Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: yslsHk+oxa61blNU9wh0YDzZrMBd9CIi4sCpfgxL0MI=
Subject key identifier: 5B:C6:72:4C:70:C8:0D:F9:6E:7D:BA:5B:48:C4:81:1C:29:95:68:76
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 019CABD90C656A614E99464BF0C5425FC4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0540
Signing time: Mon 02 Mar 2026 00:00:54 +0000
Manifest this update: Mon 02 Mar 2026 00:00:54 +0000
Manifest next update: Tue 03 Mar 2026 00:00:54 +0000
Files and hashes: 1: DLPawj2OgKUwkgMYVqxK640ZM5M.roa (hash: j4U5ZtGc0iAMwMjKy2gODe5wP1RecXvOyD9/RnVr/+s=)
2: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: xObyyIfo8b9jTULeXGxpVwxenGVqPUKKHtmHeW/TUjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:0c:65:6a:61:4e:99:46:4b:f0:c5:42:5f:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Mar 2 00:00:54 2026 GMT
Not After : Mar 3 00:00:54 2026 GMT
Subject: CN=5bc6724c70c80df96e7dba5b48c4811c29956876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:f5:2b:90:4d:81:89:1a:74:5f:fd:12:4d:
09:2b:41:88:94:6a:3a:c9:b6:8f:1d:30:32:3b:95:
55:77:1b:f9:c9:cb:75:75:11:43:bf:d6:f5:e6:e2:
71:7f:c4:3f:62:7e:68:ae:fb:73:6d:7d:47:e1:0c:
0a:15:6c:d9:50:24:72:ba:0d:da:26:34:85:9e:ad:
07:ce:81:ae:d8:d2:d6:89:1c:cd:72:0d:0e:46:38:
3a:01:70:47:c3:bc:55:ce:e6:97:2b:2c:b8:42:96:
3e:d2:91:e4:7a:4d:a8:9c:df:35:e4:af:f6:a2:c3:
3e:6b:cd:fd:fd:ac:09:3a:b3:a0:0b:1e:fd:bc:5d:
c9:4b:c5:e9:bd:51:74:c8:13:a8:a8:4e:d7:dd:be:
49:56:76:f9:44:91:61:7e:d7:cd:2a:c2:48:ff:94:
84:45:b6:7e:ed:60:49:12:ab:bf:63:d5:f0:97:97:
e6:46:ec:90:4c:a5:4c:43:52:88:f1:6c:7d:72:c2:
0f:c4:9d:ff:88:30:85:2a:89:6b:f8:17:09:3d:cb:
d4:8b:c6:5d:c8:e5:f1:78:9a:33:a1:c0:83:27:e4:
d4:e5:16:45:6d:21:f0:b3:e6:c6:55:4d:43:30:ae:
ce:1c:08:14:91:f1:fa:69:eb:5c:2c:00:fa:f9:c6:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:72:4C:70:C8:0D:F9:6E:7D:BA:5B:48:C4:81:1C:29:95:68:76
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:99:c5:41:f4:82:f2:bc:20:32:a8:9a:3e:e0:15:70:1d:6e:
87:d6:20:9e:4d:f4:e0:fe:b6:92:29:81:e7:a0:4f:2a:9b:1b:
dd:00:5c:07:cb:c6:03:3c:f1:8b:57:29:ef:d1:df:d6:d4:22:
44:38:af:6f:b9:b4:51:78:51:1c:f7:c7:75:68:de:23:57:96:
8f:44:eb:f8:a8:62:b7:47:21:66:fd:12:2d:e7:09:a5:73:2c:
fb:30:32:51:2e:ce:88:b8:2a:87:43:90:15:5f:7f:73:e0:85:
92:8e:80:25:39:aa:20:04:37:4c:fd:4c:80:e9:fe:ae:bc:41:
7c:77:86:37:46:c4:10:27:1e:bf:4e:05:12:32:97:29:32:6d:
b1:01:39:02:b0:2f:40:86:a1:58:0d:10:8a:e5:64:b6:c8:ab:
e7:25:d9:6b:51:7e:0b:9b:73:ab:f3:d4:1c:a8:47:2c:9c:61:
b5:5f:54:01:60:54:71:7a:23:8b:7a:10:f9:1f:e3:bc:fd:dc:
3b:8a:33:c8:b7:94:d4:3e:f7:e3:cb:63:e6:8d:41:e5:54:b8:
b8:69:c6:18:03:98:3b:24:69:a9:28:1c:9a:11:4b:74:92:a2:
92:f0:4b:df:3c:6f:7a:1c:44:fe:b1:ea:ee:bb:bd:d4:a0:c7:
48:dc:08:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:35:25 2026 by rpki-client