Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: xccTOamMF+L73qt+UP/uMNE2DZi1bPeHfafDmlCZA8M=
Subject key identifier: 14:56:E7:C8:53:BA:69:FD:B9:28:2B:78:40:5E:D6:8E:19:B7:93:46
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019D277290D4BB1561E38F6E4EDCA2B0391F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:52 +0000
Manifest this update: Thu 26 Mar 2026 00:01:52 +0000
Manifest next update: Fri 27 Mar 2026 00:01:52 +0000
Files and hashes: 1: 3qQwWKb1-kVy_ayi1t9X0ckV-So.roa (hash: 6uc0py4DUTjhUubTuSWB3rLcaAx0aZmagITkDfiQN1k=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: 0H0SUa7Uc0msztI6IE2NlL2LcfkXEf6DAyICJny0XC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:90:d4:bb:15:61:e3:8f:6e:4e:dc:a2:b0:39:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Mar 26 00:01:52 2026 GMT
Not After : Mar 27 00:01:52 2026 GMT
Subject: CN=1456e7c853ba69fdb9282b78405ed68e19b79346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:47:5c:11:8c:4c:e6:33:3d:bd:21:14:9b:
01:31:07:38:49:86:1e:3b:f2:5e:26:03:28:c4:f9:
10:e9:5f:93:eb:c1:0f:36:1d:09:0b:fb:ed:7c:df:
d0:89:06:f6:41:22:87:91:41:52:3f:77:e9:3e:6a:
21:99:87:34:7b:bc:42:c1:98:69:9a:3e:6d:0b:d3:
f7:2d:20:75:72:48:f1:f1:d1:00:e0:fd:30:33:2a:
37:18:0e:31:17:7f:4d:54:57:a2:79:0b:64:db:2b:
be:50:73:4d:51:ee:59:33:e9:fb:f1:09:ee:15:11:
40:df:1a:37:07:54:af:33:27:b5:10:8f:4e:f0:44:
58:6c:e5:f1:75:e4:cc:eb:67:d5:71:8c:4d:13:b7:
6c:3a:6f:ed:8b:be:dc:6c:f0:0a:ae:a5:a6:b8:13:
31:21:b9:e5:83:bc:18:50:19:9c:f8:d3:f0:9c:d8:
d3:fe:2e:eb:a5:42:a4:2a:21:ad:95:26:61:3f:7c:
23:71:15:85:43:14:8f:42:78:53:77:f4:c3:45:8a:
b0:da:3d:fc:60:dc:42:dc:ce:d7:11:50:88:51:4a:
3c:40:f6:c2:b8:74:bc:5c:82:29:90:21:29:b2:72:
09:55:c9:3d:cf:74:55:2a:cb:85:53:25:e8:54:35:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:E7:C8:53:BA:69:FD:B9:28:2B:78:40:5E:D6:8E:19:B7:93:46
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ed:49:c8:71:4f:84:a3:33:64:7b:d7:7a:0b:6f:ec:d1:26:
41:40:9b:08:12:e3:d0:97:96:b1:aa:a9:f8:d8:d7:12:5f:fe:
80:e4:2f:19:9d:2c:33:c6:82:50:2a:53:4c:49:23:7a:55:b8:
5c:ff:30:f2:89:2a:09:fb:67:18:c6:fc:4b:9a:e6:be:e2:dd:
23:a3:62:c8:59:9c:57:7b:f2:26:1c:68:b3:87:89:25:a2:dc:
92:85:3c:01:61:2b:53:de:3a:af:7a:70:71:46:33:14:98:d6:
10:d3:4f:58:7d:70:a6:57:c1:78:5c:c8:5d:11:10:17:2d:29:
bf:77:18:21:77:21:6f:29:ea:ee:db:e4:c3:f1:77:7b:ab:f0:
0e:bf:55:a0:df:99:20:fa:49:42:24:7c:0f:8c:aa:8b:3d:2d:
67:4b:d2:2f:b8:44:c4:11:ff:de:70:e0:98:e4:e0:98:3f:c5:
b5:4e:85:c7:07:68:7f:d2:3f:c6:41:d4:86:15:46:a2:86:f5:
31:8b:ee:40:e5:2a:d8:92:bd:bc:e3:ad:98:b9:f7:0c:ce:55:
55:f1:c5:25:7d:18:81:c7:1a:78:41:27:10:26:d0:cd:14:a9:
ae:c2:e3:ff:92:61:a2:e3:18:f0:7d:d5:c7:89:68:04:97:0f:
d6:e7:0a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:06 2026 by rpki-client