Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: E0n4yFTjQut3izjlw3IZy8UkDl6WSETcHfS3Pm15MNY=
Subject key identifier: 61:25:26:70:67:22:7B:A6:AE:F4:68:4A:DE:AF:3F:BF:69:74:66:03
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019CABD8FACE8B272EF7AE101DB2A77A9099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: U1uKokkWWjRi501zTKrh3XHF8Y8KXI6VPyFtZEUJntY=)
2: fPLmAT9sBKzZTI5avOrmP_4azzE.roa (hash: n1zSR4IBSvIZaMH2EehZjIUkwdVdlUzRvizvkmneFGQ=)
3: kv-wz_H1IkgiuMYCGj0bpRh0nLE.roa (hash: Uy297jSuY0TxK5aeIM5g0jUPcIVpmb6oF+UG7zwW9lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fa:ce:8b:27:2e:f7:ae:10:1d:b2:a7:7a:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=6125267067227ba6aef4684adeaf3fbf69746603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:9b:78:be:f0:2d:61:8c:95:af:2b:f4:c1:
3f:b5:f5:15:1c:73:a9:de:06:dd:f8:a8:85:39:50:
f6:80:ef:21:3f:40:dd:7f:ca:0c:a7:dc:75:18:be:
df:77:8b:ea:a8:50:67:64:35:fb:a8:d0:d2:d7:4d:
14:4a:60:ff:19:45:ac:6b:ed:68:a7:3a:fc:38:9f:
04:a7:17:fb:1b:98:ef:58:7b:55:6e:c0:60:5a:78:
d6:aa:4b:00:88:27:ca:7f:b4:e0:8a:e9:16:eb:08:
d7:53:1d:1d:68:e7:21:9a:4a:bb:a0:ef:f0:b0:5b:
81:0c:d6:ec:a4:72:dd:f9:5f:49:5e:d4:94:b1:a0:
33:9c:dc:3f:37:e9:b3:ea:07:d7:7a:e6:38:e9:d4:
31:1f:73:bb:7f:bb:96:1f:7c:93:25:aa:55:1e:d5:
6e:ab:e2:c9:ca:21:38:94:83:20:08:ab:95:0c:3f:
83:2e:67:4e:2c:4e:62:d5:43:a7:60:76:d0:bf:bd:
12:47:f8:a4:4f:8e:ad:19:99:b5:d2:5b:71:a6:59:
5c:b5:9d:88:6d:7c:30:cc:d7:16:d6:40:c6:e7:99:
6b:d8:a1:df:33:be:ac:a9:c1:67:a8:d0:ea:21:c4:
06:f3:ca:1c:31:21:cd:ef:82:26:b8:d6:3b:32:b3:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:26:70:67:22:7B:A6:AE:F4:68:4A:DE:AF:3F:BF:69:74:66:03
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:67:68:b7:7b:1d:3b:4b:fd:69:a7:33:d7:70:1e:0a:6f:27:
2c:c6:b1:5b:b8:87:46:e1:65:46:48:93:de:9b:e8:48:3f:e7:
2b:62:82:12:80:28:83:77:15:5f:0d:6e:57:64:e2:a6:0f:c8:
c2:0a:17:7f:54:4c:38:90:b0:36:2f:fe:64:e4:ac:57:f5:79:
b6:31:f0:cd:da:a5:d1:ff:96:04:4a:cc:2f:e3:3b:b7:96:2e:
69:01:9b:62:e4:3b:89:03:d4:9b:41:81:75:3c:a1:eb:7b:80:
ee:5c:aa:e7:3b:60:2c:10:90:7d:72:3c:7b:5d:d8:85:78:c9:
0d:ab:aa:5e:72:49:ef:27:1e:cb:b2:dc:7b:f3:a9:f1:e2:1b:
fe:94:f6:ad:65:fe:5d:32:20:6b:65:04:09:3e:5d:e6:ad:1d:
79:a7:ae:a0:55:fd:2c:8e:16:1b:c1:d6:f6:07:1b:45:4c:22:
2d:3e:d1:09:62:19:d9:01:6f:07:81:c0:d5:80:5c:e1:4a:10:
9a:34:51:20:a7:38:ec:55:07:41:49:c9:0d:ba:cc:7a:bc:d7:
84:c4:4e:44:6c:60:53:96:8f:31:9f:11:41:18:41:e4:dc:a6:
75:17:05:72:5f:e7:4a:e4:83:96:71:a1:6b:95:73:79:7f:f3:
43:1e:ee:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:10 2026 by rpki-client