Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
File: I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft (raw, json)
Hash identifier: MBW8JP3RED5slZktlaWoTQ3NLo1ZZDythcVAcVqGxks=
Subject key identifier: D3:0A:27:AD:04:54:13:A9:6E:07:AE:EA:22:3E:6A:F0:A8:A3:F6:10
Authority key identifier: 23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
Certificate issuer: /CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Certificate serial: 019CA7FCFCA1BCBC15E0C17B7AC9CE455B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
Manifest number: 0390
Signing time: Sun 01 Mar 2026 06:01:40 +0000
Manifest this update: Sun 01 Mar 2026 06:01:40 +0000
Manifest next update: Mon 02 Mar 2026 06:01:40 +0000
Files and hashes: 1: 69-gm5sAHUb2zlkusSsJwnhPOtw.asa (hash: w8dP42z3PzlgsL7213s07oZP842qzAir4wVoWzTTHUs=)
2: 9CS7xyErSCJY_wQFDW0wV1rIDq0.roa (hash: e2yWbh2yduLvhGO9ZZhdKHXEB8OOHqP7OQbj14TpHIU=)
3: I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl (hash: G9ZxE04y4umLtIY+CJ9R1o8dmowWZWilUonrM4ePJxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:fc:a1:bc:bc:15:e0:c1:7b:7a:c9:ce:45:5b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2384674ea007a12030ac8d2be560db21f4fc0b99
Validity
Not Before: Mar 1 06:01:40 2026 GMT
Not After : Mar 2 06:01:40 2026 GMT
Subject: CN=d30a27ad045413a96e07aeea223e6af0a8a3f610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:df:88:74:d6:4d:4f:3f:ef:9f:73:bf:77:
83:fc:47:01:dd:70:66:f0:4c:93:06:ac:8f:ff:42:
15:07:39:00:5c:8d:b4:bb:b8:1c:09:a1:6d:8e:75:
f8:31:83:2b:f8:19:08:7d:20:d0:57:59:3f:be:26:
78:8a:5f:2e:ae:37:97:a6:0d:c7:4a:d0:a8:47:50:
b9:c9:a8:d5:3c:dd:e5:ab:cb:11:c2:ab:38:90:db:
f1:a0:df:72:8d:16:e9:20:8a:96:4a:e1:5d:29:12:
fb:9a:22:f5:d0:d9:df:64:3c:c7:9b:86:4d:a0:af:
aa:20:31:b2:f6:d0:cd:38:e2:29:a9:aa:7e:01:08:
93:58:38:ef:64:cd:de:0d:72:9c:eb:00:68:f5:45:
8d:54:50:6b:fc:7a:5c:2e:af:50:1b:db:20:ff:0a:
4a:ad:03:d0:75:21:cf:87:ae:d6:27:49:01:c5:23:
fe:fb:80:d5:2a:c7:e5:b7:82:4b:97:50:b9:9e:b9:
4d:bb:cb:34:00:56:9b:e3:60:eb:34:e0:b7:be:b4:
f9:3b:ef:8c:28:6d:97:8c:3d:0c:36:87:09:0b:6e:
65:02:34:11:56:71:fb:0f:ae:73:25:b6:fd:e6:76:
10:de:35:03:d9:e7:94:e8:42:6e:ce:e0:3a:3a:1b:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0A:27:AD:04:54:13:A9:6E:07:AE:EA:22:3E:6A:F0:A8:A3:F6:10
X509v3 Authority Key Identifier:
keyid:23:84:67:4E:A0:07:A1:20:30:AC:8D:2B:E5:60:DB:21:F4:FC:0B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4RnTqAHoSAwrI0r5WDbIfT8C5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4b9a4c-802d-4b1e-94fe-c8f56c122fec/1/I4RnTqAHoSAwrI0r5WDbIfT8C5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7f:b3:5c:4a:28:c2:f8:96:cd:21:67:bf:0e:43:38:78:52:
4e:d8:12:d5:cd:d4:63:58:f7:c0:34:2f:1e:c2:9b:5f:4e:aa:
5a:31:2e:f0:bd:f7:8c:a4:71:eb:86:80:1b:96:29:c8:03:22:
87:a7:f7:28:f1:1d:77:d7:ec:3b:dc:c6:ad:f9:ab:5d:7d:01:
89:ef:3f:35:39:2b:c9:d7:5f:14:00:ff:50:6b:81:59:de:a5:
f3:8c:37:c4:33:f0:3c:2d:3a:9b:a1:d9:ee:8e:6e:aa:d3:96:
71:06:54:95:18:10:5e:30:fc:4e:13:f4:44:32:b5:d6:51:0f:
b9:5f:f6:ed:53:fe:66:9f:be:96:68:a1:32:11:b8:00:56:13:
e4:63:87:e5:bb:df:45:33:8d:d0:41:dc:aa:1a:c2:f2:b8:b8:
d4:24:87:b5:2b:37:61:09:47:19:b8:7f:6d:70:1f:a3:a9:28:
d4:b1:cc:88:34:12:e1:fb:72:ec:27:77:02:92:20:e0:ee:03:
9a:32:57:b8:a1:ff:18:08:0b:ab:33:2f:dd:de:40:91:2b:67:
97:61:d3:a3:84:19:e0:c4:4f:54:fa:2f:40:2e:8a:51:48:29:
ba:3d:9f:48:55:58:2b:13:65:7f:26:dd:c3:7b:29:a2:5c:12:
fa:f5:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:43 2026 by rpki-client