Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: 3BD3+WD9AOz6dsKmjJ2GTwNqDuefxiRuffK98x+RZkE=
Subject key identifier: BD:C8:E5:88:C7:EC:45:53:B5:1F:60:70:1E:1E:1A:1C:5B:7D:78:43
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 019CAD22CAE5BC6F205945FE00C1766D4200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 06:01:04 +0000
Manifest this update: Mon 02 Mar 2026 06:01:04 +0000
Manifest next update: Tue 03 Mar 2026 06:01:04 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: rzwKoNKkkNIdGcVJsdaTFNng/Whjgv7C1exuOfmcykY=)
2: MkZDnhBWSDVFNPdTIbLySY13AZo.roa (hash: G0tZaVek6hHuGJJA8eubBZEIhMXdNUS6nfdqgnLslHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:ca:e5:bc:6f:20:59:45:fe:00:c1:76:6d:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Mar 2 06:01:04 2026 GMT
Not After : Mar 3 06:01:04 2026 GMT
Subject: CN=bdc8e588c7ec4553b51f60701e1e1a1c5b7d7843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:c2:51:70:c4:ab:b1:d1:9d:0d:6b:7d:d1:
f0:81:ab:a5:8b:76:c7:a8:26:8f:3d:bd:fc:f7:c5:
b0:5c:55:06:c0:88:50:5a:ae:fc:e6:d8:17:44:b1:
e4:1b:8a:52:07:0b:63:30:8a:40:e1:b6:53:7a:b1:
1b:ec:9b:8d:4b:c1:2c:fe:4b:ac:f2:a8:ed:df:88:
cd:f4:5d:1e:0a:0d:a0:75:12:8b:a8:cb:d5:ba:04:
e8:cb:05:25:00:0a:5b:b0:47:5c:c1:13:f3:61:2a:
87:ce:7d:e2:53:28:fc:d1:f1:b3:c0:5f:f0:df:52:
da:9a:93:af:d7:2a:2e:e2:5a:25:7b:ad:96:25:d8:
4c:e2:02:38:4d:78:ee:04:64:dd:81:19:57:2e:32:
0c:4f:ed:82:42:7d:fa:dc:7e:b0:e9:ef:91:20:10:
a7:4a:77:09:35:08:a1:78:78:48:c6:cf:ce:45:ba:
db:d1:0e:1d:25:3a:22:dc:fc:9c:83:24:c0:2b:5d:
f9:10:33:91:36:28:f6:25:f5:6e:ef:f5:9a:cb:a3:
f5:ef:1d:32:79:3e:33:9b:d2:71:cc:fa:49:9f:4a:
1b:1e:00:38:40:7b:a2:9f:70:f3:59:0d:bc:a0:b4:
54:80:f7:3e:1c:4f:80:b2:37:e1:b3:46:45:13:5d:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:E5:88:C7:EC:45:53:B5:1F:60:70:1E:1E:1A:1C:5B:7D:78:43
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:49:bf:a8:b3:bc:95:2b:85:e1:a0:3b:7d:79:25:e9:38:39:
bf:db:be:6b:04:47:25:98:f8:8f:6d:23:69:72:e7:07:58:e0:
35:3d:30:fe:e5:0f:29:45:35:75:14:17:7a:53:54:02:2d:27:
62:e3:22:85:38:29:24:77:29:3e:72:54:c1:21:cb:54:51:50:
41:e1:f0:c2:13:82:f8:a4:35:35:87:3d:62:80:73:34:0f:2e:
ac:60:fe:52:79:a8:ab:71:37:e2:5a:f1:17:ad:32:2f:3a:f6:
b3:ff:26:61:4b:04:27:de:14:06:fb:b8:9f:2a:70:89:28:c5:
a0:64:3d:a1:4f:38:3f:e8:35:3f:37:14:f8:29:29:e9:f3:5f:
bf:1b:39:30:ad:f2:ad:1b:25:2b:59:67:f7:f0:aa:7c:8d:80:
d4:8a:c6:10:c6:21:40:8b:ac:3f:21:49:76:ee:40:c5:c6:82:
e0:ad:61:e0:75:d8:6d:2b:1b:72:95:bf:23:ec:70:a2:f3:f3:
da:02:45:7d:7b:20:c1:87:90:3a:83:21:d6:b2:ab:b8:df:a7:
68:5f:73:57:24:36:e0:b8:23:ef:8b:d9:e5:26:1c:9b:19:e0:
7d:e0:a4:20:5e:17:53:27:d9:52:cc:3a:58:f8:0a:e7:bd:7d:
f1:ba:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:20 2026 by rpki-client