Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: WBZtteJPk72BxMPZ35JVP8rlTgyOE07k9hsBV4mFNYw=
Subject key identifier: D5:4D:10:A3:47:10:AD:D2:1E:28:58:39:B1:84:B4:ED:58:B4:75:CE
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 019D390A468E77C787857685E6D56D3DC770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0C56
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: vSkxRG0D/f/pQXMGAuTUL1+m0o/mfOhU5JylyXyQ+cg=)
2: ame8Z_daacjlEpmtE4K5w-dphW4.roa (hash: +YVtLUb/550grkiEIWmP1qcdaH2cQJ56+a6ZIvzeo2Y=)
3: b336X3WeMeMqlclahAX3Nlijuow.roa (hash: qBZyaLyDbfB2OL3m5O3Gqj9tW/vJBs1SdtUmTpwnruE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:46:8e:77:c7:87:85:76:85:e6:d5:6d:3d:c7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=d54d10a34710add21e285839b184b4ed58b475ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:09:90:47:7e:04:ed:58:0d:af:68:24:c9:
04:e5:61:cb:dd:93:80:a7:4a:25:b3:3d:81:24:a2:
3b:94:7d:c8:05:b6:29:4c:f6:1b:cf:6a:65:5e:b3:
ad:05:c1:42:b2:18:63:b8:67:92:38:84:7f:50:06:
b4:5a:38:7a:96:13:97:d7:21:44:7d:54:e7:2b:32:
51:c4:47:dc:7d:17:b7:0b:f3:04:61:73:8a:c8:f6:
50:2b:dd:66:bd:4b:ff:fa:ea:92:fe:14:dc:19:85:
c2:31:3b:76:34:af:2b:ca:72:43:2a:07:df:a5:52:
4f:ca:56:f4:87:3c:24:00:b2:46:f3:29:18:de:50:
67:38:b4:a9:a6:e1:96:08:65:56:06:ca:15:ad:7e:
74:87:eb:8d:a1:dc:b0:07:1a:30:67:1a:9e:8f:53:
ab:d9:03:a9:94:67:11:46:28:d7:c9:ba:3c:0f:f9:
87:93:7e:ad:ac:dd:dc:45:a4:a6:77:7f:9e:2e:f3:
ab:f7:bf:00:5d:d6:50:aa:a7:b2:0f:b3:d2:96:6a:
51:03:81:1a:db:bd:5b:b4:81:19:be:77:35:a6:ed:
0f:4c:8e:ab:6b:b1:ec:82:f1:7f:de:78:a2:65:79:
a2:a2:10:3d:5a:ec:8e:2c:32:ed:6f:92:e0:32:a9:
e2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:10:A3:47:10:AD:D2:1E:28:58:39:B1:84:B4:ED:58:B4:75:CE
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:65:bb:5a:a4:4f:5a:8e:c4:e5:a0:fa:14:3e:94:ee:15:f5:
44:cf:94:cd:31:c7:55:b2:b2:bb:99:a5:90:81:7e:a1:92:c8:
02:ed:e0:4a:bb:d2:3b:01:04:61:f2:05:35:23:bf:50:e2:d9:
5f:ae:bb:90:37:21:6f:6d:8d:d8:79:57:96:a9:2e:44:50:08:
43:2a:57:62:2d:cd:18:2e:fa:af:e9:cc:6a:20:dc:c0:53:ea:
40:c0:47:82:30:95:5f:9c:b3:bc:cb:c7:8d:8f:a5:29:c0:3a:
a2:bf:ce:df:6b:23:72:b8:25:2d:f3:3e:e0:33:b8:27:ad:4e:
88:d6:b5:7c:da:5e:82:bf:d1:96:f6:3b:c3:df:3c:0d:c3:5b:
ac:fc:b7:10:6b:fd:d8:3b:d0:f0:a2:1c:fd:63:c4:61:73:c6:
be:14:e6:57:d4:ef:b8:4c:36:62:91:2f:99:a5:01:e3:c8:41:
1b:09:e4:90:ac:98:aa:04:d8:bb:11:1c:ee:f2:a2:7d:94:6b:
a1:0b:48:e5:8e:46:9f:d1:98:1f:e1:4d:74:38:91:c1:72:2b:
01:63:5c:00:75:75:22:fd:70:f3:ee:b0:3b:20:8e:65:74:c8:
97:c6:81:14:fb:8a:14:76:57:0b:83:07:2b:91:ae:54:0e:c3:
51:b9:c6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:38 2026 by rpki-client