Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: 9yhhe8lEh66vJrojlGCNvdyaNMXv+n8HZG0MxhvQk3M=
Subject key identifier: 01:D8:1A:B1:D2:1A:60:2E:9C:33:58:F2:A8:18:0E:84:BA:64:D5:49
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 019CAAC678DBB001D164DDB5E38E52E896FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: 4OtylCmVUOQ1YUFtglhWgqf0IYA.roa (hash: WWTOLHqEiZ6EYrBZLenBHdV2VidIQmH+ASGlD1/87NA=)
2: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: bDlMGJs23C/RYO1ohg5F91CoHmwgCGLoZj8sMnVs5bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:78:db:b0:01:d1:64:dd:b5:e3:8e:52:e8:96:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=01d81ab1d21a602e9c3358f2a8180e84ba64d549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:cb:19:61:21:c0:d5:cd:db:e0:90:56:d6:
bf:40:ea:9a:0f:92:92:09:f4:f6:6e:0f:ac:00:4c:
6d:84:18:90:20:68:ca:5d:c7:29:4e:0a:b0:51:b3:
9f:7c:63:46:6e:b7:99:16:ed:5f:77:6c:90:0a:51:
79:27:4c:99:2e:f9:c1:c0:01:dd:52:ca:cf:2f:de:
51:5e:2d:68:97:63:32:19:6b:38:32:f5:14:81:2a:
e3:d2:28:53:bb:4d:d1:71:cb:2d:81:d9:61:d7:97:
91:38:ff:19:85:13:d7:f9:9e:37:9b:f9:fd:f3:ed:
54:dd:c9:28:ea:48:15:2e:36:6f:53:b0:6f:ac:bf:
6d:51:ef:a7:e4:61:06:68:31:df:81:2d:80:55:25:
c6:81:2c:ac:7b:74:02:63:d2:71:e0:37:6a:29:2c:
8a:30:61:bc:1c:af:64:22:fb:12:a4:1b:26:5c:f9:
74:e6:76:2a:7b:55:a0:fa:d3:cd:8c:95:b4:b4:5c:
1a:8e:c1:a9:bb:31:a4:43:d3:a4:37:6b:0a:a6:12:
44:6f:46:b8:1e:96:38:ee:56:0c:74:34:7c:26:45:
86:00:bf:2f:a1:92:be:04:9b:db:04:d1:b6:e7:31:
c0:83:b4:17:6b:7e:32:a7:86:f7:c4:3a:df:f4:67:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:1A:B1:D2:1A:60:2E:9C:33:58:F2:A8:18:0E:84:BA:64:D5:49
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c1:23:fd:b0:92:25:b5:bd:bd:90:23:0e:54:49:c8:a9:1d:
24:7b:1e:45:b6:cc:f3:e5:d0:6c:e0:d6:d5:cf:c0:c2:04:f5:
f1:9a:c8:85:d6:d1:53:f0:4a:75:f7:6c:90:01:c7:72:e9:f2:
3b:8d:90:8d:bb:12:be:f8:a2:f8:43:8c:32:4b:fd:39:95:8f:
5c:b0:a5:95:cc:cf:ea:b7:20:ad:3e:a6:5d:be:f4:5b:fb:63:
12:e6:19:ee:f1:33:9c:6d:af:55:af:39:4d:27:bb:cd:57:fb:
5e:84:74:05:80:18:f2:32:fa:1a:d8:72:cc:99:af:b8:89:76:
1c:07:5d:e4:91:2a:da:f1:9a:05:fa:57:b8:ea:5b:d6:a5:10:
f1:3e:f8:67:f8:27:05:4a:29:0c:24:20:4f:2e:a6:ff:c3:32:
df:55:48:fb:34:af:a8:db:2c:eb:e8:87:f3:ae:5f:f3:ce:0b:
33:ed:68:46:7e:be:55:1c:50:7c:b9:f1:56:1b:2e:57:26:bc:
6f:6d:b9:3a:be:fc:b6:00:8f:e1:2e:34:19:6d:f5:89:0f:8b:
8b:e3:17:cd:36:ab:21:cf:63:63:2d:13:26:d1:42:30:d8:35:
02:6e:de:d5:e3:df:28:eb:b5:4c:d9:2b:e8:0e:b3:6a:23:c6:
e2:0e:ae:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:47 2026 by rpki-client