Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json)
Hash identifier: YPx6lOLuC0BicBUsLxxrIE5uUYG1QbyZxOc6beQoyx0=
Subject key identifier: CC:FA:91:56:48:9A:44:A4:E0:6D:81:99:55:D8:EB:A7:F1:B3:BE:87
Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f
Certificate serial: 019D389C5E0EF661FA9C55B5CE474227E9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
Manifest number: 0511
Signing time: Sun 29 Mar 2026 08:01:04 +0000
Manifest this update: Sun 29 Mar 2026 08:01:04 +0000
Manifest next update: Mon 30 Mar 2026 08:01:04 +0000
Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: YrvuZuugBCJr+jxNpXakuvWA3iRQsuPAx6zMbQb/IlY=)
2: RIbu27-D1A3-MonubZ_zZNoyyNM.roa (hash: /mnXw1tu71r9fbtUEEZDR8gD0rD8atHLNSZPRm849T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:5e:0e:f6:61:fa:9c:55:b5:ce:47:42:27:e9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f
Validity
Not Before: Mar 29 08:01:04 2026 GMT
Not After : Mar 30 08:01:04 2026 GMT
Subject: CN=ccfa9156489a44a4e06d819955d8eba7f1b3be87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:26:4b:44:71:a6:3a:18:c8:b0:3a:02:44:4d:
ea:a6:4e:c9:a8:ca:20:d9:3d:5b:f4:e7:6f:cc:f9:
01:57:2f:9f:4d:fd:04:47:7d:51:14:21:c7:31:21:
b8:38:fa:21:5f:6a:46:05:ff:0a:6a:49:76:7b:b8:
f6:fd:54:01:3a:eb:4a:6a:5e:6e:54:9b:96:5f:47:
c1:a2:c4:93:b1:97:df:ff:6f:e4:a6:05:06:fd:b4:
19:f7:11:ce:f5:1e:8a:0a:57:79:fd:bb:3d:92:76:
bc:6e:76:40:25:d4:d3:17:36:54:44:ca:2b:0f:23:
4f:b7:ce:8b:45:61:38:ce:01:15:c8:8e:ee:d0:ac:
47:96:48:bc:4f:5c:5c:f0:93:ba:6c:dd:b2:ad:34:
f7:33:d0:51:24:37:a3:7b:4f:de:db:8e:ec:e5:b0:
34:82:3e:07:8b:75:85:dd:b0:e0:25:f0:dd:b8:c9:
86:d1:e1:ff:07:63:05:a3:18:e8:76:23:e3:e1:9a:
79:96:29:13:a6:22:5b:1b:e1:d4:19:bf:43:da:ce:
23:93:8c:41:52:06:31:ee:aa:55:38:30:71:16:47:
62:99:7e:a2:64:81:d6:64:2c:a8:ea:27:2d:98:5a:
23:93:88:ee:b3:51:13:8a:20:f6:01:b5:d6:ec:18:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:91:56:48:9A:44:A4:E0:6D:81:99:55:D8:EB:A7:F1:B3:BE:87
X509v3 Authority Key Identifier:
keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:48:af:b6:db:14:62:c4:2b:98:4b:00:44:33:b9:72:06:
53:a4:81:3b:d8:5b:72:90:89:c6:d5:34:c9:b2:6a:a7:29:f4:
4b:70:09:d1:01:fa:9e:01:90:fe:d1:b3:b3:d4:aa:68:8d:58:
ad:59:7f:ff:b2:6f:41:b2:9c:c1:44:95:63:dc:96:0b:52:16:
2f:4e:9f:3b:dc:38:3b:5d:e2:1a:8d:84:d6:99:06:5b:0e:12:
81:64:95:2c:8b:5b:67:2d:16:37:c0:b9:07:78:34:ee:0d:29:
a2:5d:1b:fb:3a:f8:12:20:66:fc:55:b5:01:1d:20:7c:15:da:
d0:0e:26:1a:5d:b9:f8:59:55:8f:70:3f:51:fd:19:28:4e:b8:
d9:06:df:0d:ab:e6:e0:d9:d3:be:b6:11:99:fe:84:18:b7:ef:
2b:f8:a1:17:7b:bf:b0:d8:92:cf:51:ab:ba:53:4e:68:e5:c4:
02:70:89:af:44:6c:94:4f:fa:a4:14:85:a3:94:d7:e8:24:6a:
24:37:7a:ab:b2:ff:cc:12:73:aa:60:61:91:1a:07:3e:fd:b9:
c4:35:05:e8:d0:0e:ea:8e:7f:cc:8e:01:44:06:29:3f:31:57:
ac:03:c6:9e:19:ff:f8:52:da:3d:10:11:7d:d4:1e:a0:9d:7f:
24:80:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:53 2026 by rpki-client