Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
File: I--d4hUq7xsqYqMfsvNehZCzrYQ.mft (raw, json)
Hash identifier: dhf/qYMbJtW83vEc48f6qyR8QsB2ApnhoD4jAnH371g=
Subject key identifier: 2E:43:84:45:02:CE:D9:98:22:A4:A1:E0:38:7B:14:1D:89:C3:CB:9D
Authority key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Certificate issuer: /CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Certificate serial: 019CAC0FC92F5DB5CED1AC7C63B8D7056EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
Manifest number: 0897
Signing time: Mon 02 Mar 2026 01:00:41 +0000
Manifest this update: Mon 02 Mar 2026 01:00:41 +0000
Manifest next update: Tue 03 Mar 2026 01:00:41 +0000
Files and hashes: 1: I--d4hUq7xsqYqMfsvNehZCzrYQ.crl (hash: 0oDw1vLCQpPEBARoBTY1rrW2v0UgYFQKSfTDoZvH0Hs=)
2: c3qGT-HlNIbOpWOWtGq8wzGlzo8.roa (hash: dkOdUS1B4RLrr1wGef0PpA8JuUzSKd3BvzN3ojn4kHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c9:2f:5d:b5:ce:d1:ac:7c:63:b8:d7:05:6e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Validity
Not Before: Mar 2 01:00:41 2026 GMT
Not After : Mar 3 01:00:41 2026 GMT
Subject: CN=2e43844502ced99822a4a1e0387b141d89c3cb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:7e:23:7a:b1:01:61:29:ad:d8:09:b9:17:
95:73:1d:92:a6:37:54:d1:b6:35:1a:15:cf:5a:cc:
99:1d:25:a1:dc:3c:56:50:bb:2d:90:50:37:d3:60:
50:8d:76:95:e2:e4:f0:c0:12:6a:00:f6:0b:f3:2a:
e4:fc:54:14:6b:c7:ca:00:bb:3a:84:18:6f:29:77:
3e:57:b1:70:90:eb:9d:27:09:72:2d:9b:e8:3a:6d:
32:d8:c1:1b:cf:c7:91:fd:f5:2c:35:fd:92:96:96:
8f:e8:de:e9:a4:b5:a6:1a:7d:c1:06:7b:2c:c9:e9:
74:5b:65:3d:40:e4:a3:a7:8f:dd:d2:43:9a:1a:92:
26:36:d8:ce:a2:97:75:ef:24:d8:00:83:d7:dd:82:
89:48:0c:38:c0:dd:9c:2b:91:40:22:aa:01:62:fe:
f5:5a:f1:87:a9:22:3b:80:c5:1e:ed:91:bd:0c:36:
dc:14:b2:3a:9b:4a:2e:65:51:c8:ea:35:36:26:4a:
53:0b:e4:cc:ab:6c:12:c0:ad:a9:b1:e8:21:b9:b2:
a8:ce:eb:20:01:6e:d1:9d:d3:e2:43:49:1d:bf:73:
05:6f:73:d7:ba:67:b9:2f:d8:3d:88:0d:63:e6:b9:
71:fe:be:a3:17:7a:a7:e6:07:73:11:4e:ad:dc:20:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:43:84:45:02:CE:D9:98:22:A4:A1:E0:38:7B:14:1D:89:C3:CB:9D
X509v3 Authority Key Identifier:
keyid:23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:1d:77:0a:15:38:54:ba:23:b9:3a:4b:b9:4b:48:94:69:
47:d3:c6:0f:8f:b9:e2:f5:eb:7a:5f:e9:c6:b0:bb:d7:a3:38:
89:87:97:69:f1:c3:a9:ca:f8:21:b5:f0:d1:65:49:97:e3:ff:
b3:e5:4c:ad:91:ed:0d:9f:6d:9c:3a:a7:20:28:a8:54:76:92:
a7:af:08:29:57:c5:ba:15:b4:e3:f6:0f:d6:ff:ed:8c:43:2b:
f0:af:80:91:f3:ee:56:50:8a:e1:46:db:12:0a:1e:64:e8:b1:
42:45:a8:da:d1:ee:bf:34:25:64:ee:1c:88:23:25:d8:49:12:
3d:4f:0b:2a:97:1a:2b:56:4f:ce:d0:c1:1b:2b:92:4c:3a:00:
73:0d:29:b1:d6:cb:e7:a2:2a:26:64:8f:c0:a9:83:ee:1e:21:
31:73:e2:16:d5:5f:8d:20:1c:49:5b:df:17:07:e7:1f:ee:20:
f0:5e:52:3b:12:d7:61:aa:35:10:8b:26:53:5d:54:2b:fc:cc:
4d:5e:d3:05:05:7c:17:b0:08:42:9f:47:68:76:52:0d:76:46:
df:59:bc:28:db:da:63:8f:ff:a7:b9:21:fe:ff:46:db:d9:13:
5c:4f:4f:bc:b6:d4:29:ce:1d:eb:fc:40:ea:a4:7b:ee:6b:08:
f4:92:5d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:24 2026 by rpki-client