Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: DMUlzXs7S0U2XxJGcCMMi/hwEk8J61ahBFYY8V9Gf4s=
Subject key identifier: D6:99:DD:4F:01:38:DD:5A:CE:94:46:2F:1C:FB:1F:25:42:9E:92:70
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 019CAAFCFE8BA4F9A09EB096526A161532D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1857
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: 8WhTqwvj7TDxbKG-QDRYuHQKXL4.roa (hash: t/Oe6Qxn1Q8l5QIgdUYlJOyiuVrQkJMwXy5rbKbKUCY=)
2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: X/jUA1SXZIJ0vcn62foJRUdgQCdyYC/6UxvQ1GJz0Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:8b:a4:f9:a0:9e:b0:96:52:6a:16:15:32:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=d699dd4f0138dd5ace94462f1cfb1f25429e9270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:e3:f3:c1:7c:01:33:00:70:18:e5:eb:31:
04:99:50:83:99:3d:af:20:19:81:8a:2c:52:3e:7c:
87:29:61:96:00:0c:49:d4:fa:a0:aa:01:35:59:3c:
34:da:cc:53:05:1c:20:70:aa:8b:c9:57:1f:a8:c7:
80:70:f4:30:b6:f9:8d:79:1e:f7:4d:2c:30:08:6f:
ea:db:c1:d1:eb:70:29:52:34:c5:7d:0b:90:fd:36:
f9:19:1c:3b:6e:36:e5:86:77:7f:b7:c4:e3:2a:15:
4f:a6:ad:ce:64:87:d2:b7:38:93:dd:36:e8:51:87:
d2:91:13:d8:a5:68:76:00:df:ef:76:9c:58:a0:f6:
37:59:01:88:37:b6:6a:5b:a5:dc:97:db:49:a6:45:
e0:e0:f2:d7:a0:33:40:9b:e9:f7:ec:ab:a0:aa:9c:
8e:d1:c1:83:69:bb:89:d6:52:ac:de:38:15:75:00:
2b:d5:59:43:c4:d8:ad:97:eb:29:e2:62:e2:b8:39:
11:1e:46:c8:28:d0:e3:ad:af:15:2e:45:0d:26:54:
71:00:6b:dd:d8:58:d0:f2:a8:0d:e2:76:04:ce:ee:
34:02:b9:cd:09:98:5f:83:fd:56:4f:64:b4:1f:e5:
b6:2c:a5:bc:8e:15:a0:bc:11:2d:c2:b8:cd:ac:a1:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:99:DD:4F:01:38:DD:5A:CE:94:46:2F:1C:FB:1F:25:42:9E:92:70
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:82:c4:af:61:c7:09:43:ce:4d:00:92:2a:58:c1:25:9d:1e:
d4:2d:db:33:69:9d:7b:a3:f9:70:50:7e:76:71:d4:d4:b2:f5:
7b:16:68:c6:36:8f:cb:67:4c:12:2f:b5:2c:3c:03:c9:99:6c:
9a:af:61:7b:81:8a:6d:4b:55:f0:94:9f:23:91:77:01:80:8c:
16:fb:6c:21:8e:ff:37:ab:d7:4c:f8:50:3f:f8:7b:ff:2c:3e:
ce:d8:3f:e5:c3:8c:cf:a9:68:f3:1c:74:50:9c:92:83:98:72:
40:ca:87:3d:93:27:8e:51:44:16:85:dd:2d:20:8c:f0:83:76:
a3:af:84:70:16:20:fb:46:d9:a7:62:f0:b0:1d:e6:fa:60:18:
25:96:85:9e:73:bb:90:2f:a2:9d:a1:d2:85:42:20:40:5c:71:
fb:98:26:7b:8f:b4:f2:51:81:52:08:0f:86:ff:94:c7:cd:a7:
85:d5:7a:7d:73:a1:1d:9b:bc:90:03:c0:c7:d8:a1:fb:fe:e0:
54:f0:85:dd:7b:4e:a0:58:5e:f1:8b:21:62:35:40:79:53:22:
22:9c:73:de:77:a9:07:15:8b:73:6c:38:78:3c:e2:c6:6a:96:
eb:0e:65:f0:f7:08:58:ab:cc:2b:bd:e6:6f:d7:23:b6:ef:ee:
36:c8:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:51 2026 by rpki-client