Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: lUl+zbjVZQQchjXBk3IoLv4NTPBTXPde478BMadhBD0=
Subject key identifier: 18:34:B1:03:C1:9C:B7:0A:72:E5:F6:C5:44:E2:BA:E3:2E:18:8E:72
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019CAB349A5AAFC348F862FA4D7132AEBCBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 01F4
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: q/14b5poTFoZCnmcvRCwzIxUZKTGyDyjvNvJNjZKeWo=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9a:5a:af:c3:48:f8:62:fa:4d:71:32:ae:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=1834b103c19cb70a72e5f6c544e2bae32e188e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:87:d5:5d:e2:a4:13:e1:04:da:a4:d4:7d:9c:
39:0e:5d:21:60:90:98:18:40:26:bd:a2:20:b2:49:
eb:43:2f:9d:ac:68:ec:53:63:9d:c0:75:98:3c:e3:
22:51:8c:13:6d:86:d3:60:80:bf:f5:03:09:fc:7a:
53:bb:e9:7b:81:4d:52:ac:06:09:3f:a5:d5:8c:ce:
9f:05:35:f0:16:cc:9e:5e:73:a4:9b:b5:8a:74:f4:
8a:d5:48:4d:a9:d1:b6:09:5e:df:f6:1d:74:73:7c:
26:08:db:40:3d:4b:70:4f:8c:b9:8c:91:b0:02:fd:
33:d1:c1:af:3b:54:9e:15:e9:b6:ff:7d:79:7f:b4:
79:0b:ef:86:56:9e:6e:22:ad:75:09:0f:0a:2e:7c:
65:5d:7e:38:43:ce:3a:97:53:a8:af:a6:aa:58:5d:
36:4e:76:b3:e0:1b:a6:6d:74:53:b8:4d:7f:cc:c8:
0d:56:30:e0:27:65:53:71:e9:66:a1:db:6b:c1:93:
20:15:76:40:74:bf:6f:b9:d3:06:4c:19:de:93:3d:
b4:f2:51:c7:8c:2e:0f:81:ee:40:4f:c7:cc:ae:e6:
98:fe:a4:d9:63:ed:41:68:2c:c3:91:92:84:3e:e8:
b3:a9:32:00:fe:15:22:29:99:a7:94:a1:24:00:3c:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:34:B1:03:C1:9C:B7:0A:72:E5:F6:C5:44:E2:BA:E3:2E:18:8E:72
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:55:6b:7d:99:b2:8b:c8:18:67:2f:75:54:9b:bc:8c:bf:f7:
30:c2:41:58:ce:2c:83:59:3f:3e:8d:00:35:dc:ff:fa:c8:9e:
57:3d:88:4c:c0:2b:65:8a:1e:ad:d8:ab:6e:36:f6:d6:9c:9f:
1b:3e:90:48:4a:2f:db:92:df:f1:00:d4:99:2f:40:1a:c8:71:
0f:1a:8d:f1:85:c1:0c:29:a7:f3:99:78:8e:1d:d9:c4:7c:07:
29:1a:d1:c4:79:31:a7:c0:3d:6c:bc:59:15:ae:23:23:4a:8c:
6f:f9:63:6e:e0:d1:96:f9:66:3e:1b:fe:38:8d:98:6e:8a:03:
99:d7:d6:e6:6b:18:87:01:e1:85:5e:ad:89:46:4d:53:e1:ce:
ec:c0:29:a0:43:36:fa:8c:2d:c9:a2:8a:2c:9e:76:6f:3b:cb:
c8:93:61:68:7d:8d:e9:59:09:75:2b:bd:2a:ec:7d:b1:4f:5b:
e0:c0:96:fd:c3:39:08:47:60:d5:f6:9b:44:8d:a4:84:23:0c:
08:14:9c:0e:4d:29:98:79:69:bf:e4:78:10:92:6d:b4:52:ff:
23:13:c0:7b:4e:fc:b5:3a:a7:a7:b3:76:9d:5e:9b:c9:f9:c9:
df:9b:f2:78:a2:eb:59:74:31:23:1d:e7:9f:6c:22:75:2b:69:
37:ff:a2:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJpar8NI+GL6TXEyrry7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjVjMjU4NTM4MjA4NDc5MmYxM2FkMTk3MjA1ZWZkZDI3
NTJkZjIwHhcNMjYwMzAxMjEwMTE3WhcNMjYwMzAyMjEwMTE3WjAzMTEwLwYDVQQD
EygxODM0YjEwM2MxOWNiNzBhNzJlNWY2YzU0NGUyYmFlMzJlMTg4ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YfVXeKkE+EE2qTUfZw5Dl0hYJCY
GEAmvaIgsknrQy+drGjsU2OdwHWYPOMiUYwTbYbTYIC/9QMJ/HpTu+l7gU1SrAYJ
P6XVjM6fBTXwFsyeXnOkm7WKdPSK1UhNqdG2CV7f9h10c3wmCNtAPUtwT4y5jJGw
Av0z0cGvO1SeFem2/315f7R5C++GVp5uIq11CQ8KLnxlXX44Q846l1Oor6aqWF02
Tnaz4BumbXRTuE1/zMgNVjDgJ2VTcelmodtrwZMgFXZAdL9vudMGTBnekz208lHH
jC4Pge5AT8fMruaY/qTZY+1BaCzDkZKEPuizqTIA/hUiKZmnlKEkADxdpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBg0sQPBnLcKcuX2xUTiuuMuGI5yMB8GA1UdIwQY
MBaAFCP1wlhTgghHkvE60ZcgXv3SdS3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2Ut
OGZiNTI0NGJjMjU2LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mODNkMDktMzQxMy00NjUxLTk2Y2UtOGZiNTI0NGJjMjU2
LzEvSV9YQ1dGT0NDRWVTOFRyUmx5QmVfZEoxTGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVVrfZmy
i8gYZy91VJu8jL/3MMJBWM4sg1k/Po0ANdz/+sieVz2ITMArZYoerdirbjb21pyf
Gz6QSEov25Lf8QDUmS9AGshxDxqN8YXBDCmn85l4jh3ZxHwHKRrRxHkxp8A9bLxZ
Fa4jI0qMb/ljbuDRlvlmPhv+OI2YbooDmdfW5msYhwHhhV6tiUZNU+HO7MApoEM2
+owtyaKKLJ52bzvLyJNhaH2N6VkJdSu9Kux9sU9b4MCW/cM5CEdg1fabRI2khCMM
CBScDk0pmHlpv+R4EJJttFL/IxPAe078tTqnp7N2nV6byfnJ35vyeKLrWXQxIx3n
n2widStpN/+iSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:57 2026 by rpki-client