Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier: d6Y/hFuEVK6/jqrjC0Obak5E8qT/o8drr9m3he6mIjU=
Subject key identifier: BC:EC:5E:B7:2D:F8:0A:DE:7C:47:7D:F4:FA:D9:53:8B:24:C6:4F:45
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 019CABA21C6AACE78DDB2521E6A92C1612D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: GaBZnyykt2dc7umJKECSsBY98pmFxm8HaDg+2lj1zeQ=)
2: l4SU9ie-aQFv3GaUgFkeH-xOaF8.roa (hash: PgarAlr827N/WHoU/7cGPWG2WCkz6pZoVQE96jRVrBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1c:6a:ac:e7:8d:db:25:21:e6:a9:2c:16:12:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=bcec5eb72df80ade7c477df4fad9538b24c64f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:d1:c4:00:04:d8:34:d4:ed:26:0f:dc:e3:
25:13:29:dc:81:a2:7e:f8:46:3d:49:26:56:04:84:
37:fe:9a:ba:6b:80:94:bf:4b:3e:74:d7:34:18:26:
67:e5:87:6b:ef:eb:b2:8d:2e:ec:dc:00:ce:96:b7:
f6:63:48:e0:73:a0:ba:46:1d:c8:00:f7:45:cf:20:
9a:72:0e:35:0f:bc:1c:fa:6a:ad:1a:1a:04:d8:a3:
2f:40:35:38:ac:4e:a7:c2:2b:58:1f:ba:f5:4b:19:
b4:ab:1a:3b:99:18:3a:c5:cc:fe:33:ab:7b:a7:a7:
fb:ee:5e:56:bb:02:5a:e0:19:98:87:8e:ce:17:f0:
02:bd:ef:2c:52:4a:37:bc:ec:f3:8c:8f:a0:86:8f:
20:35:6d:df:9f:e8:85:0c:29:d3:bf:09:41:31:7a:
62:02:43:82:ef:52:da:6a:13:49:72:7a:89:f3:83:
ee:09:79:62:b7:57:e5:1e:a2:fa:ce:e0:38:34:c5:
a0:02:ac:bc:98:77:f4:8e:34:67:f8:08:de:9d:6e:
ff:ed:67:ce:52:86:a6:bc:51:c4:6a:56:c3:f4:67:
68:eb:b5:3d:c9:c3:77:2b:00:dd:be:09:f0:60:ce:
08:47:1b:43:2a:e0:50:56:c7:6a:86:f8:2d:fb:a4:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:5E:B7:2D:F8:0A:DE:7C:47:7D:F4:FA:D9:53:8B:24:C6:4F:45
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:42:08:e2:7f:58:92:13:a7:49:5f:89:38:17:f4:fc:df:97:
8f:b0:69:41:0d:e8:f5:64:59:cc:a6:da:74:06:ee:9c:0d:7d:
1a:4a:4d:a1:ca:b4:94:03:a1:fd:2f:8f:61:ae:74:9e:89:c2:
e3:90:87:62:b6:aa:d1:c2:9c:fe:9d:d5:1e:99:d2:85:fb:2d:
d0:d6:35:55:c4:7c:be:74:a9:54:ae:c1:9d:ec:30:40:e8:51:
36:69:fa:20:c1:e1:65:fd:a5:5d:9f:c0:a8:bb:e3:f5:08:88:
7b:21:73:ae:2f:00:f1:f2:19:44:fe:08:7d:05:04:48:36:94:
83:75:01:05:f8:b4:e5:8a:ac:cc:ac:a5:d0:ae:07:c7:e5:98:
95:3c:e1:92:dd:36:09:03:ee:e7:c3:7a:a1:3f:7d:76:8c:88:
0d:19:75:0a:94:aa:91:7b:56:70:4b:7b:ac:8d:5d:08:2c:bd:
8a:c2:22:3a:65:56:0f:58:88:36:f7:b6:04:bf:8f:9c:42:cc:
8b:b5:36:2d:27:b3:94:2b:a9:20:ea:89:10:6b:9f:ff:d4:1b:
5e:5b:e0:49:ac:59:29:a8:80:93:59:99:ba:7e:5d:f6:7c:00:
e7:26:af:00:13:6e:33:67:08:69:70:63:88:22:ae:80:1f:fa:
33:48:25:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrohxqrOeN2yUh5qksFhLSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDM0ZGQzZDIxMWU1YzJlYTdiZDJmNTI3YTEzZTFlOTk2
ODIwZWMwHhcNMjYwMzAxMjMwMDUzWhcNMjYwMzAyMjMwMDUzWjAzMTEwLwYDVQQD
EyhiY2VjNWViNzJkZjgwYWRlN2M0NzdkZjRmYWQ5NTM4YjI0YzY0ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHnRxAAE2DTU7SYP3OMlEyncgaJ+
+EY9SSZWBIQ3/pq6a4CUv0s+dNc0GCZn5Ydr7+uyjS7s3ADOlrf2Y0jgc6C6Rh3I
APdFzyCacg41D7wc+mqtGhoE2KMvQDU4rE6nwitYH7r1Sxm0qxo7mRg6xcz+M6t7
p6f77l5WuwJa4BmYh47OF/ACve8sUko3vOzzjI+gho8gNW3fn+iFDCnTvwlBMXpi
AkOC71LaahNJcnqJ84PuCXlit1flHqL6zuA4NMWgAqy8mHf0jjRn+AjenW7/7WfO
UoamvFHEalbD9Gdo67U9ycN3KwDdvgnwYM4IRxtDKuBQVsdqhvgt+6QQQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzsXrct+ArefEd99PrZU4skxk9FMB8GA1UdIwQY
MBaAFCPTTdPSEeXC6nvS9SehPh6ZaCDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQt
ZmU2NzFjMWQ1MTUwLzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzJjMDQtNTlmNi00ZjIyLWI3YmQtZmU2NzFjMWQ1MTUw
LzEvSTlOTjA5SVI1Y0xxZTlMMUo2RS1IcGxvSU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEII4n9Y
khOnSV+JOBf0/N+Xj7BpQQ3o9WRZzKbadAbunA19GkpNocq0lAOh/S+PYa50nonC
45CHYraq0cKc/p3VHpnShfst0NY1VcR8vnSpVK7BnewwQOhRNmn6IMHhZf2lXZ/A
qLvj9QiIeyFzri8A8fIZRP4IfQUESDaUg3UBBfi05YqszKyl0K4Hx+WYlTzhkt02
CQPu58N6oT99doyIDRl1CpSqkXtWcEt7rI1dCCy9isIiOmVWD1iINve2BL+PnELM
i7U2LSezlCupIOqJEGuf/9QbXlvgSaxZKaiAk1mZun5d9nwA5yavABNuM2cIaXBj
iCKugB/6M0glHQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:23 2026 by rpki-client