Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: 5A3C9pfqU/9Z/G/7FHg8bumn3889SCtfDeBo3jQshfc=
Subject key identifier: 1F:85:10:E5:24:31:D7:B7:54:C6:99:29:37:C3:1A:2B:70:DC:E4:D7
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 019CABD912FD3942B7F9762940BFBF93A6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 158B
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: agIksqVyuon6IwFGeAQMoRf4ZqKsR86apcD44Uw4gOg=)
2: JYCsV2i5N2HKe8jWnVBbskEk35g.roa (hash: bJ+6gtzP1kZJb4K84CU9VOHZvtsvVD/JCSadOrdU128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:12:fd:39:42:b7:f9:76:29:40:bf:bf:93:a6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=1f8510e52431d7b754c6992937c31a2b70dce4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:77:f2:70:74:89:11:51:a3:1f:67:f6:ab:
58:b2:a6:78:3d:b9:3d:3c:5b:87:b7:59:e2:65:ac:
cd:be:49:6b:12:fa:2a:ae:1d:2d:7c:18:90:7e:c2:
7e:74:fe:70:ad:3a:29:b0:71:85:89:82:47:6d:a3:
01:db:86:9d:cc:41:32:81:a3:1c:64:3d:b1:5c:06:
cf:85:ca:62:4c:7d:eb:ff:4d:41:85:a6:cb:71:29:
9f:46:cf:1f:fe:f5:f7:6a:1c:3e:44:cc:72:b9:ef:
c6:1e:6f:30:6b:f8:61:cd:09:b7:5a:5b:61:23:45:
72:b0:b6:ce:5c:fd:fe:89:4d:ec:29:dd:cf:6c:3b:
16:4c:66:c1:31:76:0b:db:6d:03:01:22:04:5b:e8:
99:27:38:22:3f:18:91:9f:58:ac:e7:7f:06:e5:0f:
f9:6a:4a:85:21:b1:0e:e8:0c:e7:9b:1e:6e:d4:4d:
81:b3:51:09:cf:db:96:3d:10:84:23:2c:41:19:e4:
45:f0:51:ad:63:40:12:0b:2d:e7:57:5a:0f:cf:b2:
54:d0:e9:db:08:1e:84:f0:8a:fd:de:c1:b6:6b:b4:
9b:23:df:57:5c:a8:d9:5b:db:7a:03:ee:e4:97:ed:
2a:3b:e2:97:16:1b:5e:ee:75:cb:dd:cc:01:b9:78:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:85:10:E5:24:31:D7:B7:54:C6:99:29:37:C3:1A:2B:70:DC:E4:D7
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f6:de:9b:d4:0f:95:c6:c7:3a:f7:32:b9:49:82:55:4a:23:
7a:f1:9d:71:5c:c6:63:fa:07:17:55:a8:aa:81:b2:bc:06:a8:
71:12:54:26:9e:a9:fe:6f:ba:01:83:24:1c:bd:d6:98:e3:14:
76:b4:de:7c:43:d0:80:33:4b:2d:6b:b1:55:c8:eb:f1:29:a0:
a8:d5:1b:be:b9:75:f7:98:90:c3:f2:ce:6d:ed:04:82:68:a7:
18:60:27:71:e3:20:c9:6e:20:8b:1e:24:2e:46:89:71:e2:65:
fa:bd:b8:f9:fd:e5:e4:a1:16:99:b8:96:83:17:00:4c:46:48:
0c:2f:dc:f7:77:16:2d:26:ba:37:df:e3:cb:bc:a6:00:b4:94:
af:86:dc:1e:21:c4:7d:f6:78:7a:e7:12:ef:3b:78:4a:70:7c:
b0:59:d8:35:a6:7f:ce:f1:79:ad:ca:66:78:2d:65:4a:e6:2e:
8e:75:9d:2e:30:6b:e3:10:25:e0:ce:55:98:ea:c4:88:3f:e4:
e6:6a:e2:f4:4e:7d:f0:87:91:17:a8:d1:2d:c9:8d:1f:8b:3d:
7d:17:ae:90:3b:a8:eb:7b:a6:88:b6:51:ea:f2:6b:69:9c:6f:
c7:b6:98:84:3c:f6:3d:44:c5:69:d7:2a:0b:e9:c7:8d:2a:11:
4d:3b:d1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:38 2026 by rpki-client