Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: 8X5YKeb2+0++XF2hazLYxPNkx2SkWe6PMMU2wys0GOE=
Subject key identifier: 33:D8:0F:67:C2:80:24:35:03:5A:5B:8F:5E:5E:21:13:E4:FC:D0:D3
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019CF3F28A5C2605FFA85FD84962383887CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 186E
Signing time: Mon 16 Mar 2026 00:01:24 +0000
Manifest this update: Mon 16 Mar 2026 00:01:24 +0000
Manifest next update: Tue 17 Mar 2026 00:01:24 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: IW/ucCBi3dipOb8ktKWYO4gNa7aQFHd5GTu1veV4yjA=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:f2:8a:5c:26:05:ff:a8:5f:d8:49:62:38:38:87:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Mar 16 00:01:24 2026 GMT
Not After : Mar 17 00:01:24 2026 GMT
Subject: CN=33d80f67c2802435035a5b8f5e5e2113e4fcd0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6b:92:e8:18:b7:76:86:89:3e:a8:c3:b3:c4:
c9:01:2f:14:8f:73:42:5b:8d:43:e9:5d:7b:d8:cf:
4d:93:1d:01:3a:20:1f:5c:c8:2d:1d:82:91:df:aa:
0a:01:04:16:49:28:e1:78:e1:3c:ee:1d:ed:42:43:
b9:dc:ca:fc:3b:b1:a1:b7:63:1c:e6:e4:73:5b:87:
eb:50:e2:be:99:a4:77:2f:07:86:94:cb:82:79:3e:
c6:5e:7b:8b:8c:03:cd:57:6e:f8:1e:40:07:34:d5:
e3:43:46:c4:a7:f1:3b:98:86:80:68:01:ef:e1:a2:
8f:dd:78:71:ee:ee:f8:65:90:e1:a9:5a:45:f6:fa:
55:47:d7:0a:a7:5c:7d:05:87:0e:b3:43:61:80:59:
ad:9e:3c:ba:db:c4:f3:51:31:fc:d5:ea:d6:6f:ba:
1c:92:b5:a8:e0:5f:96:04:0e:28:b1:e2:18:56:f0:
41:86:f2:5d:4b:b5:78:66:4c:93:30:95:e4:69:9d:
57:03:41:de:56:e3:8d:2a:2e:eb:39:86:96:bb:1f:
a0:b8:26:04:13:41:98:91:d8:80:c7:4b:80:ee:91:
df:4e:1a:2e:61:38:a7:1f:7e:97:e9:2d:de:e1:27:
fd:47:c2:10:1b:98:d7:6a:70:03:54:4d:b0:3d:34:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:0F:67:C2:80:24:35:03:5A:5B:8F:5E:5E:21:13:E4:FC:D0:D3
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a4:ee:d1:be:74:70:74:9b:93:f2:9b:77:24:84:54:8a:69:
9a:71:fc:b6:90:ab:ea:03:99:4b:b2:ea:ac:e4:61:b1:b8:9f:
e4:d1:33:ca:fd:6f:59:89:b3:96:ce:c4:24:d4:fd:72:b8:10:
34:9a:c5:a2:a9:30:a9:35:79:5c:95:90:bc:26:18:e1:29:8a:
d0:a9:4c:8d:01:ce:88:a6:9c:ce:e5:a8:e6:fa:ba:88:27:a9:
31:f8:d9:c1:a3:bf:f3:5c:4f:f3:5f:a3:f8:34:63:a6:db:e9:
61:73:3e:2a:02:d3:cd:c0:76:78:e1:ea:94:78:88:9a:57:3c:
67:b5:b8:19:1a:58:8c:32:93:c9:32:4e:33:aa:0c:f5:fb:c1:
be:5f:65:82:96:51:64:2d:be:eb:0c:73:be:5f:4e:4c:a2:79:
db:93:ef:33:4e:5e:15:7f:3a:b0:6e:f8:62:28:92:a7:c9:3b:
71:cb:d2:95:77:6c:58:e2:3a:30:d3:3b:72:06:d7:51:e1:68:
03:02:e2:b8:f4:9a:79:02:f4:05:74:c4:27:4b:f8:13:6e:33:
a9:52:0f:ee:b5:4c:f1:c4:95:47:1d:20:e3:3a:0d:ff:c8:bc:
a4:fc:6e:a6:9e:4a:29:a3:4e:cc:2a:d8:53:a9:3b:5c:49:fc:
c1:83:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:56:08 2026 by rpki-client