Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: +gTqFe0MKmY963W4htKiGdiI8EQFdMuvDBKpM2v0tHA=
Subject key identifier: 4D:88:9C:5A:6C:1E:2F:6E:06:9D:F7:57:23:33:1F:2D:69:B3:AF:89
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019CAC4718F5406B44CD91B7A9AEC0C4B718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 06D3
Signing time: Mon 02 Mar 2026 02:01:06 +0000
Manifest this update: Mon 02 Mar 2026 02:01:06 +0000
Manifest next update: Tue 03 Mar 2026 02:01:06 +0000
Files and hashes: 1: 2MeX37cZHGHHuxJtj1E28ddzIsI.roa (hash: LZd2fssCxVZOERqVCoqkBsBn4xYtLG5cKZGv8FiTdNw=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: jFHC6QdvY7AQUv2HxDY1PvqRoGzGO+vrN9tvPiWuUjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:18:f5:40:6b:44:cd:91:b7:a9:ae:c0:c4:b7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Mar 2 02:01:06 2026 GMT
Not After : Mar 3 02:01:06 2026 GMT
Subject: CN=4d889c5a6c1e2f6e069df75723331f2d69b3af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:3a:d7:7a:11:a1:5a:81:3c:ca:70:40:46:
0b:99:4e:b9:ed:f7:ce:fe:eb:f8:16:ac:b3:27:5e:
91:89:7a:d3:c3:49:92:5c:b1:d7:f5:68:cb:52:fb:
e8:9f:6b:2c:c9:ff:9c:b3:4f:a1:6d:0a:0b:d1:22:
3f:7a:7c:d4:95:64:43:74:ae:5d:77:04:d1:2e:b7:
c2:f6:7b:81:36:59:d2:e2:aa:9d:13:d1:90:af:30:
83:6a:1b:8b:81:ab:7d:4e:4f:01:d7:c3:b6:4e:29:
a9:65:58:14:87:b5:cc:9a:f8:6d:30:cc:b0:9c:0b:
96:ec:06:73:ac:3b:d6:b0:c2:6c:dc:9b:b4:de:78:
3a:a3:84:0f:2b:6d:50:e5:40:1e:d9:fb:96:44:3c:
4a:18:23:4d:ee:2d:8f:1a:82:bf:b7:fe:03:c9:19:
63:ec:4f:4a:ad:f5:79:20:44:c5:91:b8:9a:a8:00:
38:71:11:e4:3d:db:7e:f5:7b:51:5e:67:58:b2:1f:
42:fb:31:76:e3:5d:15:ed:c5:6e:af:7b:1c:36:8a:
7f:0a:10:59:14:c2:2b:f8:af:64:01:88:bd:42:ce:
cc:d9:7c:b1:77:6d:b2:2c:fb:18:58:43:30:4e:92:
30:5c:cb:d7:70:bd:ba:14:cb:87:94:cb:c0:2b:66:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:9C:5A:6C:1E:2F:6E:06:9D:F7:57:23:33:1F:2D:69:B3:AF:89
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:35:a6:d5:e9:48:3d:b6:d5:08:79:e0:57:a6:d8:b2:8a:
d0:bc:d7:bb:48:f0:48:85:f7:28:18:4e:37:9a:b3:87:eb:a1:
1a:6a:f8:f3:e5:33:01:ae:23:24:ab:45:7b:d3:08:e9:37:75:
0e:68:9d:ef:2b:0e:53:93:6f:76:b0:40:3c:95:22:01:0b:e6:
8c:de:9b:94:7c:5a:81:52:ab:8a:fe:60:c6:f0:d9:59:8a:4e:
ad:96:53:39:27:b5:c1:11:cd:80:77:81:75:d5:01:e9:aa:22:
c3:78:d2:f7:c1:c3:69:48:b6:9c:c2:fb:0d:d3:dc:66:bb:d4:
cf:ce:48:ed:8e:43:37:c2:67:8d:c6:ff:3a:6d:ae:8a:af:4e:
58:87:72:e3:bd:0a:ed:cd:3f:2d:c9:c7:f1:da:99:8d:c2:b3:
c2:05:be:8b:b8:a3:09:f6:bc:f6:7b:2e:18:9c:0e:94:26:78:
7c:30:a6:77:5b:41:c0:6d:7d:30:83:c0:97:49:de:9d:91:5c:
ff:5a:bc:0a:1b:64:e1:21:6a:5a:4d:16:88:a8:fe:11:35:49:
f8:59:7b:5d:91:93:29:b8:1b:3b:1b:72:65:e4:71:e2:ba:75:
44:a3:98:15:3f:e7:cd:08:69:6e:d9:46:a8:c0:91:5d:e8:35:
7a:0c:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:17 2026 by rpki-client