Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
File: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft (raw, json)
Hash identifier: Hj3LWLcz2+1ioQB435dGSEQHYS+3Rp7iq2qAshRDm5g=
Subject key identifier: 26:76:A0:B1:31:1B:70:12:F8:3F:C8:68:29:D5:F0:18:F2:04:1E:E0
Authority key identifier: 23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
Certificate issuer: /CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Certificate serial: 019CF45FFE3F025E2C78E1A5EA2132A80535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
Manifest number: 0D
Signing time: Mon 16 Mar 2026 02:00:57 +0000
Manifest this update: Mon 16 Mar 2026 02:00:57 +0000
Manifest next update: Tue 17 Mar 2026 02:00:57 +0000
Files and hashes: 1: I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl (hash: inXu4MraJHg0Ae+k1tsIGRB5rxdJi5DX4XvO+IDoDz4=)
2: M_CYpRI8SqN2pbVtKePdOnYWUSE.asa (hash: M0fsFeA37g+aMXBHQ8+8jEtPr1DuQjy82Sio4c1x2i4=)
3: b1swFPJJREwO7cx297uALIQsAqo.roa (hash: OKc3LjMWMxGzGg+rjr90PHIdb2q9ia63zVSKKzhRN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:5f:fe:3f:02:5e:2c:78:e1:a5:ea:21:32:a8:05:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23fd1aa19e5932f24c2777e7ec18d8a6ca924c5e
Validity
Not Before: Mar 16 02:00:57 2026 GMT
Not After : Mar 17 02:00:57 2026 GMT
Subject: CN=2676a0b1311b7012f83fc86829d5f018f2041ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:09:c6:fe:7b:76:dc:1c:7f:1b:d0:aa:16:
34:94:63:aa:86:2f:56:b0:e6:47:4b:52:4a:62:90:
ef:91:db:d8:32:98:d4:95:aa:a0:14:12:6f:35:38:
fb:ce:a4:78:b1:13:dc:48:8b:71:3c:16:4b:9a:c5:
77:0a:d8:89:9d:02:0b:88:84:84:bc:4e:ad:54:d8:
f2:24:22:d3:ea:69:67:92:da:4f:67:f2:93:82:96:
93:17:50:ab:f0:2b:71:37:17:59:d9:39:bd:97:22:
2b:34:3a:14:ea:d6:7b:58:d2:ae:44:06:72:f7:f8:
90:8b:45:29:09:cc:c7:47:51:53:03:e3:1f:ba:f9:
cc:3a:c8:f5:bf:07:f0:86:d8:c8:01:20:26:c2:b8:
56:91:83:f2:45:b6:5a:a1:93:64:15:72:27:9b:3f:
ed:18:4f:7a:31:04:c2:d9:1f:bb:01:77:88:3d:4b:
61:13:25:6f:2c:0b:35:69:73:04:76:45:f9:f5:4b:
04:29:46:2e:1d:8b:0e:15:19:99:d5:64:de:9b:21:
d6:e1:2b:73:c7:66:49:70:7f:ec:bc:0d:a7:ac:b8:
2c:71:14:99:67:32:7e:ec:9f:14:d1:c8:78:3a:ad:
e3:0f:aa:84:39:57:0a:07:4e:03:16:97:01:b9:8d:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:A0:B1:31:1B:70:12:F8:3F:C8:68:29:D5:F0:18:F2:04:1E:E0
X509v3 Authority Key Identifier:
keyid:23:FD:1A:A1:9E:59:32:F2:4C:27:77:E7:EC:18:D8:A6:CA:92:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bb8b5c-4964-442d-aa7f-3fc54a76ced5/1/I_0aoZ5ZMvJMJ3fn7BjYpsqSTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9a:c4:f1:81:0e:8e:bb:a4:c7:d2:8e:22:23:e4:93:d4:27:
a1:9a:a9:9b:12:2f:19:ca:f0:af:68:0f:8e:76:ff:f7:22:a3:
68:10:cf:d0:0b:1b:2f:84:2b:47:51:8f:3b:5b:da:1e:5b:ee:
69:fb:d6:70:60:1e:e3:9a:e3:8a:73:a6:d0:c8:fa:f1:ab:65:
1a:1c:fa:3e:16:7e:de:25:4f:e2:3a:d9:c2:27:2b:1f:15:f3:
7c:5e:82:a1:8b:fe:e7:ae:43:d5:f1:eb:1b:28:1f:a1:e5:ea:
80:80:5d:cd:14:2c:b5:8d:3c:6b:d3:c2:c4:84:a7:7e:2a:3e:
19:4c:35:f2:37:22:e0:a9:1e:df:3f:cc:49:45:85:5d:89:1e:
6b:b2:b7:8e:29:7f:e8:ee:eb:87:51:d3:f3:29:9a:d9:fa:8f:
e8:fd:8d:fa:74:c9:51:2a:ff:53:07:d2:7f:66:35:e6:6e:93:
e2:fd:2f:9d:c3:a4:e0:f9:9f:d6:e1:f0:e1:48:e3:1f:d8:1d:
e6:de:00:11:31:70:b0:2b:88:f4:0a:58:34:72:65:a3:fa:34:
5f:cd:50:3a:cb:ac:40:9b:4a:dc:2c:47:7c:e1:4d:db:bc:88:
65:86:ab:81:a6:a9:fe:40:e8:e7:18:3a:78:99:c1:b4:40:fc:
9f:27:14:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:16:47 2026 by rpki-client