Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: l1OKDqb8N7fIrvuCliysghxDT1O7SXk12LtdgeFqmzE=
Subject key identifier: A6:FE:D6:51:60:37:1E:3B:76:3E:8A:68:97:77:EE:42:1D:B8:6A:09
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 019D26CD6ADCD347D80CDF365B79992BA48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 1710
Signing time: Wed 25 Mar 2026 21:01:29 +0000
Manifest this update: Wed 25 Mar 2026 21:01:29 +0000
Manifest next update: Thu 26 Mar 2026 21:01:29 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: HBar5rsgq7UKldNhbochMMFGMKrUfW8PwCTcbWMIZB8=)
2: Oe-SeoCCIXN5ycDnQlV6M_dI1XI.roa (hash: D3QDtFMR0sLy/F2jguYpH4IAE7IC8B7SWcgluJtwmKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:6a:dc:d3:47:d8:0c:df:36:5b:79:99:2b:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Mar 25 21:01:29 2026 GMT
Not After : Mar 26 21:01:29 2026 GMT
Subject: CN=a6fed65160371e3b763e8a689777ee421db86a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:03:10:ad:45:21:fd:18:4e:74:cd:a8:be:
81:9f:2e:76:f3:56:ad:ae:db:43:71:71:af:b2:cb:
99:6d:a8:90:73:9b:63:0a:f3:bf:98:67:a6:cb:a9:
17:12:bb:88:9f:99:76:ac:0d:71:aa:8a:9e:79:35:
c5:36:8e:9a:90:6b:a4:cd:a0:ea:5f:e0:99:a2:c5:
f7:cd:e6:06:c1:82:49:08:8a:4d:12:5a:68:5a:5e:
89:df:92:0e:dd:c3:be:80:32:93:1b:41:32:7d:d9:
56:34:79:42:15:4b:c3:01:78:3a:e6:ac:57:85:5b:
be:82:e0:90:d1:4b:a6:df:bb:27:5b:99:bb:1c:51:
d6:31:94:18:08:94:e8:81:17:12:d1:21:df:09:79:
7b:0d:28:a7:e5:d6:06:79:9b:1e:15:55:3b:93:de:
ab:17:89:4d:0e:ea:b3:22:ad:21:84:30:e5:57:17:
ab:98:f9:41:a8:31:07:f3:5a:80:93:1a:7a:36:50:
18:c8:46:21:70:81:e2:d7:ba:b8:ec:77:fa:1a:e8:
b9:e5:eb:da:4b:4e:8f:21:bb:6c:1a:d8:df:d9:58:
e7:42:18:6e:dd:73:88:ce:f8:66:77:9c:85:68:f7:
8d:0e:23:1a:41:f6:93:e1:e2:1e:ac:85:68:63:ff:
85:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:D6:51:60:37:1E:3B:76:3E:8A:68:97:77:EE:42:1D:B8:6A:09
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7c:69:2e:83:f7:87:ce:0f:14:fc:0d:ab:e9:1f:21:fa:7d:
d4:4d:27:7b:ea:28:58:5c:56:4f:05:77:2b:e1:11:12:e8:6e:
aa:6f:31:c6:b4:e4:f7:6c:b0:03:1c:67:53:87:05:a8:b8:4e:
42:1e:e8:8b:ce:93:34:85:44:2f:c2:58:b3:8d:35:a1:5f:77:
03:70:2a:b8:a2:8b:92:cc:82:67:b0:df:96:57:c1:4d:07:53:
c2:ab:ea:eb:c8:c3:fc:01:89:08:4a:80:87:c1:58:e9:ab:34:
06:0c:d3:8f:d0:63:56:8c:80:ff:f6:67:b9:d0:0f:63:57:f3:
4a:3a:b9:f0:25:87:b7:93:62:60:85:2e:49:fa:a5:a0:c6:81:
7c:ef:e7:32:a1:89:8e:44:33:2c:92:13:df:00:e8:7a:c2:65:
77:06:92:ac:26:aa:05:1e:b8:3c:d3:ef:8f:97:88:e5:a8:64:
bf:3b:6a:a6:a5:9a:7c:66:07:4d:8f:37:df:2a:0b:04:3c:a1:
89:d5:1a:7a:5a:16:6d:1b:22:84:c7:1d:c4:23:40:34:de:c2:
c7:4f:a8:08:da:36:5f:57:73:f8:d7:8c:ac:2a:0f:2d:73:0c:
6e:d5:5a:23:7c:93:8d:38:94:bc:39:bf:f1:37:d1:8d:c9:6b:
e5:6b:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:13 2026 by rpki-client