Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: K52Z9aLWQSoXEt2LqqlqZcDCW0wLWwCd3yTOfUx6zkM=
Subject key identifier: 69:BE:87:21:84:5F:7B:C4:48:6B:52:87:75:C0:5E:84:7D:18:4D:75
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019CE66D7EED46A9F91088323541C4E27AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 09:01:01 +0000
Manifest this update: Fri 13 Mar 2026 09:01:01 +0000
Manifest next update: Sat 14 Mar 2026 09:01:01 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: Z0HwzBfSLROmnjon94VgL8HSjpSqjfVJLMj1CX59qMg=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:7e:ed:46:a9:f9:10:88:32:35:41:c4:e2:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Mar 13 09:01:01 2026 GMT
Not After : Mar 14 09:01:01 2026 GMT
Subject: CN=69be8721845f7bc4486b528775c05e847d184d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ae:27:76:b7:80:d9:c5:fc:04:12:4c:08:92:
f4:d6:9d:d0:7f:93:d0:4f:85:f3:46:9a:4e:90:ae:
bb:9d:ff:95:27:9c:70:2b:79:70:22:fe:25:98:3e:
de:9e:b0:71:18:39:88:88:d8:19:a3:c4:de:ca:cb:
4c:0a:8d:db:ac:43:f7:29:94:76:22:b3:be:3f:1a:
1f:62:80:55:7d:48:d4:59:91:f6:cc:59:ca:17:5d:
d3:4b:39:c5:dc:be:0d:2a:18:39:26:07:3c:cb:3a:
f6:07:dd:aa:b7:3c:70:65:05:00:bd:ba:5c:cf:28:
98:d7:19:c4:8b:51:9c:ab:87:63:c1:c7:47:3a:2e:
8e:33:b6:c1:0a:19:4a:14:60:76:1b:b9:ba:95:60:
0b:0b:35:0b:e2:69:52:c6:20:f7:05:0c:73:96:39:
25:af:4d:aa:13:62:ef:38:3f:8f:d6:81:ac:cb:67:
d3:b7:83:91:42:20:90:59:f7:14:db:0b:28:df:8c:
53:0f:f3:5d:dc:bc:2b:5f:fd:9d:6d:39:f7:a7:52:
bd:58:cc:02:79:9c:72:3a:29:c7:e6:a0:68:64:b8:
e8:50:60:f4:de:ae:4e:7a:df:d5:a4:47:ab:81:46:
b9:e5:a0:d7:15:a8:8b:98:4c:01:80:5e:27:f0:f5:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BE:87:21:84:5F:7B:C4:48:6B:52:87:75:C0:5E:84:7D:18:4D:75
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ee:bf:5d:3b:db:a0:bb:b6:c1:0c:29:f9:3d:ea:7e:65:6b:
d1:f2:26:4e:81:45:d2:3d:a3:3d:ab:6b:bc:9c:f6:88:cc:c7:
c9:b0:e9:52:46:63:ff:fb:2d:24:f9:ae:e6:8f:ad:95:f2:e4:
c6:8b:8e:b0:1e:04:7b:5d:69:49:b7:82:13:94:1f:fd:2c:80:
70:c0:8e:d8:57:be:9e:d8:9c:a9:11:bd:4c:fa:42:f3:9b:ab:
1e:cc:7c:9b:c9:4c:bb:4e:ca:e1:a7:fe:e0:18:5d:ad:c5:83:
8f:39:50:b0:77:f2:74:c0:44:91:7f:18:fe:60:17:f5:23:0a:
fa:37:2d:2a:49:11:78:60:f3:59:67:57:0b:89:61:e0:83:a2:
f7:23:69:4d:b6:4a:59:44:64:3c:ee:5b:70:fa:00:33:87:e1:
cb:6a:c5:13:38:31:79:d1:5c:86:2f:70:35:fe:07:11:66:83:
da:d6:52:17:3e:4d:da:00:9c:20:a2:80:b5:71:90:5c:88:83:
18:ec:ca:48:f9:7a:ef:f0:21:e2:54:07:e3:e8:f6:b4:64:b5:
c7:f1:90:46:0c:9c:ac:b2:c4:d9:4c:8a:63:00:2e:58:4f:da:
60:17:0e:67:e1:e9:20:98:c8:d1:bd:4f:e4:82:ce:70:16:f8:
1c:1a:ce:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 18:16:28 2026 by rpki-client