Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: ACgdfg3f4XzhWKWbYIr0N3iFR0k55tfSqMznkLs1Xvg=
Subject key identifier: 1C:32:97:D3:21:B1:93:63:F6:F3:14:83:67:40:74:01:98:ED:02:EF
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019D37C0DA4F94F5D9F0CA8DF05F181A0D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 165B
Signing time: Sun 29 Mar 2026 04:01:18 +0000
Manifest this update: Sun 29 Mar 2026 04:01:18 +0000
Manifest next update: Mon 30 Mar 2026 04:01:18 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: aVs_pTCF35izq7eFYVQj7GDKKKg.roa (hash: HUtPfJfh73XSHYvTDAm1hqZnRW91m33+bqE8cdLnnnE=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: 7LA91ZD2dbl64O4WQGlQAdfwBTpbLMUDeTYoDsXJUDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:da:4f:94:f5:d9:f0:ca:8d:f0:5f:18:1a:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Mar 29 04:01:18 2026 GMT
Not After : Mar 30 04:01:18 2026 GMT
Subject: CN=1c3297d321b19363f6f314836740740198ed02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:96:67:0d:d0:03:bd:33:69:ec:3e:e5:a9:
81:09:d1:d3:11:40:21:76:ab:d6:3c:ba:c5:b9:05:
35:ad:a2:fe:3e:72:4d:fe:c0:7c:ab:ff:ef:9c:f2:
54:63:a1:d7:3a:16:76:6f:ac:0b:2d:b9:6a:3d:4d:
f4:3d:05:10:27:93:e1:08:05:01:ac:81:ff:51:be:
00:c9:12:2d:95:d4:93:f1:d4:b0:d8:64:57:fa:e5:
ba:6e:15:1e:2d:14:68:4f:8f:fe:b3:33:d1:98:1b:
8e:cf:e5:5d:d4:71:ec:d4:ff:ab:7e:86:df:ed:87:
34:53:04:57:e6:9c:20:a5:c2:46:65:5b:b6:7e:ba:
6d:f5:f6:ee:e6:39:fc:e2:4a:98:c4:72:5b:1f:5c:
8b:ac:92:3c:ab:77:ca:b0:cd:cd:67:eb:9c:07:2f:
85:9c:cf:68:ad:62:69:5c:1a:b1:29:29:71:2c:fd:
e7:7a:2b:85:3b:0b:72:2c:c2:29:92:c1:d1:22:6b:
8b:ac:b6:34:80:51:00:45:dc:18:e9:a6:b3:be:fc:
8a:34:f6:5a:33:06:02:e2:64:3e:79:62:35:62:f3:
c8:37:42:b8:04:0f:8b:ee:41:0c:84:87:d8:af:d4:
ac:b5:a7:9d:cd:6a:e1:4c:70:5d:cb:37:68:4f:4b:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:32:97:D3:21:B1:93:63:F6:F3:14:83:67:40:74:01:98:ED:02:EF
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e6:e2:8b:2b:df:d2:17:08:86:c6:be:2e:f6:ed:18:ae:7a:
83:a8:66:6d:1c:c0:43:73:d5:cb:63:2c:f7:c9:09:3a:89:ac:
f0:ed:7b:9f:75:09:61:94:bd:58:af:07:63:a0:63:f2:68:25:
5c:98:14:e9:14:02:10:3b:3e:44:c7:97:59:20:c3:eb:59:12:
76:57:35:9f:67:58:90:c5:2d:07:e0:45:4e:a3:32:6c:b5:3d:
71:75:b6:5b:94:50:c8:9b:5c:45:88:63:48:b3:39:b1:9b:97:
f6:a8:88:e4:c4:02:ce:45:b4:ea:e6:5d:cd:e4:1e:c7:76:62:
6f:24:f6:29:03:63:51:bb:35:81:13:be:a7:57:ee:04:4a:59:
1c:8c:52:7f:08:1a:1d:33:d8:cc:53:e6:a3:62:a1:d5:47:a1:
13:0d:3c:c5:a2:09:30:75:b5:fb:c6:7e:f4:7f:04:6d:5d:b8:
99:f0:39:8f:06:e1:48:0e:64:cd:6a:c6:fa:9c:9f:ff:b0:25:
ae:27:0f:c7:d9:7d:7f:6a:07:55:5b:72:ae:a2:ae:1b:4e:32:
16:54:8b:d2:3d:c6:14:ca:69:f3:ed:b7:c1:cc:98:07:03:42:
dd:86:fd:e3:5e:91:28:47:db:2b:dd:56:14:25:8c:61:2d:e9:
59:de:87:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:56 2026 by rpki-client