8e:d1:f2:0a:fb:7f:41:ab:5e:36:52:c7:44:4c:
79:fa:31:2b:73:ed:52:5a:23:63:ed:66:18:95:90:
82:8d:78:ce:d4:ad:20:c6:f8:0c:52:61:99:af:a9:
27:b6:f9:73:1b:93:d0:1c:91:f8:89:af:15:a0:1d:
fa:8d:cf:65:45:c7:cb:be:21:70:ee:6f:20:1c:9f:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:10:68:EC:B6:07:EF:2E:43:08:B8:81:4F:63:C0:CD:84:6E:38:0C
X509v3 Authority Key Identifier:
keyid:23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:53:50:7b:1a:60:0a:61:eb:c2:70:48:e8:c7:35:d7:53:2d:
34:42:23:09:cf:a3:d3:01:84:a1:42:3f:bd:9a:3f:15:fd:2f:
e4:0a:81:5e:a1:a8:01:f0:65:37:ee:14:e6:21:5d:93:ad:c6:
54:6b:a1:19:2f:75:de:d4:aa:28:63:88:4f:31:f2:21:a1:2d:
f4:39:73:14:45:fc:6f:35:c9:70:7d:45:63:aa:56:07:82:7d:
f3:63:8d:ca:f6:8b:71:8e:29:42:b8:c8:d5:b2:b5:cc:5d:ec:
df:52:df:47:21:46:af:09:c2:16:9d:e2:e2:af:5b:a2:9e:c2:
a8:a0:22:b9:e7:72:a4:4c:f9:97:0b:76:52:9b:d4:68:49:8b:
9b:62:ca:f0:19:b3:b7:7e:25:88:3c:9d:3a:87:73:4a:2e:1c:
8d:f9:68:4f:14:7d:37:8b:18:d3:9f:7a:65:43:77:04:1e:11:
11:59:b5:79:e5:44:04:95:f1:a4:23:20:92:cd:0c:7c:d8:41:
f6:31:14:d5:30:5c:42:c0:e9:32:1e:24:cf:a4:1a:7f:1c:32:
f5:c4:77:ee:fd:2d:2f:f8:1c:c9:39:ed:3e:35:ff:10:72:97:
f9:9b:57:7e:3d:1f:25:df:ca:1e:1d:b1:ba:34:6d:93:a9:bf:
26:3e:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:17 2026 by rpki-client