Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier: Dre1d7yjJ8DYUJqOyyu7yNADK4ODt6Wt9Uthz4kOVT4=
Subject key identifier: 34:5E:60:9B:D3:87:F9:27:BF:7B:3F:D2:BD:D3:08:45:3C:D4:3C:7A
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 019D273AA5AC568C30798E1253C8DA94C091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 23:00:48 +0000
Manifest this update: Wed 25 Mar 2026 23:00:48 +0000
Manifest next update: Thu 26 Mar 2026 23:00:48 +0000
Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: pjynocqtdTQcmF/ad7hdWfEuDdMQbqhZ5Buj1Yd4mRo=)
2: l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa (hash: PgarAlr827N/WHoU/7cGPWG2WCkz6pZoVQE96jRVrBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a5:ac:56:8c:30:79:8e:12:53:c8:da:94:c0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Mar 25 23:00:48 2026 GMT
Not After : Mar 26 23:00:48 2026 GMT
Subject: CN=345e609bd387f927bf7b3fd2bdd308453cd43c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:85:0c:2d:d7:22:56:1f:39:3d:9d:81:7b:
ba:93:6b:bf:41:7c:01:1f:27:b2:d1:5b:0c:d6:69:
4d:4d:22:57:e1:3a:d3:c3:d7:d1:c8:c4:4e:c1:4a:
4f:36:b6:cf:fb:2a:31:0c:28:d5:4e:95:fa:1c:85:
df:4b:e8:c2:a8:0e:90:57:a4:1e:5b:85:8f:11:f2:
61:3a:af:cc:55:49:f2:6d:24:6a:db:3d:0f:be:f8:
9c:f6:8a:f3:68:ac:7e:92:5b:e2:88:7e:e2:0b:2c:
03:65:86:77:55:d6:ca:95:9b:a6:47:9a:69:7d:34:
2b:2b:a9:69:1d:c5:1a:21:c4:b3:70:77:07:13:88:
f0:7d:80:8b:4f:e9:8e:49:75:d4:3d:0c:f0:18:5c:
44:e0:45:2c:fd:c3:9f:03:1b:85:75:ce:1a:cb:4a:
40:74:24:84:f5:a6:8f:52:84:0a:c3:5f:bb:57:b5:
ea:72:60:27:b0:bb:5d:53:e2:ad:a2:85:fb:d9:58:
55:44:a2:1f:28:4c:27:7a:e8:0d:e1:c7:3f:0f:0c:
43:c1:14:de:86:68:db:e1:de:8d:4a:fc:79:4b:b8:
bd:87:aa:fe:c9:3c:e7:a1:3c:ac:c6:63:a5:3c:25:
04:dc:6c:f4:b3:6e:1b:8a:4f:9d:04:2f:ff:5a:2c:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5E:60:9B:D3:87:F9:27:BF:7B:3F:D2:BD:D3:08:45:3C:D4:3C:7A
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:45:b0:5a:80:cf:ff:85:18:f3:e1:0c:51:39:03:0a:41:
9f:cb:13:44:71:ea:b4:7e:9a:af:1e:21:57:b5:c7:5e:8e:7e:
b9:45:dc:bb:e7:4c:84:3b:51:b6:74:97:e9:82:60:eb:d9:b4:
f6:da:6b:1a:89:55:21:b8:1a:6f:8a:3e:87:ae:e4:be:47:4e:
d1:6f:45:35:88:a9:24:6f:2b:79:fa:53:7a:c6:61:35:3c:c3:
bd:bc:4f:2f:88:03:1c:f1:ef:b4:cd:18:41:e4:b5:b5:3a:02:
33:12:45:ec:fc:e8:09:37:c6:c0:33:6a:bf:8e:1f:72:05:95:
69:fc:1a:b5:d5:b6:d8:66:ad:b0:ed:ae:2d:8c:55:2a:89:f0:
88:1b:92:06:14:0e:98:2a:1f:02:6c:b5:44:30:a4:eb:70:2c:
6f:bb:bc:80:5c:1f:27:ea:cc:c5:a3:5b:c4:8c:4f:63:cd:c3:
76:86:e7:df:e2:0c:58:ca:15:c7:3c:59:00:7f:b5:a9:a9:c2:
a1:c2:71:4a:d1:e6:54:af:23:58:15:5f:01:80:31:a3:89:55:
33:be:ac:20:68:6f:8d:48:56:89:38:dd:ba:0b:86:eb:13:f1:
b1:a2:88:65:ab:5a:6b:20:c1:96:bf:0e:0f:9b:51:1f:67:5f:
bb:24:6d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:44 2026 by rpki-client