Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: 1My9Wr4UUyKY/+YTaHi+ihNZ1FIOx3/PQaD3rDmQtGk=
Subject key identifier: 35:46:E4:85:AC:E6:08:28:4B:7B:6E:8A:5C:35:6F:38:44:A0:74:15
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 019D390A54168355A642D4F4F49C295485C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 10:01:11 +0000
Manifest this update: Sun 29 Mar 2026 10:01:11 +0000
Manifest next update: Mon 30 Mar 2026 10:01:11 +0000
Files and hashes: 1: ReFoU0vqMdItTbwZ4tOM7bCmAhg.roa (hash: AuLdH8lMRAM53ImTxBSwBIPLZa61IiJ7LX4/1Usrvg0=)
2: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: PKjI8Z2g9/UO5HV1261I1aRUziq5W33Kw48rgxcyDvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:54:16:83:55:a6:42:d4:f4:f4:9c:29:54:85:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Mar 29 10:01:11 2026 GMT
Not After : Mar 30 10:01:11 2026 GMT
Subject: CN=3546e485ace608284b7b6e8a5c356f3844a07415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:00:3e:54:a9:5e:f7:81:68:90:61:4e:fc:
8d:a1:a0:ee:a8:f0:15:fd:5f:e9:e1:56:4f:8f:ce:
3d:12:65:82:3d:ed:39:3f:6a:d0:30:ce:0c:23:4d:
fe:fa:b0:b7:d3:49:a3:87:63:47:9e:de:25:bb:13:
54:5f:f3:e2:80:47:7a:93:29:4c:6e:71:21:10:4d:
00:cc:68:ef:c4:4c:7b:6b:12:9f:26:0b:5d:2d:af:
c7:34:a1:ff:14:53:7b:2b:89:48:8a:8d:67:7d:40:
43:a7:22:6c:66:e5:10:b5:51:9a:03:d5:6b:8a:71:
50:b0:4d:f0:46:87:3d:c7:99:1b:e1:e0:c6:76:e0:
68:a3:44:f4:06:7e:0d:d0:c9:cc:b7:5e:c3:dd:3d:
22:c4:90:5a:de:e8:a4:f4:c6:32:0e:30:a1:7f:0b:
cb:21:b5:e6:55:c3:64:d5:c0:54:90:ae:3a:15:21:
05:03:61:30:2e:9a:87:18:9d:0a:b4:ea:b3:fd:47:
fb:2e:47:0e:9b:13:d6:dd:97:bb:ba:06:c5:8b:d7:
f6:af:5e:c1:a0:d7:0a:70:da:38:1c:89:c1:c2:54:
0d:46:ef:93:dc:c6:df:0a:83:38:35:2b:57:fc:7e:
d9:2e:9d:b5:51:49:d6:94:62:0f:87:4f:dd:e9:e5:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:46:E4:85:AC:E6:08:28:4B:7B:6E:8A:5C:35:6F:38:44:A0:74:15
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ee:5f:3e:0e:39:d8:c6:84:e5:6d:97:a0:1b:6c:9c:d8:8f:
c0:13:5a:75:a9:38:14:e5:0e:aa:c3:96:69:2e:09:63:1e:35:
09:63:e8:df:00:26:f9:4a:68:73:24:37:fa:5e:6e:f0:ea:a9:
fd:ea:4f:08:d0:3c:1e:77:f4:04:66:04:ad:f0:56:2a:0f:13:
38:d0:2c:22:5d:66:27:db:c0:7d:d4:95:fa:36:9b:96:03:ae:
4a:8a:44:d0:95:d9:98:22:7c:b2:af:d3:2f:a4:56:85:9f:14:
2f:8c:68:47:a9:dc:d4:0b:81:80:6a:85:20:54:06:8d:11:01:
94:7a:6b:ce:3f:05:77:cb:44:98:c9:8c:97:aa:ba:fb:36:ae:
24:df:3f:1a:23:b6:4c:00:05:c7:1c:15:34:0e:35:04:49:41:
4c:63:75:dc:22:4c:cf:a7:9e:d5:54:5c:f5:29:01:42:de:c2:
47:3b:7e:b1:73:f1:a4:c6:3d:b5:e1:c4:04:98:a8:63:b5:d7:
4c:61:75:91:c2:4f:30:03:a8:7f:3b:76:84:9d:6e:0a:03:be:
e2:4e:2a:a3:aa:3c:b8:e0:89:87:73:35:6c:b2:19:42:7c:e2:
b4:0a:b2:ad:3e:bc:1d:11:82:ae:8f:6c:08:05:9c:24:68:1f:
99:0a:70:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:06 2026 by rpki-client