Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: PCH2MNEERTuxKQva0Rm35+5NBNjEszlPUAGdkHjGSZs=
Subject key identifier: 7B:06:4E:6C:D3:50:0F:07:AC:52:2E:9C:20:F5:8E:80:D9:7E:9A:68
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 019CAC10644BD617245D3BBDB12E3D10A238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:21 +0000
Manifest this update: Mon 02 Mar 2026 01:01:21 +0000
Manifest next update: Tue 03 Mar 2026 01:01:21 +0000
Files and hashes: 1: ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa (hash: AuLdH8lMRAM53ImTxBSwBIPLZa61IiJ7LX4/1Usrvg0=)
2: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: V6QYEHbozaqSmbEHtDNt/BJuOoSWrD81n2RL2sD4tr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:64:4b:d6:17:24:5d:3b:bd:b1:2e:3d:10:a2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Mar 2 01:01:21 2026 GMT
Not After : Mar 3 01:01:21 2026 GMT
Subject: CN=7b064e6cd3500f07ac522e9c20f58e80d97e9a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:05:09:df:0b:e4:5a:9f:92:64:ff:6a:9e:
98:73:c3:0a:34:cc:4c:22:76:3e:38:f7:73:24:ce:
40:7c:56:73:67:4f:36:59:ab:6e:52:85:e6:08:40:
ee:86:50:b5:4c:42:ed:99:6b:c2:d5:62:43:50:53:
34:c4:22:e8:df:f5:96:9e:de:d5:02:42:d4:c2:3f:
d8:bf:c0:64:5f:1b:7f:e8:96:bf:30:55:a4:60:b6:
bc:9b:e0:d6:82:7e:55:ac:d0:43:60:ba:ae:39:dc:
64:98:3f:ee:33:8c:e4:95:93:b1:b3:8e:b9:3a:55:
29:17:c6:52:23:e1:28:07:ea:d5:d8:56:83:d4:31:
eb:2b:29:0e:b7:5d:4c:d3:3a:7e:70:58:3a:9b:a4:
e2:86:93:0a:4d:13:38:3d:3c:c0:53:ba:ed:14:41:
ee:0d:cf:67:e8:fa:97:d7:c3:0c:32:90:bf:40:95:
00:2a:2e:eb:ff:36:88:38:92:45:c9:d4:c8:9e:84:
30:ed:6f:92:32:46:37:fd:e5:64:1e:32:0c:ea:21:
a2:34:b8:b2:b4:36:84:1f:74:0f:27:80:06:a8:f2:
b1:35:6f:4e:95:d4:28:88:ce:34:fc:7e:33:3e:d3:
7b:7e:81:5d:a2:c1:aa:41:5d:90:b4:3b:7f:39:57:
5a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:06:4E:6C:D3:50:0F:07:AC:52:2E:9C:20:F5:8E:80:D9:7E:9A:68
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5a:de:32:96:d7:24:5a:1a:d4:7d:e5:ce:55:ba:c7:1e:25:
f3:a2:a5:05:b8:c2:0d:94:55:f8:55:7d:97:9e:ae:22:49:e9:
bd:0a:29:b3:48:63:32:d6:78:a1:5d:1c:35:e7:37:16:81:04:
84:03:60:50:10:52:f2:8f:28:23:cf:b9:9b:92:e7:e5:da:36:
9b:86:4f:e0:12:2d:dc:ff:e0:9d:cd:a8:80:96:43:0b:a4:c3:
da:87:f5:e9:b8:c9:54:91:94:03:c6:7f:16:a2:ca:61:96:e6:
26:f8:c5:1d:3e:01:b1:d1:d7:ad:a6:68:7f:c7:37:18:a9:9c:
94:df:3e:d1:89:fb:15:91:b7:c8:25:53:97:a4:ee:55:c8:7e:
c2:3b:9f:e5:51:93:2c:16:a3:7f:e6:ac:ce:58:24:d6:c3:fb:
28:d8:5e:fb:2b:2c:52:e9:bd:be:09:28:4e:aa:4c:2b:4e:ed:
dd:02:4b:2e:70:63:04:25:ed:40:a9:00:99:a4:d5:34:5c:1b:
2f:b7:25:7c:50:89:01:d8:e2:02:22:68:30:c0:55:45:d4:b4:
e9:64:55:32:26:8a:a8:b2:8d:8e:20:b7:66:00:f4:d0:ab:74:
64:71:fb:ac:b4:a1:cd:9f:e7:af:a8:15:27:23:5b:dd:f8:f1:
c1:a2:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:24 2026 by rpki-client