Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: OwrQ8s18DOrhs5TgwuBxLnt1042TF5PF+Yh4bkxRCQE=
Subject key identifier: C8:40:EE:51:FA:EC:20:4A:CE:8C:32:27:2F:36:F0:85:95:9D:83:3D
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 019CABDA014489228AF4DBB061872D2CA86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 0883
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: bc5kvm5d9dBVnDG0iZoRPUbAkVAcenfKP1DGfNCNHHU=)
2: NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa (hash: aspcKV2w4XRZmv8Xg1QmYjjgR0mYMF80LK5f3kp14g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:01:44:89:22:8a:f4:db:b0:61:87:2d:2c:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=c840ee51faec204ace8c32272f36f085959d833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:42:88:79:7c:44:96:af:be:45:75:fc:61:
ef:a6:fa:1a:5e:1d:30:de:1d:10:4d:81:f4:78:53:
c6:e8:7f:07:51:6b:b2:28:dc:2c:f3:a8:3b:3d:79:
43:5f:bf:db:1c:06:45:ef:02:4a:4c:05:de:57:76:
45:a1:f9:cf:b5:e0:21:63:4a:0f:ef:d7:5c:4f:50:
77:09:ed:12:04:13:f1:0c:79:d0:fa:10:f0:38:c4:
78:24:5c:a7:88:87:95:c3:24:1b:6d:af:65:be:71:
df:ca:1f:b5:e5:69:c5:50:07:d0:85:7f:83:5c:54:
f5:cd:a4:3d:2c:e4:7d:c8:d1:47:a5:f8:a7:d2:a5:
49:05:7d:35:d8:0e:32:bc:09:1e:ad:d5:c7:2c:6a:
5c:ff:bf:01:2e:c6:0b:09:56:e3:c5:73:b7:7b:5c:
b8:8d:11:ae:2f:47:7c:35:42:03:f7:5e:a6:32:27:
aa:fb:0c:d8:25:df:53:60:5a:66:d8:00:a9:f7:f7:
7e:35:51:fe:bd:80:9a:b3:6e:62:af:b8:be:97:7f:
bf:ce:f8:01:20:d2:78:13:86:36:95:24:69:3e:7d:
37:8f:5d:9e:14:5d:47:87:4c:3d:22:24:ac:30:5d:
87:50:13:ff:c5:58:60:a3:1c:12:61:a5:91:80:47:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:EE:51:FA:EC:20:4A:CE:8C:32:27:2F:36:F0:85:95:9D:83:3D
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:10:40:4c:08:27:a1:a5:c0:79:63:72:3b:35:a0:27:09:0b:
37:cd:c3:14:1d:2a:fc:95:b0:a6:08:83:6d:91:e5:ff:33:87:
76:1b:82:e2:04:4d:4e:06:cf:0b:b2:f9:39:ce:6a:56:5d:cb:
86:e4:b7:17:42:7b:51:09:c9:a7:9e:bd:2b:68:03:e5:f2:b8:
fd:e6:61:3b:86:5d:f4:68:99:c4:bd:82:c1:aa:35:8c:b4:f9:
3d:b9:15:59:7d:cf:15:17:e0:08:43:08:c8:88:dd:6e:34:ad:
f5:90:26:1c:01:be:f5:6c:c9:4b:ab:82:0b:03:73:b7:a4:e8:
58:eb:76:68:62:30:2a:65:90:26:c6:ff:44:80:18:9d:93:8f:
7a:68:74:8a:d4:c7:21:fa:1f:c3:ee:b3:99:4f:77:14:e3:4a:
42:ef:28:f9:00:ac:1a:a7:f4:71:50:62:a3:24:73:59:d7:5b:
35:fd:e0:2e:79:2a:3f:73:92:39:1f:c0:60:47:bd:f0:c5:67:
cd:31:c1:b5:d4:d6:a7:a6:3d:d2:40:87:5c:67:ca:f9:24:c3:
7f:d7:5f:34:1e:0f:34:eb:b1:bb:da:80:ba:2a:74:c0:18:55:
64:d5:c7:33:a8:84:0f:c6:64:a7:13:90:82:4c:d4:ad:82:67:
20:fe:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:07 2026 by rpki-client