Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: 2mdxqIFfZ9Wr6AY/aK68AryPum0wxLkn5oUXKJ77Dj0=
Subject key identifier: 2E:1A:D1:70:29:B4:15:AD:3F:5F:CF:03:7D:A3:14:92:31:B6:4B:9B
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 019CAD90632CBD43697B701C2BD9108D18C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 08:00:46 +0000
Manifest this update: Mon 02 Mar 2026 08:00:46 +0000
Manifest next update: Tue 03 Mar 2026 08:00:46 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: Pom3MqjMutfMzRFXwe+bXFLW52Zq6gTsYEZHG0rFUkI=)
2: di7BBo89yLvPzYRgI1CnXRkGKek.roa (hash: J2fGlbJBwYkKOrpnLxq93QttJnUWfvQ1tz5acXy/Cg8=)
3: jkcDTDZLfkPzj9uIRYp8UTnhwQI.roa (hash: uJEOU0bJFwdOC2+0d4gL/okHKs1T55lvZjr01PdnJqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:63:2c:bd:43:69:7b:70:1c:2b:d9:10:8d:18:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Mar 2 08:00:46 2026 GMT
Not After : Mar 3 08:00:46 2026 GMT
Subject: CN=2e1ad17029b415ad3f5fcf037da3149231b64b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:17:30:14:ef:d3:b0:50:61:9a:b0:87:af:
32:c7:5d:1a:15:6b:96:1a:bf:98:11:0a:b9:06:4d:
db:67:c5:d9:81:81:04:cc:de:d5:04:0b:30:d5:93:
da:95:85:64:97:a5:70:e2:89:b3:30:cb:3d:18:c0:
77:71:46:85:7e:39:c8:d8:83:b7:1e:c9:7d:1c:d4:
1a:04:2b:38:19:11:63:f9:8b:21:9a:08:05:79:b6:
9d:91:37:a5:c6:b9:78:f0:37:1f:cd:d0:da:c3:be:
b0:59:af:42:db:0c:ad:4a:c6:14:59:fe:87:43:04:
6e:54:fd:a9:6c:85:16:44:e1:7c:45:e2:99:f9:d3:
f3:01:b2:9c:1b:c7:04:49:00:86:0c:53:08:27:e2:
8b:22:03:25:b2:a8:63:be:2c:8e:c9:69:b7:e9:8d:
f2:59:7f:80:de:57:97:44:fb:f5:7c:af:cc:c0:c4:
d5:06:a3:82:28:0c:d9:01:4c:2a:94:59:ea:df:23:
01:a2:12:0c:5d:6f:e9:80:ba:8c:18:3a:f6:54:91:
ac:bf:f0:ac:16:85:15:93:1d:0e:02:7b:a7:6b:b0:
fd:ee:6a:9f:a2:47:aa:04:da:34:0b:7a:bf:eb:81:
80:0e:56:2c:92:0a:4b:15:81:6e:e7:16:b1:ea:fa:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:D1:70:29:B4:15:AD:3F:5F:CF:03:7D:A3:14:92:31:B6:4B:9B
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:17:30:47:51:c1:8f:3a:ac:d3:2e:f7:6b:9a:d9:2c:ac:6c:
ea:69:9a:aa:9c:f7:9c:4b:38:39:2b:fe:33:ec:49:ca:41:f9:
10:5a:24:52:97:70:cf:22:d8:73:35:da:59:56:c5:99:76:66:
4b:8c:67:2d:c0:d1:67:00:37:3a:e1:ed:1d:fa:5e:e1:86:3c:
85:61:ed:17:2f:7d:50:90:ea:ef:4e:d2:85:98:0d:ad:c9:2a:
7e:cf:fd:99:9b:20:2d:6f:f5:8d:57:dd:9c:a7:06:73:2e:ce:
db:d4:ff:9b:b9:79:27:1f:de:98:8e:5c:18:c5:50:40:c0:f6:
a0:c5:bb:7b:46:29:3d:4b:5b:b7:aa:62:aa:85:ba:aa:64:88:
d6:4c:ad:27:71:3b:75:5a:ea:2a:0f:0c:60:e6:0c:d9:72:ed:
b7:1c:de:9b:e0:13:c2:02:7a:9f:ac:03:4a:4a:0e:22:de:fa:
c6:13:74:d5:cd:e2:09:58:62:00:0a:ef:df:8c:b3:da:33:48:
33:5c:2d:7e:0e:34:8c:fa:53:32:2b:4d:e7:8f:b0:4b:6e:b9:
c5:a8:e3:cf:2a:ab:1d:ae:95:8b:91:43:1c:56:42:5b:4c:18:
cc:5e:b7:2f:f6:d7:db:25:06:ad:3b:24:8e:90:3e:20:79:fe:
93:5c:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:13 2026 by rpki-client