Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: l/nEFTsoKZ03X1BMOxTtaMiEO0G2NZP6rEdl1Yg2pac=
Subject key identifier: 7A:08:DA:18:5A:79:45:9A:53:8C:2D:FF:A9:2C:9A:49:CA:50:F4:38
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019D3A1C89FA4DEF2EA7536B7139FF8516BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: 023E
Signing time: Sun 29 Mar 2026 15:00:42 +0000
Manifest this update: Sun 29 Mar 2026 15:00:42 +0000
Manifest next update: Mon 30 Mar 2026 15:00:42 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: 4EUunEDLUyCasoypdJYljEMPXJhtz7mkcwiLnlj3nyk=)
2: ayEAcT6oCdclXkVG2FkLRzZ9mOw.roa (hash: 7P+K2VYLnbm0w74/RJLkFBdqeqXQaGd7I3w+dIasZpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:89:fa:4d:ef:2e:a7:53:6b:71:39:ff:85:16:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Mar 29 15:00:42 2026 GMT
Not After : Mar 30 15:00:42 2026 GMT
Subject: CN=7a08da185a79459a538c2dffa92c9a49ca50f438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:f0:18:af:8f:cd:26:58:bd:c8:f0:9a:da:
20:38:fe:40:8b:75:35:8d:2d:69:a6:11:2b:48:5d:
6c:dc:14:82:70:f6:be:20:f9:8a:e1:3e:1f:ea:0c:
a7:87:d7:36:98:1e:b5:b0:df:37:f1:33:de:92:92:
9e:32:9c:ca:86:eb:34:5e:ad:87:b8:fc:8b:9f:7b:
86:31:91:6f:97:bc:4a:56:ac:8d:fd:5f:4c:c0:72:
72:da:57:50:33:54:70:b0:96:f1:03:a9:82:ce:77:
85:ef:83:19:26:a4:c6:be:4c:7c:5f:7e:5a:2e:e5:
cd:43:22:d7:75:6e:1c:e1:7c:6e:b0:f2:d2:38:25:
45:b5:b6:51:4e:f0:f6:94:5d:8c:79:46:9d:f8:42:
08:c9:40:a3:b4:42:70:ae:bc:2d:8f:d3:9b:7d:e6:
fc:76:34:68:b9:2b:f5:f9:38:bf:11:4e:80:84:75:
2e:19:48:9f:c5:cf:12:d0:19:c6:bb:69:0f:c4:57:
9e:36:59:3a:ae:76:16:63:ab:15:cb:2f:2b:a5:50:
a8:66:09:3b:ae:f7:ac:9c:75:56:b9:a7:c4:21:43:
ff:96:d7:ff:58:31:f6:eb:7e:40:53:d2:51:2d:8c:
ee:07:1a:20:7c:69:cc:79:a5:1b:89:40:1b:19:e8:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:08:DA:18:5A:79:45:9A:53:8C:2D:FF:A9:2C:9A:49:CA:50:F4:38
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cb:17:dc:e1:5d:5c:34:aa:b9:89:d8:94:c1:cb:b0:27:67:
e6:20:90:bc:22:8d:e4:5e:44:c0:86:16:27:5a:c4:b6:48:cb:
9c:1d:6b:fa:fd:15:57:27:55:dc:68:b7:95:dc:2c:ed:e4:fc:
22:f2:76:09:59:91:7b:60:59:a0:8f:65:da:54:88:ca:26:7a:
ef:bb:57:4e:c5:20:b6:7e:68:53:88:55:68:66:ce:2d:13:1e:
7f:86:46:a6:b9:2a:a9:a1:9f:3c:f1:fc:7b:fe:97:1e:cd:29:
7f:2b:4e:0a:29:31:76:08:45:fa:f7:08:f1:50:e1:7d:97:fb:
8f:47:f9:09:d1:63:b3:3a:77:bb:72:46:fc:e8:56:0d:c3:4b:
93:9e:45:b2:2b:7b:ef:14:63:e6:0b:8a:6b:0c:b6:42:d6:d2:
ea:78:0e:75:36:2b:ee:6e:fe:44:19:4a:a4:7f:27:18:6b:0c:
8f:65:7f:d3:50:6f:b3:fc:67:f9:8e:fe:85:35:d5:55:40:ee:
86:6d:2f:8e:8c:2b:ee:82:b2:d6:3a:57:bf:33:60:96:8c:02:
9e:b2:c0:a8:ab:17:c6:19:a1:56:2a:34:c8:c8:e6:b2:4c:db:
52:f0:a6:52:3d:60:59:d3:da:93:71:7a:fb:f1:f4:38:b4:a9:
b3:23:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:39 2026 by rpki-client