Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: GfXSxC535/B8cnNPHnHiVmZAXfCw9OaPNUt5eyLh4Is=
Subject key identifier: A7:37:3C:0A:DB:46:30:81:E9:94:1E:11:F4:9A:40:0D:34:8D:F4:88
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019D382E57B285D35909DB667C3FB668FD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:00:54 +0000
Manifest this update: Sun 29 Mar 2026 06:00:54 +0000
Manifest next update: Mon 30 Mar 2026 06:00:54 +0000
Files and hashes: 1: EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa (hash: 2NqTeKgydYUb/eDxmxXBdOU0et+RFyYo7oibb0+harQ=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: eD7zxGRRajyL5uSH/G1x30Flc11FAM7qKQ9SVGSXUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:57:b2:85:d3:59:09:db:66:7c:3f:b6:68:fd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Mar 29 06:00:54 2026 GMT
Not After : Mar 30 06:00:54 2026 GMT
Subject: CN=a7373c0adb463081e9941e11f49a400d348df488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:cc:e9:c7:ad:77:4a:23:34:77:00:23:15:
de:cb:5c:fb:f8:df:fd:a1:2e:30:29:80:a5:fe:0d:
2a:a8:82:57:a8:db:b1:98:96:40:9b:a4:6c:7f:f7:
d4:59:cf:ea:dc:07:db:19:b3:32:81:96:52:17:27:
f8:2a:1a:32:1e:6a:11:7c:93:3d:d4:9a:05:e9:bb:
34:26:5e:a1:8d:35:a0:c8:20:b1:42:ed:0f:7f:db:
41:16:89:ac:60:f0:e5:6e:a1:cc:ef:34:83:63:dc:
da:77:5a:3e:b0:12:df:53:35:57:c0:ab:ad:27:3e:
ee:cb:62:a4:18:ae:70:f3:a8:91:6d:1b:33:ac:79:
03:a1:14:d3:ac:57:34:a4:ce:b9:e6:09:92:e2:57:
51:eb:fd:18:36:25:d2:54:14:49:9b:80:05:3f:77:
b5:30:b1:2b:84:d9:d8:8b:3e:29:ca:cc:33:55:99:
3b:1e:12:c0:e4:16:15:cd:35:5b:d5:b3:23:d6:7d:
36:15:df:80:30:e4:a3:a7:89:79:77:50:30:f8:c9:
27:a8:54:db:b1:28:10:40:45:b9:e4:64:15:e3:c2:
90:e9:bb:24:9c:4d:6e:f6:bb:95:1b:3d:42:d2:dc:
b6:75:83:cf:73:23:3e:68:f8:a7:a7:54:d4:2f:4f:
6c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:37:3C:0A:DB:46:30:81:E9:94:1E:11:F4:9A:40:0D:34:8D:F4:88
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:03:22:61:45:80:8d:29:78:38:33:21:a2:4f:32:18:c3:
e9:ea:05:a9:d7:bf:43:92:bb:93:2e:ba:72:63:69:0e:10:0c:
60:55:9e:20:30:0c:ef:c0:cd:3a:9c:f0:a7:9e:08:71:6c:0b:
98:b0:34:7b:c8:17:96:bb:a8:6a:73:ee:a5:5a:13:7a:3e:f4:
b3:2f:df:49:0b:e6:fe:56:91:b7:58:21:d1:54:92:b2:14:21:
8d:62:e4:3d:c5:6e:8f:1d:6c:e8:3f:22:c7:eb:0b:e5:17:6a:
c6:3d:e5:fc:86:a1:79:4a:f4:ad:a4:9d:2e:82:28:f1:86:39:
68:77:99:d4:3d:4e:40:b3:00:c6:8f:9c:85:8f:53:1d:cf:ff:
a5:1b:d0:0d:62:f9:39:be:53:a6:a0:9b:9e:94:a5:54:00:8b:
68:e4:11:33:46:24:55:18:ee:4d:fa:66:a0:c1:c6:8e:0c:d9:
6c:80:c2:64:7e:52:cf:7b:8c:76:c5:af:8a:5d:a8:9b:e7:54:
23:76:97:27:03:ea:95:9b:f0:bc:bc:c7:18:e1:c3:f0:33:c6:
ca:c2:84:8f:57:59:f6:d7:0b:7f:55:3b:24:67:2b:eb:e4:b6:
48:1c:e8:64:97:ee:d1:a4:fd:a2:1b:be:76:e8:25:07:72:90:
da:25:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:47 2026 by rpki-client