Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: 5jbxcIqaD8GiQD4fV1Db2V3v5pzIK4UlzehkAsCzOxQ=
Subject key identifier: DF:EF:AE:41:18:DA:E4:4E:AD:E4:FB:15:3E:1A:B7:60:C1:57:02:7A
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 019D3AF87B131E12005ADDD88E70A4FE13BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 0754
Signing time: Sun 29 Mar 2026 19:00:56 +0000
Manifest this update: Sun 29 Mar 2026 19:00:56 +0000
Manifest next update: Mon 30 Mar 2026 19:00:56 +0000
Files and hashes: 1: 6tHZhT7N21w3Z616ewGEbAeKLdw.roa (hash: drk0jZRid095U5sVAWQhFh5KREeBBkf7MnZyeJizYAc=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: bIQTKSB0wtG1W9qfPit+IeByr8UhM9wjH0SMFeYPDE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:7b:13:1e:12:00:5a:dd:d8:8e:70:a4:fe:13:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Mar 29 19:00:56 2026 GMT
Not After : Mar 30 19:00:56 2026 GMT
Subject: CN=dfefae4118dae44eade4fb153e1ab760c157027a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:f7:d0:a4:cc:79:e5:4c:4a:2d:e7:3b:e3:
5c:bb:08:d3:d9:20:ad:42:94:46:45:00:17:e6:67:
26:8a:e1:96:52:f7:fe:28:65:51:55:4d:c3:31:a3:
6e:5b:b2:4b:53:b9:7c:af:60:ad:42:62:2f:6c:32:
ec:46:8f:80:ac:00:b1:c2:96:4a:28:77:8d:90:9f:
fc:bc:ed:9e:64:73:ac:64:aa:50:11:c4:6d:e9:b6:
30:d2:7f:02:4d:6a:8b:7f:ba:c1:5c:54:c5:78:bb:
d2:56:c6:53:d5:34:85:bd:47:2a:2b:60:02:18:07:
65:98:fe:cf:ca:be:a7:96:71:63:c7:21:ac:ea:da:
0a:b1:7f:8b:cd:07:b7:1c:bc:1f:50:f5:ba:63:cd:
78:e8:fb:a1:bd:66:0c:86:de:e2:dd:e3:b1:ac:f5:
c4:d7:38:c0:27:f5:40:ae:58:93:a4:f6:59:a6:a1:
f2:cb:d3:2b:af:82:4d:56:c0:d3:46:fb:97:96:e7:
30:02:0d:a9:70:49:e3:1f:87:5a:13:be:ac:00:e0:
c2:7a:42:42:f4:f4:a5:5b:d1:41:3a:d6:eb:46:de:
6b:b0:ab:87:7e:7e:96:97:bd:55:02:d3:e6:a1:ec:
46:99:00:d8:95:b7:06:13:5c:db:59:a7:27:84:eb:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:AE:41:18:DA:E4:4E:AD:E4:FB:15:3E:1A:B7:60:C1:57:02:7A
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:be:8d:a0:c7:f9:45:44:db:fd:60:1c:d9:07:6a:0c:3a:
b4:be:51:42:58:4c:ca:7b:09:21:1f:ea:41:72:c7:f2:db:a6:
68:7e:23:bf:24:35:e3:f1:cb:72:ef:00:4e:c1:c2:e7:a8:2b:
19:9d:6b:e2:db:e3:d6:a0:42:df:fa:d7:10:9d:e3:a9:9c:11:
6e:7e:1e:aa:d8:44:d1:21:b2:63:59:c7:51:bc:dd:49:ca:ef:
de:47:32:8d:64:42:09:5c:da:a2:89:44:84:df:cc:6e:26:9f:
0e:36:ae:b2:5d:b0:60:a5:83:03:79:4d:96:df:37:0b:09:91:
2f:4e:e9:6d:a4:05:60:61:6d:72:04:b6:e4:96:07:d6:77:9d:
05:33:30:f9:ed:4a:d1:6d:6c:15:b6:b6:3f:c4:f4:69:f0:10:
8c:0b:59:15:7a:9f:5c:d6:56:d6:6e:a6:5f:2c:ff:07:9c:9c:
35:98:83:28:a2:9a:4e:7d:4c:25:d6:f6:c4:d3:32:2b:3c:02:
3c:0f:b9:02:07:c4:86:cd:96:34:d1:23:57:23:e1:30:73:bb:
22:1d:5f:c9:ac:00:39:f6:1f:da:01:97:ff:96:7d:63:24:50:
44:d5:11:db:fe:cc:b3:8d:ed:ba:f3:f7:18:01:6a:6d:ae:e1:
fb:7e:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:21:07 2026 by rpki-client