Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: 5qqFa1zJrJfin/Kp3k5H5VJwnjlUTi6gn8l3bgdebR8=
Subject key identifier: 2D:70:48:B0:5A:AC:69:A3:6E:6F:FB:88:64:52:6C:42:58:81:42:A3
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019D389C515380442413B2B22DD075A2430B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 12D8
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: DQgML+qAJpVwanPoZwEb2MLhM+EpypgfVLi6VCygQ84=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:51:53:80:44:24:13:b2:b2:2d:d0:75:a2:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=2d7048b05aac69a36e6ffb8864526c42588142a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:27:06:d5:74:2e:54:ee:4a:ff:9d:20:a8:50:
35:a4:e1:fd:7f:86:d4:f3:a1:d8:89:89:35:68:a7:
35:95:75:98:c0:b6:38:de:c7:2b:77:f4:f3:83:cd:
85:bd:01:cd:35:d6:71:53:bf:db:f9:e0:62:08:1a:
41:57:fc:f1:6d:be:13:07:e0:15:7c:85:da:e1:99:
3a:66:94:ae:2c:c2:f4:52:9c:6a:cf:67:be:f0:8e:
d3:ba:c4:ab:70:ba:eb:0c:17:87:74:72:7e:f4:3b:
35:24:7e:c5:7d:ba:3a:7b:34:69:1d:f7:d3:45:52:
76:b9:63:8f:07:8e:bb:7f:f0:ba:37:8f:ec:d1:9a:
f4:fa:0c:b5:34:ce:02:ab:6f:3b:76:a7:b7:6e:39:
f0:fc:8d:36:07:26:70:fe:c2:fb:6a:c7:8d:32:79:
96:f6:41:35:ee:d7:05:69:c2:e2:eb:8a:b4:2c:a8:
17:d3:56:c2:af:81:2d:ee:75:93:18:28:7d:f7:bb:
e2:e7:b5:4b:6a:90:43:f8:f8:51:7a:0f:ba:fb:58:
17:bb:d9:21:fb:ac:f4:1c:02:c3:cc:18:3e:a0:0d:
f8:54:c6:7b:1c:f6:71:eb:dd:8c:21:05:26:5a:c5:
cf:43:39:32:e3:ab:d2:d6:7b:b5:5d:a0:47:9e:da:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:48:B0:5A:AC:69:A3:6E:6F:FB:88:64:52:6C:42:58:81:42:A3
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:59:70:fb:e3:84:f5:f1:f5:15:68:c8:30:1d:a4:e5:1a:
8a:02:30:c6:4b:e9:9d:23:86:d9:e3:3e:a4:fb:d6:80:8e:a9:
30:37:75:27:c6:6e:72:a3:31:a0:ed:1b:bd:75:ac:96:9e:f5:
94:d8:21:e9:c7:4d:3e:1c:8e:46:2f:97:f2:3b:8e:b5:d7:62:
44:b2:d0:07:c1:ee:ba:3f:2c:ca:4a:a1:05:cf:ba:9e:f9:41:
bb:9d:89:9a:18:ab:57:4a:e9:9d:9d:dd:51:2a:69:f6:90:f1:
54:5c:ab:41:b0:94:6f:75:a9:e1:2c:a1:df:61:89:51:14:96:
4e:ec:8a:28:2e:6e:7d:60:b3:df:a8:7a:63:ee:fd:92:bd:e3:
8f:dd:62:7b:6f:a4:d5:35:29:1c:3a:d6:e4:49:95:ef:3c:cb:
3b:09:a2:11:2d:69:c6:3d:29:de:cc:22:78:bf:cc:79:aa:7f:
ac:6c:69:8a:27:94:c9:23:6b:40:ef:d6:9d:cd:f3:e5:bb:d5:
24:db:f5:bf:7c:f7:ff:ca:df:df:61:d1:97:ae:e7:26:45:df:
4e:d5:d5:73:56:5f:0e:9e:91:5d:c8:9d:c8:4d:f6:ec:cc:41:
8d:95:b5:72:82:94:b0:20:21:54:48:1c:29:f9:a2:6d:53:9c:
a6:f2:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:17 2026 by rpki-client