Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: RUN8jVc+sMgRuOo5eJC1jVC0mWkmiS3KlEH1ihMnx/Y=
Subject key identifier: 91:02:22:C2:9F:D0:F9:08:D1:98:6A:C0:4C:5B:37:2F:A5:3E:54:E1
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019CAAC682E690A3134BA6ED49D7528EB2A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0449
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: 6JgmEKDGlYfzHxrPWMbCBHvEv10.roa (hash: O2i0/jw0uO+3EKrKnGSgKnk++IC3F7+eUGLyqXW46bc=)
2: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: LLty8UeyLp2WSLGlKU02Gb4HIEimP6OXokHAkI2dSO4=)
3: w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa (hash: 034E8i64C+y8Jw/x/z2Co+QWwQMda1HQeLdB0UlAnnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:82:e6:90:a3:13:4b:a6:ed:49:d7:52:8e:b2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=910222c29fd0f908d1986ac04c5b372fa53e54e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:be:ee:f5:4f:53:46:7e:90:c8:ac:cd:f8:
6e:8c:92:e2:43:f3:0f:48:6f:13:35:09:38:76:f3:
ae:3f:f1:c2:56:d6:6c:c5:a5:4f:64:bd:a9:38:eb:
43:53:4a:7b:01:2e:bd:0c:8e:4a:b5:4e:34:c4:a9:
b6:7d:eb:51:ff:5a:44:d4:bc:6f:98:ac:ed:61:2c:
30:f7:39:36:fe:00:47:97:02:a5:61:4d:01:a4:7d:
55:2c:d0:d7:15:53:79:4d:ad:db:bf:d0:d9:a5:55:
dc:72:e9:01:67:b3:b7:48:40:26:4f:24:9a:28:f4:
1b:b6:80:e8:c1:a3:78:26:6e:4b:ef:1a:b6:8d:35:
a6:c9:10:87:e9:41:c5:f8:c3:14:e4:80:7b:d7:bc:
c2:8f:0e:26:c4:03:f3:69:f6:57:15:f7:0c:45:b6:
f3:63:b9:a6:92:76:e9:33:da:c9:37:0a:48:b9:b6:
47:5a:5b:8e:8c:39:82:9c:36:6f:96:32:3a:96:c3:
12:cc:e7:35:da:4a:c6:79:99:cb:83:5f:f9:9e:00:
9d:54:82:0f:32:c0:f0:ba:ad:c8:cb:f3:a6:34:c1:
d3:20:bf:8f:ff:3f:a8:bc:0f:dc:0e:c9:6a:a3:66:
77:32:64:59:29:82:be:45:6f:c4:ac:ba:e9:44:6e:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:22:C2:9F:D0:F9:08:D1:98:6A:C0:4C:5B:37:2F:A5:3E:54:E1
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c5:6c:53:36:78:0b:82:fa:de:ca:2f:c0:2b:1a:d5:d3:fd:
32:f8:cc:9b:04:0e:ee:88:58:1e:6a:65:ba:a8:ed:33:a6:6d:
0c:f2:cf:06:a2:53:7f:34:e8:27:e4:73:6b:9c:77:8c:ba:57:
8e:1e:4f:87:0e:24:22:53:17:79:2e:7c:7d:bb:32:07:08:35:
72:22:9b:ba:4d:51:be:49:af:0c:32:cf:c3:1a:f6:8a:40:84:
87:8a:f7:e7:7c:6f:30:ac:bd:7d:51:d7:0f:e2:b7:db:59:40:
53:1c:64:62:28:ae:f0:42:fe:a0:07:c3:9d:33:cb:c5:9b:69:
bd:b4:30:d7:db:63:5c:59:c8:6b:38:64:ae:c7:35:97:7e:f7:
4e:19:6b:47:c0:bf:d3:fb:19:12:5c:70:df:a0:dd:f7:41:f5:
d3:54:10:db:9e:9b:34:f1:3d:e0:c0:4a:94:2d:51:13:31:22:
3e:2c:db:3c:8a:fe:35:77:f7:c5:3d:ce:02:02:cd:9e:60:8f:
39:6c:ab:6c:8e:32:31:97:b2:60:fb:d1:56:73:01:ca:1f:60:
20:7b:22:85:fd:31:a8:35:4d:a7:3a:e5:52:fe:9f:40:b9:78:
11:55:48:96:c6:4e:9f:1d:de:61:17:8f:72:e0:21:5e:f3:09:
ac:bd:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:37 2026 by rpki-client