Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: HK8qOfoY2VFSSzEjM8XY9KwhooGCWcZYoqqafAKh9kE=
Subject key identifier: 2A:4F:4D:1E:E0:FA:31:CD:A0:43:5D:71:C0:BE:2D:4E:8B:A4:8C:EF
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019CABD928E655B437F37D43667BE71C876B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 154A
Signing time: Mon 02 Mar 2026 00:01:01 +0000
Manifest this update: Mon 02 Mar 2026 00:01:01 +0000
Manifest next update: Tue 03 Mar 2026 00:01:01 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: fPr/elvrtZt2c+Ksi2NQOdcONeuTu2Ygcu/+C/PrpfU=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:28:e6:55:b4:37:f3:7d:43:66:7b:e7:1c:87:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Mar 2 00:01:01 2026 GMT
Not After : Mar 3 00:01:01 2026 GMT
Subject: CN=2a4f4d1ee0fa31cda0435d71c0be2d4e8ba48cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:ba:fc:cf:71:3e:ac:50:8a:92:3d:83:e0:
27:23:4e:3c:58:12:ba:9b:d5:a0:5b:b2:7e:a5:fe:
05:3d:65:00:27:7c:4e:07:5a:60:d9:50:55:86:0c:
e4:33:f1:78:e1:26:58:e6:35:00:e3:44:ba:13:f5:
29:c9:a2:ab:c8:9d:f4:0c:ff:4f:e3:86:df:cf:ed:
09:ab:90:4f:e6:f2:c6:51:e7:f8:75:41:f8:63:5e:
3c:f4:48:d2:92:1b:d6:f9:63:48:76:b4:a1:3c:70:
53:d4:44:e7:f1:4b:f7:75:bc:90:8c:77:29:8a:6b:
0f:ee:11:9e:35:b5:20:3a:f6:92:ab:05:7a:8e:b4:
aa:7d:56:02:14:ad:7a:ee:b3:44:a0:5f:4c:e7:73:
59:86:81:9e:51:9b:a9:20:5a:12:41:03:84:6e:c4:
11:cc:56:43:8d:bc:d2:de:2e:40:8b:8c:6f:48:80:
8b:a8:0c:76:26:a8:bd:9a:7f:b1:7e:36:75:a7:42:
1d:95:4f:c7:e9:71:9f:3c:1b:5e:14:c6:48:f6:6a:
0e:3c:43:65:e2:ac:3e:87:60:65:98:2b:9a:e9:9f:
15:c7:b3:34:c3:54:3d:5d:67:f4:fa:90:07:0d:97:
b1:10:80:d3:e0:57:22:e1:c7:b9:19:9a:76:4d:9d:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4F:4D:1E:E0:FA:31:CD:A0:43:5D:71:C0:BE:2D:4E:8B:A4:8C:EF
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a6:3b:f6:49:5c:66:b9:60:26:f3:65:26:3f:e9:10:e8:90:
1e:b5:d3:64:09:dc:f7:be:23:fe:80:4b:24:2b:ff:94:c1:ab:
20:1e:bc:68:51:74:18:e3:96:29:b7:15:24:72:e2:46:b5:cf:
84:db:ad:24:67:f1:03:e7:47:d2:0b:f7:24:c5:1d:c7:ed:eb:
45:57:ad:79:55:8a:1e:30:be:01:3e:db:93:8c:62:29:9e:35:
e0:49:ea:17:98:da:51:b4:9a:d8:2b:65:e1:97:c9:0a:7b:fc:
f7:c8:bd:0a:6a:8c:83:2d:71:99:92:e4:07:4a:0c:7e:71:15:
a6:83:00:69:5d:5a:df:45:82:a4:f7:df:87:de:81:84:1f:97:
35:ac:4a:19:00:bf:51:0f:0e:81:92:3c:12:28:fe:14:40:31:
68:98:4a:d5:e6:f3:48:6e:dc:80:09:7d:61:6f:d1:60:87:88:
fd:7c:46:d6:d8:db:0c:da:3d:26:6c:3e:25:f1:d7:fb:e7:bc:
3b:a0:e5:15:b8:84:b3:a7:cb:49:9d:e7:1e:08:69:e2:1a:ff:
c4:79:8a:42:c7:8c:e6:a7:90:ca:2e:7f:c1:8a:80:ab:73:89:
87:d2:f0:e6:97:06:eb:7f:97:ee:53:e6:92:8a:fb:6f:7e:a2:
1f:07:12:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:27 2026 by rpki-client