Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: G9KcEfMjaPkYkLNPunTKyqXnW5RAcXyYSg0L+3J9FQM=
Subject key identifier: 3A:D0:E7:4F:78:06:F3:8F:73:B3:75:76:59:9D:FB:46:D1:C1:89:5F
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019D04AEB80BEF1FFA6D2483CF6F396C3194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1578
Signing time: Thu 19 Mar 2026 06:00:52 +0000
Manifest this update: Thu 19 Mar 2026 06:00:52 +0000
Manifest next update: Fri 20 Mar 2026 06:00:52 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: oWbylztB8sCgY2iHsLDCqi5FQkTHeMQ6crIxzcVEHF0=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ae:b8:0b:ef:1f:fa:6d:24:83:cf:6f:39:6c:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Mar 19 06:00:52 2026 GMT
Not After : Mar 20 06:00:52 2026 GMT
Subject: CN=3ad0e74f7806f38f73b37576599dfb46d1c1895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:c1:1b:e7:22:68:36:61:b6:85:e5:3c:26:
7f:50:6b:16:20:ee:88:29:8d:68:32:c6:8d:3c:2a:
63:7d:e4:e4:55:be:e5:19:d6:25:fc:5d:a2:f4:63:
4e:27:a3:28:c4:c2:0b:97:a7:7f:83:c3:c2:ff:cf:
0e:12:78:5c:43:5d:1f:93:e7:a0:33:ec:17:52:d8:
60:ff:a9:89:be:10:50:9c:41:80:09:6e:5a:df:f6:
34:29:9c:f6:aa:44:bc:4b:8d:0d:37:06:03:15:37:
0b:e3:dc:c7:4e:56:47:24:d7:22:7e:73:d1:3e:1e:
f6:55:ac:4a:2b:86:43:be:6a:d0:3a:63:1c:ae:d8:
4c:6f:77:36:33:7c:52:19:6b:f7:e6:b1:7f:b8:cd:
d5:33:e3:88:4c:ca:34:e8:5c:d6:36:42:a8:4c:7c:
59:d3:c9:07:26:7f:61:5b:cb:fd:04:3a:0e:84:75:
14:cf:10:99:42:c8:00:40:26:8a:b6:d0:9b:fd:60:
61:3b:4a:15:b2:76:ff:60:38:74:2f:a5:86:cd:5a:
df:4d:f3:7d:d9:93:52:11:12:3c:2c:74:ce:dc:83:
20:4c:10:6f:65:c4:08:7f:32:a8:5f:44:c0:cb:a6:
f0:60:4d:c9:38:2d:58:35:aa:e5:c2:1e:56:4f:38:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D0:E7:4F:78:06:F3:8F:73:B3:75:76:59:9D:FB:46:D1:C1:89:5F
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:9c:14:72:95:10:e2:ec:a1:c2:32:a1:f9:ed:38:c0:4a:
15:31:25:e5:35:62:30:f9:e1:6e:40:dd:ca:a9:a6:00:84:e8:
22:dd:3d:85:4c:58:f9:55:e3:23:e5:bf:6f:7d:09:83:88:8a:
d2:8b:3f:45:ec:92:29:cb:c9:32:ae:8e:56:42:bb:a4:d9:72:
0c:b1:d3:d0:55:82:8d:a9:5e:e5:4d:23:17:28:8b:38:7b:bf:
34:bd:4a:75:28:e9:35:9a:a6:67:7e:c0:a4:ec:a9:61:b2:eb:
33:25:64:d1:33:6b:50:3c:80:e3:c1:a1:91:f5:94:a4:8d:b9:
97:46:aa:ed:f1:2b:74:b0:ca:68:7b:4e:e7:92:8c:c2:82:7f:
54:71:a5:7f:7a:e2:5a:e8:64:72:27:4e:f8:15:09:a3:6d:b8:
89:3f:ba:32:d9:7f:b4:78:b2:93:eb:61:ad:aa:a9:a0:19:d0:
f8:14:18:31:a2:e4:8f:10:5a:5d:11:20:7e:c9:cf:39:1c:3b:
0e:55:18:f9:3d:2f:b0:0f:17:3f:c9:b0:3d:af:2b:9c:ce:6a:
01:d9:7f:93:86:55:07:39:2e:3c:5a:8a:15:f7:16:05:27:f1:
fc:51:ad:8f:bc:d9:56:83:e8:b0:0e:7b:a3:b8:db:3c:19:93:
39:23:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:08:15 2026 by rpki-client