Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: Kn2j5tfCWOhr9StxcT3KPqCkTOHZQCCfw24K0Gga8Kw=
Subject key identifier: B4:94:9E:AD:9D:00:39:00:63:BB:9B:21:63:8F:1D:95:22:C1:43:97
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 019CAD90A10F4A73597647F776CDE377567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 08:01:02 +0000
Manifest this update: Mon 02 Mar 2026 08:01:02 +0000
Manifest next update: Tue 03 Mar 2026 08:01:02 +0000
Files and hashes: 1: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: xoVbIpcLrKvYKNz9cSTUGknNXXDb77o7VilFs8n1xW8=)
2: Tfq0-Nhgv3VBbk9n3Vq4GI4iE_0.roa (hash: /bnj20jmvQ1RfURsnTm2hkQVvQm8WHvC5U4MWvcKmj0=)
3: UeUxs8O7BQG0PZAERCcpvW9oGJU.roa (hash: RA/5tda8Js/MvHGINkhN95bDFA6hSRU7RaQvgqea3Ts=)
4: u8pBAQ-Z3p2H9WD6gzLyx7OKtRM.roa (hash: oA/e5+fvQLLxtw5lvTdOJVbmZhfodYNiZ+D6A/AnOCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a1:0f:4a:73:59:76:47:f7:76:cd:e3:77:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Mar 2 08:01:02 2026 GMT
Not After : Mar 3 08:01:02 2026 GMT
Subject: CN=b4949ead9d00390063bb9b21638f1d9522c14397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:1c:ae:82:db:1d:71:57:24:d5:68:3d:c2:
93:a6:d4:c4:ba:c2:43:3d:cf:1e:ca:85:29:51:37:
44:30:62:30:3f:3a:d3:5f:e3:52:18:55:d7:15:16:
e0:47:bd:d2:e6:0d:1a:e4:cf:f4:38:bd:97:db:0a:
f6:0d:28:45:08:1e:28:d7:fe:ec:05:83:a6:c2:dc:
f2:fe:b5:8d:df:48:ea:fb:09:35:72:55:77:95:b0:
36:cf:00:78:97:bc:28:b6:5a:60:40:5a:cb:85:14:
3e:84:13:ac:a5:86:cb:b0:76:48:51:0d:a3:f3:05:
6f:8f:c3:8c:39:3b:e6:94:c7:56:4b:a1:be:0f:08:
62:ea:c0:bb:f7:b7:3f:dc:5a:4c:0a:f4:93:7a:c0:
3b:e6:77:ea:bf:d9:53:16:63:f2:77:e8:82:18:7f:
9e:31:ff:f5:c0:ba:68:de:89:ba:b8:5d:d7:a6:9a:
d4:15:4e:8c:fb:15:e8:7f:6d:95:b4:de:93:1b:70:
66:f8:c2:da:f0:20:22:f8:7c:6d:e9:69:96:c5:f5:
9e:68:30:00:76:07:ce:b3:da:89:7d:17:63:df:e9:
1c:2b:ad:3d:4a:04:5b:82:64:f5:8e:fb:16:ac:35:
54:11:32:07:2d:2c:3f:cd:80:81:8f:b4:f4:d1:9e:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:94:9E:AD:9D:00:39:00:63:BB:9B:21:63:8F:1D:95:22:C1:43:97
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:64:ef:87:20:a3:3c:dc:5a:dc:ed:05:82:af:27:bb:5d:ff:
3b:5f:b3:35:2c:47:45:c3:6d:f7:06:7a:28:80:4b:60:aa:fb:
a9:d8:88:0e:96:7b:e1:9b:6d:3f:d7:b5:93:88:ef:60:1e:ad:
0f:e3:bd:23:4c:73:56:1d:e2:35:f8:7d:cc:23:02:d6:88:25:
0f:3b:26:00:fa:72:66:e0:9b:94:17:71:5e:e2:4c:ac:24:26:
18:23:c9:b0:a5:db:2a:68:66:6c:40:80:92:41:b8:f9:fa:33:
25:e1:d3:59:15:45:72:d1:00:4e:dd:36:4d:0a:e7:04:06:4f:
73:8f:0d:89:d9:0e:9d:ef:dc:09:16:dc:06:b8:90:dd:97:46:
dc:c4:52:10:46:f7:70:36:3b:7c:b6:b9:37:a5:bb:72:bd:a1:
5c:13:00:c0:bc:03:48:44:16:98:41:0e:37:4e:4b:7b:f5:6f:
40:b3:95:ec:0f:0c:8e:ed:90:ad:de:0f:d8:ac:7c:ad:06:58:
cb:26:41:7a:51:ee:e5:2b:0d:32:43:f0:96:cd:52:3e:d1:0a:
93:35:f2:1b:40:90:7e:82:3d:c6:09:14:51:11:63:5b:28:48:
2d:83:18:5d:61:68:82:a8:9f:78:c8:cb:8f:d6:76:c3:83:6f:
6d:81:68:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:16 2026 by rpki-client