Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: vvboXxEgpOXn8hrOTcdVFvpgbrexctWdQ9zAVS1HhTk=
Subject key identifier: A8:BE:39:EF:F3:64:C6:1D:C5:14:14:6C:BD:B2:4A:4E:BE:3B:D6:41
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019CACEBCFF02E13B35CEB2370D896B25DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 05:01:00 +0000
Manifest this update: Mon 02 Mar 2026 05:01:00 +0000
Manifest next update: Tue 03 Mar 2026 05:01:00 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: TN4Fp00ibOnJSe8ma8lUB3Ta7Pq8G+UusImM/El8W/Y=)
2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:cf:f0:2e:13:b3:5c:eb:23:70:d8:96:b2:5d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Mar 2 05:01:00 2026 GMT
Not After : Mar 3 05:01:00 2026 GMT
Subject: CN=a8be39eff364c61dc514146cbdb24a4ebe3bd641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:e6:06:70:72:f3:45:21:88:83:4a:f0:3c:
41:86:e7:0a:bf:7d:0b:6a:a4:93:e9:91:f6:ec:fc:
cb:12:d6:5e:35:d5:24:86:9c:56:a2:98:5f:fb:cf:
f1:5e:46:e0:1e:20:71:16:af:d1:89:52:4a:5a:3c:
59:6a:7c:33:60:e1:09:3f:a4:6a:a0:7c:63:20:34:
be:bf:57:4a:d6:06:95:06:cc:17:43:ce:ea:b5:23:
75:5c:b9:07:a2:8f:c2:09:e5:f3:7e:80:2f:c4:78:
bb:dd:1a:ff:13:e1:0a:4d:13:ef:03:3d:40:ac:b9:
bd:af:29:c4:2f:6b:71:80:a3:52:e5:86:fc:b5:f2:
eb:c7:5c:e2:40:ca:4e:c3:e3:12:04:8f:46:ba:05:
8e:ee:a3:50:53:27:73:9f:62:d3:f5:aa:ab:1a:73:
bf:b3:7e:a7:a9:e5:00:73:11:79:43:d5:3d:6d:54:
c6:d7:d5:94:26:02:96:36:6b:c1:1e:99:b3:42:61:
44:74:04:41:2c:90:e6:c0:43:70:28:c4:cd:96:79:
7f:4f:70:01:d0:99:88:56:9b:88:aa:0d:a2:e7:73:
3f:32:f6:55:ed:8a:43:46:e1:1a:81:0b:76:3f:4e:
44:a1:8b:3e:2e:2b:9a:de:4c:37:c4:ef:f4:c9:d5:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:39:EF:F3:64:C6:1D:C5:14:14:6C:BD:B2:4A:4E:BE:3B:D6:41
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:66:d9:37:64:84:10:55:f9:a0:19:48:6d:57:61:0b:cf:
57:53:45:bd:78:f6:72:b9:2b:c2:b0:26:c1:3f:8f:5d:dd:71:
bc:9b:06:03:0e:44:07:8d:ad:55:d1:7d:ed:47:13:cb:4a:2a:
e5:4b:36:2e:2e:7d:32:19:3b:6d:e6:ba:23:af:6a:4f:03:97:
6f:96:82:14:66:b0:02:ad:b5:53:69:f8:b1:77:2a:5e:22:5e:
ae:e0:cb:ec:98:1f:bc:b3:26:ab:1f:45:c9:d4:4d:ef:cf:c1:
49:b2:3e:2c:cf:1c:39:21:c8:22:c4:79:76:e0:eb:80:24:cc:
8c:9f:8e:d3:4d:51:d4:0c:4e:a3:8f:9b:7a:b4:a1:b9:26:94:
03:af:87:bf:d3:c8:ec:d2:75:c4:94:06:28:65:91:d4:16:2d:
e9:4b:df:32:40:ec:4f:38:09:92:ca:79:26:f4:8a:68:68:49:
4b:c9:3f:7e:9c:52:84:43:17:51:51:34:e8:b0:63:7f:45:0a:
58:68:38:b8:86:6b:7e:81:8f:ef:c9:c8:5a:65:72:a4:5d:c0:
41:92:c5:5b:f3:f0:8b:0e:f2:ae:ee:dd:1b:00:a1:cd:03:83:
63:d1:f4:89:ca:71:d7:70:5d:06:ed:38:cf:64:0f:d2:db:d4:
2f:95:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:33 2026 by rpki-client