Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: BIVrmtdib5BufdMLvRAEpIZvd3+ShBTVkOgb2LJERHI=
Subject key identifier: 9A:B8:37:89:E1:0A:DB:1A:D2:2A:25:43:3F:D9:95:81:1B:02:44:4E
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 019CAD599559F060BF4E98123587459FF4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 07:00:55 +0000
Manifest this update: Mon 02 Mar 2026 07:00:55 +0000
Manifest next update: Tue 03 Mar 2026 07:00:55 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: mSIVjDgWfu/0SxLD+ka217IIOLYxym+pTWwfbvO/SJE=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:95:59:f0:60:bf:4e:98:12:35:87:45:9f:f4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Mar 2 07:00:55 2026 GMT
Not After : Mar 3 07:00:55 2026 GMT
Subject: CN=9ab83789e10adb1ad22a25433fd995811b02444e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:46:e2:29:ec:b9:64:3a:52:a1:ac:87:4d:
87:01:77:ea:ba:00:60:d2:5e:f1:47:0a:73:9d:18:
19:18:1b:89:dd:d8:f7:d4:67:23:63:5a:21:cf:08:
1b:5a:8a:24:19:11:7e:fe:9d:1a:6f:6c:a2:cf:0b:
8c:22:65:c2:25:09:71:a5:18:1a:0c:b4:57:59:f9:
6d:2f:00:86:4b:18:83:48:5e:ef:cb:3c:85:2e:96:
a6:20:c6:e6:46:f9:e0:c9:94:c0:ad:b8:67:87:fb:
30:f2:71:b5:2a:66:53:11:a3:e4:e2:b1:cb:e1:eb:
ed:6b:dc:87:a6:5c:13:75:9e:b4:c3:f3:f8:0c:21:
b4:ef:d9:1d:f0:9d:90:3e:fc:12:9d:f5:88:1a:d3:
d8:e2:a6:48:5e:6a:f9:9c:04:d8:86:b3:4c:b5:51:
fd:a6:96:53:0f:7e:c3:86:40:8a:b7:ac:56:fe:cc:
4d:b9:65:66:86:6a:32:6d:a0:f2:95:31:f4:b6:9a:
af:d7:1c:51:a5:15:7a:d5:6c:f4:90:72:73:fd:47:
2f:be:b9:90:fd:71:2a:1e:5b:3d:28:08:ce:88:79:
7b:25:7e:35:2a:11:6d:be:a4:10:21:2c:1d:7f:45:
32:cd:ad:16:de:7e:64:16:4c:da:9c:01:58:15:eb:
4b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B8:37:89:E1:0A:DB:1A:D2:2A:25:43:3F:D9:95:81:1B:02:44:4E
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ed:3a:99:5e:14:27:9a:8c:f0:b7:9f:2c:b6:85:81:c0:5d:
15:02:69:b1:53:7f:90:3c:3f:4c:b7:5d:f7:f1:2e:f3:b3:2e:
c9:76:19:ff:0a:a6:36:49:b7:87:6e:f0:7e:c4:6b:5f:d1:4c:
53:ee:0b:31:61:7d:1e:46:5b:ef:23:50:9e:cf:0a:07:85:65:
f5:1f:ec:2a:7d:58:94:a1:ee:15:16:f0:0e:22:d1:47:ff:50:
4b:b4:51:07:ea:f9:f6:db:35:27:34:ec:f3:11:d9:d3:4a:39:
a0:d4:e5:1e:f6:5a:9e:43:5e:0b:c1:10:7e:bc:13:22:b7:12:
5e:45:67:fc:03:b0:26:9d:65:bf:8b:4a:dc:68:c5:9b:70:3a:
74:aa:8b:b6:c0:5e:4b:d4:21:cb:1d:79:9b:22:9f:e2:6b:21:
f1:1d:87:43:6b:53:1d:4f:fd:b4:47:f0:12:c5:f0:78:ca:6a:
08:af:ea:e9:c1:a9:79:59:fc:01:a0:56:c9:a3:3c:29:80:d0:
ed:ec:4a:b8:1c:e0:75:3e:49:23:27:08:e3:7e:c8:4c:bc:84:
84:84:69:d7:e2:d2:af:ad:f4:0d:b1:3d:6d:e3:c9:5e:90:6d:
dc:6a:17:41:2f:a0:0d:7a:37:01:3d:4a:37:04:da:3f:4c:8a:
1f:d6:cf:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWZVZ8GC/TpgSNYdFn/SgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjFlMDlmMGU2ZWQ4OTFhZDE3ZDZjZTRhM2M3MzI4ZDc1
OWI0YzgwHhcNMjYwMzAyMDcwMDU1WhcNMjYwMzAzMDcwMDU1WjAzMTEwLwYDVQQD
Eyg5YWI4Mzc4OWUxMGFkYjFhZDIyYTI1NDMzZmQ5OTU4MTFiMDI0NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFNG4insuWQ6UqGsh02HAXfqugBg
0l7xRwpznRgZGBuJ3dj31GcjY1ohzwgbWookGRF+/p0ab2yizwuMImXCJQlxpRga
DLRXWfltLwCGSxiDSF7vyzyFLpamIMbmRvngyZTArbhnh/sw8nG1KmZTEaPk4rHL
4evta9yHplwTdZ60w/P4DCG079kd8J2QPvwSnfWIGtPY4qZIXmr5nATYhrNMtVH9
ppZTD37DhkCKt6xW/sxNuWVmhmoybaDylTH0tpqv1xxRpRV61Wz0kHJz/UcvvrmQ
/XEqHls9KAjOiHl7JX41KhFtvqQQISwdf0Uyza0W3n5kFkzanAFYFetLLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJq4N4nhCtsa0iolQz/ZlYEbAkROMB8GA1UdIwQY
MBaAFCPx4J8ObtiRrRfWzko8cyjXWbTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTkt
MmRkY2Y1NmE3NjNlLzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTktMmRkY2Y1NmE3NjNl
LzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+06mV4U
J5qM8LefLLaFgcBdFQJpsVN/kDw/TLdd9/Eu87MuyXYZ/wqmNkm3h27wfsRrX9FM
U+4LMWF9HkZb7yNQns8KB4Vl9R/sKn1YlKHuFRbwDiLRR/9QS7RRB+r59ts1JzTs
8xHZ00o5oNTlHvZankNeC8EQfrwTIrcSXkVn/AOwJp1lv4tK3GjFm3A6dKqLtsBe
S9Qhyx15myKf4msh8R2HQ2tTHU/9tEfwEsXweMpqCK/q6cGpeVn8AaBWyaM8KYDQ
7exKuBzgdT5JIycI437ITLyEhIRp1+LSr630DbE9bePJXpBt3GoXQS+gDXo3AT1K
NwTaP0yKH9bP2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:53 2026 by rpki-client