Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: VQ1WolitI6QGf3LIB22TKr7+S9ctkoo+niixbEBzEJ8=
Subject key identifier: ED:6E:0A:AE:9F:BE:E6:27:6A:A1:2D:72:B9:35:76:53:56:7D:01:57
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 019D39413D11346B0C3FBF9CD6F20D5AA0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 03B6
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: ARE4MYbLUB9Gi4Bry1A4wRMy/ftIbvISrvkdku1/TE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3d:11:34:6b:0c:3f:bf:9c:d6:f2:0d:5a:a0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=ed6e0aae9fbee6276aa12d72b9357653567d0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:d9:6e:06:bf:f2:b2:67:60:eb:fa:d5:f6:
67:0f:30:59:36:91:f3:b5:7f:99:7c:66:b1:e1:c4:
4b:96:51:99:56:d1:9d:b8:60:36:7d:48:e9:9a:7a:
f5:c8:d9:d7:52:c8:d1:58:fc:68:62:f8:04:ee:8b:
15:62:e1:a4:10:1c:31:09:8c:1c:51:72:5b:36:79:
2e:ce:b4:af:fc:8d:5a:51:83:20:9c:30:8b:24:45:
e3:26:50:c6:e5:ac:e7:a3:56:fc:97:f2:0d:fc:44:
f0:dd:0e:a6:63:db:42:99:9e:bc:24:68:38:f2:73:
fa:f6:18:4b:e5:84:16:6b:23:14:08:74:5c:99:e2:
3c:62:d2:0e:83:40:42:ed:65:8d:4b:55:9a:f5:2e:
14:11:f4:17:84:ce:b7:c5:5c:9d:95:50:65:90:3a:
25:75:85:c1:7e:27:3b:7a:c4:20:35:f5:13:89:ce:
5a:4e:f7:5d:a3:8a:4b:28:c5:03:25:e6:aa:6b:97:
4a:de:25:c2:33:6f:b0:52:df:53:bf:98:02:4a:a3:
a6:bc:7b:f4:e0:51:f7:f9:86:34:52:cc:56:24:54:
5d:95:0e:14:8a:a4:b2:dc:66:ab:51:a5:9c:33:06:
3f:d5:42:8c:4e:13:8f:eb:c4:58:ac:eb:52:37:36:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6E:0A:AE:9F:BE:E6:27:6A:A1:2D:72:B9:35:76:53:56:7D:01:57
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:4c:23:d6:ea:b7:b1:c2:79:ab:77:55:bb:87:bc:ad:24:
84:8d:83:ff:cb:a0:b1:11:29:45:f1:67:a4:4c:b0:f8:6a:35:
c5:77:b6:8b:ef:ca:92:ac:0b:b8:da:ec:0f:62:0b:f8:0f:b4:
60:1b:d2:41:38:b9:d1:46:ea:ce:dd:4f:1d:95:8c:a7:2d:c1:
52:27:5a:86:2a:27:37:a2:fe:ac:b0:dc:f3:1b:f2:43:cd:bd:
a9:d6:79:da:43:86:e9:95:2f:91:0c:38:13:99:0a:f4:7c:b3:
08:5e:b6:bb:9a:8e:30:fd:e9:12:4c:98:d7:e3:f9:62:fa:76:
09:fd:f3:f7:c1:f8:55:b6:2b:48:d2:8d:a4:54:90:cc:40:d9:
da:97:42:4f:65:e6:31:b6:25:34:ef:bf:23:a5:f4:6d:0b:ec:
17:e7:64:af:bc:32:50:d2:91:d4:57:b7:bf:9a:dd:42:86:45:
35:85:78:c0:64:82:dd:cb:c6:e5:15:37:4b:88:4e:29:b8:88:
1e:9b:e4:30:f6:4b:17:74:7f:5c:91:c2:ae:e7:77:79:83:09:
e6:4c:54:e1:0e:eb:f6:fb:96:64:d1:e9:8e:7d:83:38:af:72:
66:5d:a1:8f:00:ac:28:c4:3b:49:9b:c4:dc:79:68:52:2e:b1:
5e:42:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:08 2026 by rpki-client