Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: NLaqXVZV2aqoWzt8mIdrXvoe8+YrpwoaijMrBly6Wl8=
Subject key identifier: 1A:E1:B1:9D:2A:DD:05:23:AE:38:20:EB:1C:8D:3A:B6:D5:FE:20:D7
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 019D3940DCF1EF2C9C5507BF62B95D534065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 11:00:45 +0000
Manifest this update: Sun 29 Mar 2026 11:00:45 +0000
Manifest next update: Mon 30 Mar 2026 11:00:45 +0000
Files and hashes: 1: 0U13Mcb_KgMF9K69fVfTmUTYf5c.roa (hash: 5Rvk9cCX7FFBTf2JwLTt90a00mmM2NZlX+HpUZifFpM=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: uHB0p1rnTilPpa7mWCCbOr1uowPZSBaE4yOfLeh6Z2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:dc:f1:ef:2c:9c:55:07:bf:62:b9:5d:53:40:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Mar 29 11:00:45 2026 GMT
Not After : Mar 30 11:00:45 2026 GMT
Subject: CN=1ae1b19d2add0523ae3820eb1c8d3ab6d5fe20d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:88:35:40:e1:a0:4a:dc:f9:5f:d0:08:5c:
57:d9:f7:37:18:62:1c:75:e1:a0:f1:85:6a:f8:e1:
02:00:ff:a4:35:23:c3:f1:95:46:b0:4f:e0:ea:68:
65:70:5b:d1:23:18:90:61:5b:f6:85:43:36:83:5c:
24:f8:c9:5f:18:96:4a:96:1d:e1:a0:e6:15:80:5f:
e0:14:43:ae:03:4c:45:78:ee:34:21:c0:cd:f3:c8:
d1:8b:d4:3f:89:6b:15:88:a6:f4:21:27:60:73:c2:
0f:7c:71:ec:e7:e8:82:99:34:b6:ac:6c:ab:68:c2:
1c:a5:de:e6:87:97:bb:21:95:8b:1a:29:05:fd:50:
7c:76:80:38:12:a6:45:24:ce:83:5e:aa:9b:94:81:
aa:1d:02:b6:ba:f0:36:13:47:3f:e1:06:3a:a2:75:
f1:c9:b1:7c:bc:4c:85:b2:04:03:f5:34:04:32:a6:
8b:6a:0a:cd:33:48:09:02:85:89:34:b0:b8:da:51:
e9:16:e9:8b:07:de:bb:f8:3d:4c:d7:91:8f:b5:64:
9a:70:18:96:e8:0d:08:2e:34:ff:f7:bd:4f:75:21:
c8:97:d1:3d:94:9f:a1:bd:5d:9f:3e:8d:f9:13:08:
2a:fc:5e:58:f3:a2:b7:c9:90:b8:c0:ff:17:e4:a2:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E1:B1:9D:2A:DD:05:23:AE:38:20:EB:1C:8D:3A:B6:D5:FE:20:D7
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:97:29:75:58:e5:48:96:16:c2:77:4e:00:b8:cf:8f:8d:4a:
1f:d3:6a:04:3d:b7:0a:7e:88:1b:a7:bb:da:f4:ed:80:a2:8f:
88:58:52:2b:b4:ea:07:8f:fa:df:37:3c:83:d7:c8:18:e1:11:
a3:d4:73:e2:f8:f6:0d:52:71:45:7d:d5:1a:91:93:1e:e0:5b:
28:77:e5:cc:83:17:bc:4c:49:08:ee:21:24:a4:90:03:6f:a8:
63:4e:38:27:e5:79:60:ce:1c:2d:30:01:68:b1:a4:48:30:7c:
74:9c:0b:be:5c:90:c8:05:04:3e:c2:2f:3e:da:2c:4a:5e:26:
03:37:15:cd:9b:0d:e6:05:b5:6e:a7:8d:0e:96:8c:54:1f:1e:
73:2b:1d:2f:26:d7:ba:4d:55:e5:70:88:96:e2:65:9a:33:03:
89:93:f1:48:69:bb:b0:69:ac:d2:f2:22:42:22:6a:dd:8d:94:
0f:09:2a:7e:43:44:90:74:25:c5:f4:05:b9:2f:cb:8f:b9:81:
41:dc:7b:1b:47:70:17:3b:8c:55:e0:f7:d1:1f:a9:c9:66:cf:
ab:8a:11:52:e7:90:f0:2b:30:9b:27:dd:4b:c3:6f:51:53:13:
70:a7:e5:7d:63:58:d7:7d:cc:5e:8f:7f:08:81:e2:cb:a1:60:
79:a4:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:37 2026 by rpki-client