Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: cO+o3oU4efRofnWuUfFwM0uHkRMyqYsbYKyVGshHeeI=
Subject key identifier: 9B:36:F5:2F:50:44:6F:A7:8F:28:B6:4E:DD:95:AC:0C:70:B5:CB:6B
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 019CAC10154CBBB4C4F86D961115BE58B94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 070A
Signing time: Mon 02 Mar 2026 01:01:00 +0000
Manifest this update: Mon 02 Mar 2026 01:01:00 +0000
Manifest next update: Tue 03 Mar 2026 01:01:00 +0000
Files and hashes: 1: 6tHZhT7N21w3Z616ewGEbAeKLdw.roa (hash: drk0jZRid095U5sVAWQhFh5KREeBBkf7MnZyeJizYAc=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: GmcLnnxc3ktu35JygnRjqMc4/nXDU4UAB2ozcY6wTKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:15:4c:bb:b4:c4:f8:6d:96:11:15:be:58:b9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Mar 2 01:01:00 2026 GMT
Not After : Mar 3 01:01:00 2026 GMT
Subject: CN=9b36f52f50446fa78f28b64edd95ac0c70b5cb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:c2:ad:be:4d:e2:0b:62:4c:94:e2:29:90:
2f:05:20:e4:cf:60:2a:76:69:01:56:d2:81:f9:9f:
a8:ec:da:8f:65:83:69:54:02:c5:b6:41:86:aa:6a:
13:54:26:0b:72:35:ef:06:1c:b6:f2:29:33:e5:a8:
19:b3:73:30:46:3a:17:4f:e5:b4:63:85:ba:32:62:
0e:ed:a9:bc:ba:69:98:78:a9:a8:dc:90:e0:0a:88:
fc:f8:6e:27:ed:99:3b:cb:39:30:84:2b:08:cd:8e:
28:be:57:26:45:ff:b2:2f:0e:59:ed:84:02:82:ac:
39:ef:48:11:29:5e:56:6c:ea:30:ef:91:a5:39:31:
06:34:8f:bc:07:42:01:28:a0:03:9b:aa:ac:04:1b:
e8:24:bc:83:0b:a9:e2:e9:d2:aa:8e:12:92:35:c4:
c8:ad:c1:5d:39:f4:a5:5c:e1:4f:76:55:d2:e2:69:
3e:28:5a:d1:b2:e8:ed:48:cb:3b:8a:26:07:1f:50:
1d:09:50:da:01:22:c3:6e:68:c9:1b:a7:2f:11:51:
d2:55:c1:f9:9e:fe:26:78:a2:d6:76:29:1d:0c:01:
3d:fc:65:c1:5a:3e:b0:e9:42:6a:53:ec:96:e9:bd:
f4:ab:42:72:9c:48:d4:eb:a1:d3:6b:40:3b:0a:1e:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:F5:2F:50:44:6F:A7:8F:28:B6:4E:DD:95:AC:0C:70:B5:CB:6B
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5a:ba:69:cb:87:15:49:11:45:0e:03:22:c9:1d:1e:93:30:
83:0b:7c:b7:1a:7f:81:ca:7e:3f:bd:a0:eb:e2:86:92:6c:2e:
bb:be:6a:13:5a:99:c1:5c:4c:36:4d:94:4c:ec:14:da:88:e3:
5d:ce:6c:26:8b:66:39:6c:c3:b2:af:49:82:ab:af:15:f4:f6:
24:5e:61:3d:18:1d:b8:31:5a:6c:e1:6a:8d:9b:de:ae:da:06:
ad:19:ab:2d:cc:b6:7d:eb:b5:84:ba:c2:7b:78:31:3b:ac:7c:
28:38:ce:09:8a:02:bf:b5:39:fa:0f:0c:1b:9f:54:36:4e:be:
35:b4:6e:8c:d9:40:be:d7:a0:c0:12:34:ef:76:e7:08:16:5c:
f8:7d:6b:dc:c4:76:09:94:7b:21:b9:81:b0:71:f1:cf:3b:a9:
12:a5:61:9a:f9:08:d1:7f:95:f7:47:e4:45:b3:f7:16:15:af:
c2:8d:8c:03:8a:e9:83:09:19:a4:d8:8a:f6:99:f7:b8:21:77:
13:d1:05:33:5a:6d:ec:35:69:15:cb:99:29:9a:29:71:9f:ce:
fd:9a:b8:ef:60:08:0f:4f:59:3d:91:d0:bb:01:fa:36:e3:ec:
d5:41:a4:71:10:fa:df:81:53:2f:82:c7:b9:c7:9d:e8:8b:d0:
ab:8c:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:41 2026 by rpki-client