Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: dpAY27yzISYw+uT8zJVxGf3Nosga+yZ4C+3R2KoE6Bk=
Subject key identifier: 09:C6:49:91:A8:DF:94:BA:A7:02:2B:71:8A:E8:D9:67:ED:F3:6F:24
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 019D37C0EEB3DCA6B8AFFBF12B18BD662277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0492
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: 6JgmEKDGlYfzHxrPWMbCBHvEv10.roa (hash: O2i0/jw0uO+3EKrKnGSgKnk++IC3F7+eUGLyqXW46bc=)
2: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: FuCnDkyHOR15zo/zog+hiN6NW5fcQosT4vyPNrj127Q=)
3: w7PWZXTPKCOZGHpSGcT5KoWpPAY.roa (hash: 034E8i64C+y8Jw/x/z2Co+QWwQMda1HQeLdB0UlAnnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ee:b3:dc:a6:b8:af:fb:f1:2b:18:bd:66:22:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=09c64991a8df94baa7022b718ae8d967edf36f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:f5:8d:a6:09:23:a1:ec:29:e5:83:c5:a4:
fa:24:35:12:18:16:14:2b:56:ff:32:7a:fb:85:01:
b1:1f:c7:b6:f3:c9:89:a5:b8:f0:86:f5:c6:07:a8:
c9:3a:5f:9c:12:84:25:38:fd:ea:37:36:82:c3:94:
1e:a5:63:aa:9e:23:8a:14:2d:29:25:7c:c1:e4:8e:
a1:50:d2:99:af:18:d4:b6:4e:53:c2:c7:4d:59:fb:
7d:f3:b1:9a:4c:b8:11:06:e9:b4:78:46:d6:ee:63:
a5:b3:d9:74:9b:8f:62:02:4e:a9:c2:4c:79:b3:61:
5f:05:2e:0d:f4:18:a3:b2:b9:08:e2:a5:8a:fa:03:
af:5e:23:c9:1a:c3:6d:a5:bd:23:1c:46:6f:f4:6e:
9d:16:45:a1:62:c4:3d:84:49:d0:92:56:76:0b:ad:
89:66:14:95:13:91:a9:47:3e:21:46:0d:76:0a:7c:
72:b0:be:85:13:2b:70:8a:1e:46:a3:26:3d:12:19:
f7:e3:64:c5:12:0d:a7:aa:cf:6c:93:fb:17:20:af:
00:30:f1:46:14:8c:24:f2:39:90:d0:58:8f:49:ec:
ac:f0:cf:0d:10:56:5b:0a:66:87:1f:96:35:98:62:
92:c3:f1:eb:8f:19:d8:08:6a:2f:57:36:46:07:be:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C6:49:91:A8:DF:94:BA:A7:02:2B:71:8A:E8:D9:67:ED:F3:6F:24
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e4:b1:14:a6:a6:bf:bd:86:ec:f1:da:eb:68:5e:2f:35:ae:
88:86:e6:21:92:94:b3:36:58:79:04:49:2e:e0:cc:23:9c:3c:
8a:7f:be:d0:4e:d0:c1:8d:21:30:bf:d5:19:96:30:05:7c:11:
00:0d:03:ea:92:02:e6:ad:28:7f:c1:32:ca:f3:f2:17:8b:56:
78:3f:42:18:61:2f:24:3c:ba:77:7d:6a:d8:86:69:c6:7f:45:
34:17:c0:65:df:bd:a2:0d:25:dd:f1:ca:01:e1:a4:ec:34:84:
20:b5:d9:50:2d:e3:80:a2:53:17:fd:ec:5c:8b:f6:4e:6e:cc:
38:49:c1:71:6f:e1:b1:b4:9b:18:60:92:70:dd:55:02:db:fc:
9f:8b:76:c4:e0:08:dc:7d:70:09:78:ec:e5:d4:14:61:48:56:
ef:80:b3:b1:19:53:6e:ad:bf:e6:33:f1:0d:60:b4:b0:c7:7d:
c8:63:9f:eb:b6:8d:ab:46:97:79:7f:c1:a9:6f:23:5a:8f:86:
7c:e1:5e:d0:d4:dd:16:42:50:64:f4:20:99:62:3c:18:6e:6f:
b5:47:7f:f9:fd:38:6d:bb:1b:d0:59:d8:f3:57:28:17:90:c4:
d4:f1:1f:8a:9b:cb:14:4b:80:ad:ff:96:f1:45:1a:72:d9:47:
03:fd:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:16 2026 by rpki-client