Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: 3Rj1ThWJdH3g8gfwIQE5aKCzrirJ/G3KGHZQAkA2EeA=
Subject key identifier: A7:C5:18:EA:E0:8E:7F:7D:ED:B9:61:D7:5E:92:36:C5:97:73:79:A3
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 019D38D2E38685FC9012D2FDE243CDFABB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 15D4
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: C/1CiCKttEgz9rmSwe0ouO274KPrqVZHuqccW2Xtt3Y=)
2: JYCsV2i5N2HKe8jWnVBbskEk35g.roa (hash: bJ+6gtzP1kZJb4K84CU9VOHZvtsvVD/JCSadOrdU128=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e3:86:85:fc:90:12:d2:fd:e2:43:cd:fa:bb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=a7c518eae08e7f7dedb961d75e9236c5977379a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e9:b3:5f:e9:29:f5:94:9d:69:90:1a:9d:5e:
0f:f3:c0:0f:6e:cc:5a:18:a1:c2:24:ac:17:74:e7:
be:53:de:60:99:7c:e8:da:75:30:f9:1f:bf:29:93:
0d:61:fd:7f:c2:c5:dd:4d:86:55:ab:29:5f:e5:c0:
43:98:a4:9c:ee:bc:5d:2a:ce:48:4b:2c:b5:eb:ca:
83:bf:5b:0f:88:42:cc:1c:9b:67:a4:2a:9a:2a:4d:
4a:28:3f:70:2f:f6:5d:29:c1:ce:68:8b:78:84:61:
cb:c3:f8:85:5e:91:85:05:41:cf:cc:38:96:08:8f:
7e:bd:09:16:8d:92:21:60:94:06:d7:de:24:99:58:
1e:6f:17:18:2c:7d:05:4d:c1:fc:ea:90:59:cc:ea:
62:13:67:1b:51:b5:0f:51:58:b4:29:61:cb:16:2a:
a2:81:75:b3:37:1a:55:9b:d7:bd:30:34:7c:b1:32:
e9:d8:78:07:b8:4c:81:44:62:e1:4e:73:66:df:e5:
73:72:61:b7:31:97:97:b8:ec:80:91:8a:ab:9e:33:
df:33:79:26:d6:5d:70:cd:a5:c9:23:a5:06:68:cb:
39:01:b6:ba:5d:ac:fc:99:50:07:09:14:59:34:ef:
2e:b2:c8:8c:f1:9d:ac:b0:20:4f:df:5e:ca:f1:72:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:18:EA:E0:8E:7F:7D:ED:B9:61:D7:5E:92:36:C5:97:73:79:A3
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:c7:0b:15:b3:14:31:52:08:99:36:fa:d9:22:fe:b5:c2:
16:30:59:63:9d:d8:58:4a:ea:cf:b5:59:6a:f8:b2:4d:3d:f0:
17:e2:69:a5:b1:ea:86:3e:fc:d0:3e:7e:7a:a8:82:7a:a7:e0:
c8:7c:2d:88:4e:ef:22:bc:83:71:68:1d:8d:a6:a1:c6:b2:86:
f6:52:1c:35:70:d2:fa:4d:75:16:0b:bb:e7:3c:ce:6f:02:0f:
e8:c3:9b:fc:d5:13:7d:c1:ee:c4:8c:2a:6d:eb:51:6f:a8:92:
31:55:a2:d0:1e:fe:4b:ba:c4:a3:ff:6d:01:3b:31:d2:a8:a0:
16:8b:15:64:37:91:13:bb:10:5f:c5:b4:03:fd:e0:11:9b:b0:
56:b3:75:81:c1:d6:6b:35:4f:92:48:e1:0e:77:cf:a7:d0:be:
d9:bc:50:f9:cb:67:c7:36:f2:33:8c:c9:92:ce:29:7d:63:59:
7f:a4:c3:45:44:2e:f4:01:74:ed:35:c6:29:8e:d3:af:64:71:
4f:19:b1:e9:4f:99:ca:45:36:3d:ed:b4:c9:63:31:3b:1b:bb:
6f:bf:8b:1f:69:2d:23:ab:6e:fb:1f:df:86:3f:04:d2:15:b9:
27:e1:46:e6:6f:2c:2b:81:81:a9:8a:39:a6:6d:be:ef:a0:96:
29:22:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:53 2026 by rpki-client