Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: namRSkChh/MH7As1r/OoGtZ+kSa+/BskeqMGCrKXktY=
Subject key identifier: 87:40:C5:BA:53:90:F2:C8:4B:E8:DA:EC:7F:97:AA:5B:96:95:5C:CA
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019CABD99A75D1CCC3FFE6D281D41A57FE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0675
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: ReYuRGqP1WRrzh_ImF48CcDJ3RI.roa (hash: ufYZ4Au1+4D7CL0qz6B/FUig9GN1b/FI0Eb2tprJPcI=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: rbMCkPhjIwQ0319IXDB64/OgevzinxaW3TMOZSieUPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9a:75:d1:cc:c3:ff:e6:d2:81:d4:1a:57:fe:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=8740c5ba5390f2c84be8daec7f97aa5b96955cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:10:09:b5:2f:b6:b8:e0:b4:76:2d:c5:64:
bb:4d:0d:1c:60:83:3c:aa:d3:4b:40:d4:be:b8:c9:
95:b0:eb:35:d2:03:2f:7d:56:e0:68:94:91:f5:1f:
a9:0c:83:c2:d4:63:30:c9:17:4f:f4:81:d9:45:56:
26:a3:08:64:0b:02:38:fa:95:d2:9a:0a:6f:07:28:
f1:5a:36:3f:ce:96:95:35:dd:60:db:3e:a3:b0:6d:
ac:86:48:95:78:10:f9:07:12:06:7b:37:47:72:49:
50:8d:c9:33:30:3c:ef:17:76:d3:fe:83:bb:0e:b3:
2a:fa:03:46:07:67:9b:0d:e1:97:10:72:e8:a8:40:
b9:d0:1d:99:57:c5:4f:ce:2a:53:b8:ce:92:5f:e5:
87:2f:31:9c:02:f3:ba:13:45:1f:f2:89:4b:86:3a:
25:93:f2:ff:aa:f3:21:d4:22:37:13:13:30:ac:73:
5b:14:1a:cf:8a:c9:72:17:fa:bf:1a:b6:4d:a8:d6:
3b:a2:9b:0f:69:1a:55:11:22:6b:db:47:2f:ba:87:
75:91:ec:69:05:e3:8f:5f:f7:8a:70:50:93:17:1a:
86:f5:f9:28:a6:a5:ac:1b:8a:d3:50:ce:7b:9f:77:
f0:eb:6f:4e:07:4e:4a:bc:1f:86:e5:6b:14:81:0c:
f7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:40:C5:BA:53:90:F2:C8:4B:E8:DA:EC:7F:97:AA:5B:96:95:5C:CA
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2e:17:45:49:e4:7e:b8:4e:08:55:89:bd:98:0d:4d:a1:5b:
f4:58:2e:d5:6e:8d:96:be:5a:db:fc:82:46:9d:34:d1:f4:27:
95:67:29:42:48:e1:09:d3:2e:52:96:91:4f:2c:a8:18:3f:a9:
60:44:f3:4d:ea:00:d4:32:5f:6a:da:87:e1:bc:1c:70:a1:59:
72:2f:f9:5d:23:7c:7e:07:c0:a4:bf:97:ed:47:b9:b6:97:5e:
48:81:35:32:42:71:06:01:9b:17:a2:3b:4f:ec:ec:3c:b9:bf:
ae:9b:43:94:e1:58:db:c1:b8:a3:f5:d2:4d:a6:9d:02:b6:65:
15:46:d9:2b:cd:a8:15:a7:e7:2a:13:ae:66:06:4a:58:3a:b6:
ea:8c:d8:ac:aa:de:6f:51:db:39:e8:bb:32:c6:a9:28:d6:0e:
8f:d0:38:7e:ad:e0:a4:89:d5:52:94:7f:fc:3c:5e:ce:fb:fa:
d7:76:cc:db:95:cf:38:b1:41:03:9f:d1:78:b4:05:06:ca:4f:
5e:6d:60:6d:50:2c:43:46:fc:07:3f:ed:04:da:d5:90:3e:d7:
32:8c:13:84:35:05:fd:89:3f:82:8a:2b:5e:4f:cd:37:8b:c4:
9e:c5:d2:65:cd:6e:04:86:3d:7d:94:9e:4e:5a:2c:2d:41:d7:
7a:02:7b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:22 2026 by rpki-client