Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier: 7bUzE1QT0pJ3k3DWMqs3R1U+3WL9a3f5YwI+dr9UCFs=
Subject key identifier: F6:31:9A:F4:FD:45:55:C6:76:2A:D4:51:1A:2B:F9:96:5E:23:E6:49
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 019CAAC691B14A9494F6315A1894F8C1A94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: GedRRSUg9rDAjqHWiQ/thMAgyVgk67HE69yzQ4qF3C8=)
2: MTOjup8y1UXD0CJugetRyShLlFM.roa (hash: did6Im7PvxOeWT+FnqE9v3BCYzUp9wbU09/sziP8S8g=)
3: y2dvaW9BE_hgA52pK6ndrIlUQD8.roa (hash: 8aYMWWwaNFDI51SXRVa0hNzXB/57zeHnGU+/Ox3JcPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:91:b1:4a:94:94:f6:31:5a:18:94:f8:c1:a9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=f6319af4fd4555c6762ad4511a2bf9965e23e649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:4e:92:4a:f0:26:fc:df:4b:9a:38:c3:70:
7f:15:12:58:80:2b:24:2e:6c:2c:f2:89:98:db:2a:
7c:31:7e:40:8b:c1:83:f5:ed:5f:42:6d:f0:a0:5e:
46:7e:5b:58:41:15:d5:fd:8e:87:39:d2:61:3b:f4:
23:a7:9c:a5:c2:34:2e:a3:34:df:b4:b5:ea:45:f9:
2d:93:7c:f9:a8:47:82:ec:88:74:c1:d4:76:a9:10:
d6:7f:27:88:9e:1a:47:9c:e2:e7:44:d7:f7:29:e0:
0b:ef:e8:d5:99:11:16:23:40:bc:a3:cd:a6:f5:db:
5e:d1:40:91:b2:fa:c6:3b:e0:15:6f:5f:ee:f0:d1:
39:65:6a:2e:d2:d2:9a:d1:1f:5f:cb:8f:ea:3a:8d:
b6:9b:b6:81:03:9c:58:74:fd:17:ce:be:23:d5:78:
23:df:e7:46:df:65:cd:2c:11:1a:fc:75:bf:52:d2:
26:c0:9c:51:13:b0:12:33:60:d5:13:d3:07:c9:dd:
59:20:e2:14:dd:55:8d:d8:e3:53:46:dc:bb:96:e8:
b0:56:5d:81:43:59:4b:b6:4b:fc:2a:66:a8:b9:94:
74:93:e3:6c:1c:c3:70:04:dd:c8:45:0d:12:2b:2f:
bb:95:d9:cd:04:a2:a6:10:7a:e9:87:a5:9e:c5:d4:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:31:9A:F4:FD:45:55:C6:76:2A:D4:51:1A:2B:F9:96:5E:23:E6:49
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bd:3f:56:03:b5:e1:f2:33:c7:44:43:51:62:a0:88:6c:86:
99:81:b3:cf:5c:5d:6a:61:ef:b2:1c:c6:3d:31:77:81:3d:29:
37:32:b0:6b:a0:9e:66:1b:fc:10:ca:d3:9d:52:8b:52:ef:48:
f3:b8:4d:46:91:bd:67:60:51:da:db:01:7a:42:d1:5a:e2:62:
1d:c2:21:bd:cf:3a:fb:b4:30:b6:7d:11:17:c9:9e:38:1e:48:
bb:9b:98:99:b4:a7:63:0f:95:01:e5:53:61:d1:38:4c:30:60:
61:8a:a9:5c:4e:cf:2f:61:99:87:28:d5:80:b4:f7:4d:79:bf:
19:07:68:90:2d:08:ec:19:df:52:db:bb:29:3e:40:f9:06:ab:
36:2d:be:4c:54:5a:f0:50:ac:38:1e:28:88:2d:c6:61:f7:16:
8c:64:4a:34:07:bf:f1:48:a7:87:f6:32:85:ba:d2:12:4e:91:
28:9e:77:dd:aa:45:6d:16:3a:86:37:fc:2a:c0:db:b3:58:89:
b7:a3:5a:b4:38:f0:28:1c:c1:f7:51:8b:49:4d:0e:48:26:5f:
ea:e4:5f:cc:7e:d4:2d:21:72:ac:81:0e:ae:33:1e:66:c0:43:
28:e7:b8:d9:50:61:8f:9a:d1:4a:e8:28:9d:b8:9e:f4:e1:1e:
99:a9:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:30 2026 by rpki-client