Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: IsTOnNcFmr7xzajdvuj2wJs6xKgxwyo/jkIXxlAiCEI=
Subject key identifier: C0:F2:D0:C4:2E:03:CF:5E:9D:2B:F2:FE:59:A3:1B:9D:72:24:51:D0
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019D9A3E6BB6568953A2E3771455BC1BF6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 04C5
Signing time: Fri 17 Apr 2026 07:01:15 +0000
Manifest this update: Fri 17 Apr 2026 07:01:15 +0000
Manifest next update: Sat 18 Apr 2026 07:01:15 +0000
Files and hashes: 1: 6JgmEKDGlYfzHxrPWMbCBHvEv10.roa (hash: O2i0/jw0uO+3EKrKnGSgKnk++IC3F7+eUGLyqXW46bc=)
2: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: uUypI/sZkubgF2feuT2lJsOBZPQSQY//bkXLvKHZkxY=)
3: w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa (hash: 034E8i64C+y8Jw/x/z2Co+QWwQMda1HQeLdB0UlAnnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:6b:b6:56:89:53:a2:e3:77:14:55:bc:1b:f6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Apr 17 07:01:15 2026 GMT
Not After : Apr 18 07:01:15 2026 GMT
Subject: CN=c0f2d0c42e03cf5e9d2bf2fe59a31b9d722451d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:03:d0:0c:bf:12:5a:6e:60:2b:3f:64:62:
85:29:37:e3:e3:fe:22:3d:10:78:aa:43:d9:df:36:
cc:63:d6:60:5f:77:7a:6d:b1:5c:76:c4:9f:c3:a9:
98:09:e0:cf:33:4e:c1:93:85:47:b7:c8:57:ae:31:
56:ad:c3:06:7c:13:8c:8b:25:38:54:39:1d:12:11:
dc:4d:df:27:0c:87:54:95:d3:d3:cb:93:3a:00:f9:
46:b6:99:6b:72:c1:c4:04:30:c8:0c:7e:fe:be:46:
5f:b8:e4:78:cd:ff:70:05:09:ab:25:d1:d7:8e:0c:
68:ce:61:bf:15:ab:c5:b7:b5:db:08:43:f1:0b:4d:
31:88:14:b1:ee:e7:b8:c1:db:f7:6c:a8:ad:b1:2f:
7e:45:c5:da:0f:24:fa:10:7e:02:0a:81:5a:81:71:
31:9b:c5:8b:d5:e8:f0:fb:64:de:18:60:61:cb:a9:
5a:cb:6d:45:32:60:45:95:8f:c4:16:2b:4f:0f:9c:
d9:b8:6d:43:12:b2:76:da:a6:79:ab:ec:c5:40:83:
9e:b5:6f:3f:27:a1:60:84:00:1c:44:16:b1:a2:76:
8f:d4:3b:7d:a3:f9:48:29:43:00:03:a3:06:c3:98:
62:d3:f7:03:5f:b9:37:dc:21:c3:b4:ab:02:6c:7b:
f1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:D0:C4:2E:03:CF:5E:9D:2B:F2:FE:59:A3:1B:9D:72:24:51:D0
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:71:8d:ee:a0:a3:c2:89:65:ee:e7:d2:0e:b6:7d:b5:87:
97:65:d2:92:d3:f8:4b:1d:91:24:ea:44:eb:55:1f:b4:fc:fb:
6c:d3:31:db:3e:7c:d7:37:56:d7:b2:eb:dd:b6:e6:3a:b6:39:
41:d1:6c:f5:1b:8e:82:5a:5b:ab:c2:81:ea:e0:b0:be:47:0e:
da:06:bc:fb:96:2d:8f:71:c5:7d:c1:da:b4:c9:1d:72:d5:10:
40:26:32:4e:fa:00:af:eb:3c:bd:89:e3:54:98:b5:f6:e0:a5:
68:75:75:5a:e1:41:b1:9e:af:f8:60:bc:ac:e3:3a:76:16:59:
e6:2e:50:68:1b:e7:9a:91:be:20:f0:2a:b5:f1:69:ee:54:ae:
14:4a:34:ba:90:84:34:e8:08:09:88:9c:31:88:85:a6:aa:e9:
48:dd:c4:07:6e:0a:5d:b6:3f:ad:44:a2:54:40:33:e5:9b:01:
bb:18:f7:13:2c:22:d4:08:cc:a8:28:39:64:44:0a:4a:09:a6:
ec:ff:8f:4a:43:ed:92:c3:40:65:23:8c:06:5b:60:92:b9:be:
90:92:08:4f:0d:d9:37:57:51:89:3f:b1:6b:4f:fb:33:75:e3:
97:96:14:59:7b:b9:8d:61:93:69:95:eb:d9:b7:ee:32:5a:bd:
32:7a:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:18 2026 by rpki-client