Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: gXZd8iO0tIrKTmng6rhvz82zllPORl3bzlg+R7mqEQ0=
Subject key identifier: BC:83:C1:0A:9A:89:D3:47:9E:45:CC:AE:CC:F0:05:A5:87:BE:F7:0C
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 019D389BB56C39536A723CE6F21F74ECA9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 08:00:21 +0000
Manifest this update: Sun 29 Mar 2026 08:00:21 +0000
Manifest next update: Mon 30 Mar 2026 08:00:21 +0000
Files and hashes: 1: MUU8YNa6WcEG9k_BNcyCAU81gbs.roa (hash: iUfmHZuTUmqZJa+o0yYc9bKFcBXasUBUKIVVT3wP+6Y=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: IpB6MSiyafW+GeCcv+w/YKIiPBx7kAWwPQx17u7eCEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b5:6c:39:53:6a:72:3c:e6:f2:1f:74:ec:a9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Mar 29 08:00:21 2026 GMT
Not After : Mar 30 08:00:21 2026 GMT
Subject: CN=bc83c10a9a89d3479e45ccaeccf005a587bef70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:55:b1:a3:1c:24:4b:fa:12:01:28:0d:63:
90:d9:2c:bf:e1:34:1e:b5:5e:c3:34:57:c2:e9:98:
8b:e6:aa:59:7c:b9:3b:14:e2:17:4e:63:60:10:f7:
5a:6c:a9:69:64:ea:92:1f:a3:9d:7e:24:54:91:b2:
33:02:dc:d4:65:f0:42:e0:cb:1b:5d:71:e4:46:c9:
dc:37:cc:78:55:0b:bc:16:b5:98:0c:b3:ed:45:66:
cd:62:ca:19:5d:22:f6:76:c6:0a:7d:eb:59:a1:14:
10:13:04:54:51:9f:7f:21:0b:c0:03:2d:de:4f:41:
b4:22:76:58:78:22:3e:da:a1:42:35:24:6b:45:bf:
03:1c:36:19:18:b7:d5:ea:96:f5:a7:b5:82:cb:e9:
e5:77:0d:f9:b0:d9:ba:ac:3e:03:fd:14:85:67:99:
ec:6c:d6:25:e4:0b:a8:b6:c8:a0:0c:14:18:04:43:
0f:2e:e5:20:80:a9:92:02:3f:0b:bd:0d:ae:a3:b5:
43:e1:66:a4:33:a0:d5:73:fc:50:aa:76:3d:6b:7a:
91:42:a6:a2:43:55:22:25:c2:92:f3:cd:96:97:bf:
f5:ee:92:7e:35:16:40:2b:16:ed:68:94:af:96:b2:
41:b4:31:51:ff:30:27:c2:9e:2a:a1:33:49:d1:fd:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:C1:0A:9A:89:D3:47:9E:45:CC:AE:CC:F0:05:A5:87:BE:F7:0C
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:17:58:80:df:51:a7:44:0c:b3:07:91:7c:42:26:05:02:
29:a9:9b:a7:2c:8c:3c:d0:59:8c:03:94:8f:99:c6:cc:fb:60:
53:91:6d:b9:d9:e5:5b:ed:a6:19:82:d4:e1:8e:4d:76:82:15:
c0:b5:c3:05:fe:c7:86:81:0c:bf:ca:cf:10:37:22:59:14:88:
2a:1d:a7:e3:5a:33:8e:a4:e1:a4:80:08:c1:f3:2e:c9:d2:44:
b4:d3:c9:a5:aa:aa:11:ad:fc:a3:b7:f4:ad:eb:1c:57:d0:ce:
9e:63:77:d0:37:b7:b1:71:37:c8:26:a5:26:64:5e:3e:44:36:
11:71:59:e6:3d:6e:c9:87:f4:82:44:61:e4:c8:3d:4d:6d:71:
27:78:a7:09:c4:2d:27:29:4e:57:f7:88:c8:e1:95:12:b1:f6:
06:d3:bc:45:4f:d8:c8:e4:92:89:a9:51:7f:0b:d4:df:60:7d:
f6:c2:68:27:8c:39:dc:ea:de:09:a9:5c:95:5a:93:a8:29:09:
5c:c2:12:65:8b:c7:0d:8c:5b:91:4e:fd:28:48:84:5f:05:e9:
ab:4f:d1:db:33:a1:3b:49:88:d0:e0:ac:a6:9f:26:d1:79:9a:
de:87:f8:3a:38:f0:cd:c6:6f:62:8b:7f:37:62:bf:e7:15:30:
ec:10:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:17 2026 by rpki-client