Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: hhkUbF3I6ZcaSxU+r/bIisfWe5HW1hlzBnhaWkiXtDg=
Subject key identifier: D1:48:DE:5E:BF:F0:AB:86:0E:B7:68:AD:C0:14:92:CF:0A:97:5D:F9
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019CAB33D77CF3320F1E704554EC0B5E7AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 158F
Signing time: Sun 01 Mar 2026 21:00:27 +0000
Manifest this update: Sun 01 Mar 2026 21:00:27 +0000
Manifest next update: Mon 02 Mar 2026 21:00:27 +0000
Files and hashes: 1: Hoi5HubrS2JM4URpCrK1c7GaXMQ.roa (hash: 2qPlpMqAxGq8RM4kZUoFlAIu4yJ3aJV7/ebhGgxT5AM=)
2: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: vyVSUhhggIkp+EieNYkOkg502ErHMMocFwRD7iPN6AU=)
3: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
4: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
5: XFUoCzclFOQeYVXYks0tU7yCsG8.roa (hash: qqNP4+XF6zY9ECqQp6jJ72gWY0yVXYKUvf4SGxqbqrE=)
6: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:d7:7c:f3:32:0f:1e:70:45:54:ec:0b:5e:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Mar 1 21:00:27 2026 GMT
Not After : Mar 2 21:00:27 2026 GMT
Subject: CN=d148de5ebff0ab860eb768adc01492cf0a975df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:13:eb:ce:a4:b3:f3:45:ff:79:b1:15:f1:
c2:3b:35:66:01:c7:37:9e:bf:50:1c:a5:80:91:99:
f4:13:a8:76:27:99:0c:41:86:70:58:66:03:42:0b:
10:ad:99:52:a6:2c:2c:17:1e:09:7e:03:64:a9:b4:
ee:07:f4:0b:d1:a1:e8:45:01:9b:dc:9e:2e:b6:65:
7f:b5:87:09:47:f7:b6:9e:e0:43:95:52:00:2a:48:
0e:04:2e:0a:69:bf:38:1e:10:bf:db:6f:b4:73:2c:
3b:cb:f2:eb:15:c6:21:de:21:82:6c:97:39:de:3b:
83:8c:b5:90:ff:bb:4d:9c:4b:93:37:5e:33:7b:89:
67:57:a1:37:96:7d:8d:d2:ce:74:1c:2a:32:c3:53:
89:e2:4e:35:3c:76:d0:a1:14:fe:ac:87:11:5e:1f:
5f:86:db:3c:bc:93:ad:05:0d:1b:03:dd:a3:5e:07:
da:3a:2f:b6:39:d6:d2:70:a7:68:e7:5a:9f:b3:1a:
9f:09:59:af:fe:b0:ce:80:f9:70:f2:0f:bf:fe:ae:
90:77:8f:b0:46:03:d2:57:4a:6d:c7:8c:b5:eb:8b:
05:7a:a9:32:95:77:05:99:19:ba:06:d7:59:d8:01:
63:e5:2c:5e:b9:bd:ba:dd:2b:5f:8b:33:99:be:b9:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:48:DE:5E:BF:F0:AB:86:0E:B7:68:AD:C0:14:92:CF:0A:97:5D:F9
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:10:91:08:27:0a:a5:78:9e:33:f8:57:65:ec:b3:c5:45:
b3:2e:ab:1f:26:a4:c5:63:77:d8:1f:b5:fe:e6:88:0f:27:f6:
0e:a5:8d:49:c4:9b:9a:97:34:e1:54:06:5a:4b:02:67:58:fe:
74:5a:9a:7a:3f:b1:ff:01:68:51:39:18:51:84:3e:ab:7a:78:
26:b0:07:e4:d9:e2:29:56:f3:e3:b0:a5:47:c1:51:12:55:c8:
8e:5b:2d:92:b0:98:cf:ed:56:d3:a7:ba:95:b0:f8:53:c6:f8:
60:b8:a7:f8:05:0e:f4:d1:79:a0:7b:8b:04:8e:e0:2f:d1:9d:
f7:9e:17:c8:9b:34:27:40:92:92:d0:29:d8:57:da:b7:37:a8:
7e:c7:4e:1a:82:40:a7:17:6f:c8:ad:c4:d5:b8:2e:0c:9e:bc:
89:85:68:68:bb:9a:b8:18:bb:f8:35:60:fb:74:f5:92:e0:63:
90:67:ff:cb:5c:ee:4f:49:a2:17:fc:85:83:43:c2:8d:ed:7d:
74:9a:cc:5a:8a:f4:60:7c:a9:da:97:45:b4:51:1b:3c:8e:26:
38:77:eb:63:b9:30:09:4c:56:64:43:21:8e:73:ab:6b:51:4a:
66:54:78:20:d4:9b:bd:f3:4b:28:1b:30:c3:50:51:5f:d9:74:
60:dc:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:45 2026 by rpki-client