Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: XZrNxi5H9nJWAZlROXRQVop5IclGy56nSjQB78MkAns=
Subject key identifier: 89:64:E8:71:4D:85:2E:8B:D0:6D:93:C0:0A:E4:70:C9:73:3D:AB:D1
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 019D371BD25C1BA6426E372EB56E8C66050D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 11FB
Signing time: Sun 29 Mar 2026 01:01:03 +0000
Manifest this update: Sun 29 Mar 2026 01:01:03 +0000
Manifest next update: Mon 30 Mar 2026 01:01:03 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: xvnCIXbNrKxsvmpVnEJSvhkalu+QukAlK4mcXY7StfM=)
2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:d2:5c:1b:a6:42:6e:37:2e:b5:6e:8c:66:05:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Mar 29 01:01:03 2026 GMT
Not After : Mar 30 01:01:03 2026 GMT
Subject: CN=8964e8714d852e8bd06d93c00ae470c9733dabd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f1:b7:02:f0:20:4f:3f:cb:91:5f:25:60:8c:
33:31:14:90:50:3b:00:b8:57:1f:58:d9:be:17:2d:
9c:23:43:ee:39:db:48:13:11:f7:7f:46:1c:57:64:
9d:5b:8c:32:01:86:04:f7:98:d6:c8:1e:00:78:3c:
03:40:8a:f1:91:83:d2:17:6e:85:a3:90:a4:51:d5:
04:91:08:24:9f:56:00:7b:17:a3:4c:04:2a:34:1c:
10:6b:cb:fe:63:76:a9:02:06:c9:75:9c:a6:f5:fd:
6a:c5:83:fe:b6:bd:ed:63:5a:29:a4:86:7e:09:1a:
7b:dc:b2:bb:d6:e8:7e:c5:15:b7:a5:48:45:80:31:
8b:e6:03:21:f9:a0:fb:a6:62:e0:33:66:95:3a:93:
53:cc:7f:a7:a4:e2:09:76:1c:80:07:5f:11:48:fc:
43:be:10:59:75:7e:61:81:90:63:36:b1:28:fd:a7:
12:d5:c9:2a:d8:e1:09:27:03:e2:07:e7:79:da:95:
37:bb:09:fe:3c:4a:12:2d:e3:14:ad:2b:28:9f:5d:
97:36:93:37:b5:91:fb:a1:29:06:13:99:12:af:e5:
3a:e1:50:68:f0:84:91:a2:70:c8:b4:69:b5:77:1f:
b9:99:a0:a3:4c:6f:a4:9e:d1:8b:3e:12:1f:f2:77:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:64:E8:71:4D:85:2E:8B:D0:6D:93:C0:0A:E4:70:C9:73:3D:AB:D1
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:df:ca:dd:5b:54:4a:09:5b:a2:42:02:5b:9a:5d:d2:cc:ee:
d7:49:09:4e:02:ee:22:a5:3e:71:ee:1f:9e:ac:74:01:2f:df:
a7:db:0f:46:be:58:b3:48:09:f0:42:e6:4e:02:52:bb:83:20:
a3:ba:b0:3e:0a:1d:50:b4:fd:85:90:ad:3d:c5:50:5a:0a:ff:
7f:33:ba:b0:7c:75:ad:ae:e0:d6:58:28:4d:1f:15:93:91:14:
30:cc:3e:7c:63:05:14:3e:f7:ae:c8:86:12:9e:89:ca:42:dd:
a5:6b:e1:8f:1f:f7:7c:1f:3e:4a:6d:51:1a:c4:11:cf:ce:9d:
97:d0:d1:f2:07:f4:a0:a4:7d:ac:30:7b:09:9b:b3:2a:d8:b6:
af:cd:a1:4e:f9:ce:04:8d:55:21:e1:e1:df:86:64:02:5b:82:
ae:b8:a4:90:7c:a3:5b:ef:9f:a5:1a:43:93:9d:89:28:24:55:
32:33:7e:80:3f:f7:70:d3:6b:f3:a0:80:92:b7:d1:4d:95:df:
56:17:0e:58:32:b7:24:22:c7:05:a6:d9:50:5b:8b:91:25:4b:
8c:b5:39:ed:d1:52:44:3f:e1:e1:5d:8a:8b:c1:b3:83:ef:cc:
7f:b1:ee:09:ae:bf:6d:7f:b9:88:74:f8:b0:6c:cf:4a:29:b8:
fc:3a:1b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:19 2026 by rpki-client