Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: yc9olyjA0QmyxG2YM2ao+UJpzyqAkzx242WY05cWDQg=
Subject key identifier: 7B:FC:FB:64:6C:BC:26:4C:FC:E7:3D:17:A1:65:E5:AE:A2:EA:2C:68
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019D371C02D44E50ED27ACE194E4B82D925D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 15F0
Signing time: Sun 29 Mar 2026 01:01:15 +0000
Manifest this update: Sun 29 Mar 2026 01:01:15 +0000
Manifest next update: Mon 30 Mar 2026 01:01:15 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: z+u3OfxjDlrSbx/pDkblkcsl314nWqAczx0YxEt69iI=)
2: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
3: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
4: Tj3UKWYi9FJ5F2yO8PJYXbJpfc8.roa (hash: QB6C0uxCV7SQdXcJHImW1BXzGq3++ihGTPgOICCuJd8=)
5: VqflXfUXT1r0F0vbFqX9njzAbjI.roa (hash: orkUX8LGXJNzs24vjBzkiZQ785fRhIrV2ujjICNJPbM=)
6: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1c:02:d4:4e:50:ed:27:ac:e1:94:e4:b8:2d:92:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Mar 29 01:01:15 2026 GMT
Not After : Mar 30 01:01:15 2026 GMT
Subject: CN=7bfcfb646cbc264cfce73d17a165e5aea2ea2c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c2:b5:98:1d:dd:e3:20:35:9b:99:51:b7:49:
c6:10:76:7b:d5:7e:d0:34:5e:ec:24:4b:30:ef:89:
6e:9c:bd:70:23:11:c7:23:1d:d3:91:98:d1:4b:32:
d0:09:46:d0:82:6a:c0:f6:aa:1b:52:2f:9b:42:d1:
8a:a4:0e:60:76:c7:04:9e:b0:9d:ab:66:8e:9e:c7:
e5:99:0c:e1:5f:9f:9d:9a:5c:74:7e:75:c2:dc:e7:
36:ab:d0:f3:bd:5d:78:a0:75:99:b7:8a:d0:ae:c8:
6e:23:46:63:2a:b4:27:32:67:2f:a9:d0:9d:b9:14:
1b:70:9c:4b:a0:c6:d6:7e:c5:6b:ec:4d:e8:54:19:
dd:2d:6b:8e:13:ee:f8:de:29:cd:79:20:2a:ff:42:
b5:95:1c:d6:65:e7:a7:de:c6:0c:21:4b:c4:ff:80:
96:8b:25:38:f9:99:38:b3:22:23:0e:03:9a:62:55:
78:eb:89:35:32:18:aa:88:96:1b:d7:48:f8:1e:51:
80:58:19:66:7d:93:ee:67:ae:20:e9:39:60:2a:e2:
a8:da:0b:9e:3b:d9:a7:b1:51:2b:fb:1c:44:c5:e6:
8a:be:67:32:28:25:18:cd:6e:f0:d5:1e:e4:fe:7d:
05:ed:f1:8d:0d:e0:ff:13:31:20:aa:24:43:64:f3:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FC:FB:64:6C:BC:26:4C:FC:E7:3D:17:A1:65:E5:AE:A2:EA:2C:68
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9b:3f:ed:4b:fc:02:d5:c4:97:50:15:e8:1f:2f:ec:7a:da:
a3:61:24:94:3d:1b:8e:4a:cd:f7:5d:c7:51:ad:29:31:73:d4:
dc:51:57:d2:47:fc:d0:89:69:37:3f:84:4a:9f:c5:77:46:75:
ee:c0:dd:09:2f:86:c8:c9:e7:32:f7:83:23:99:7b:1f:7e:a7:
18:68:5d:50:12:67:bb:bd:2f:bd:bf:39:47:49:a6:45:63:00:
8f:ca:66:de:d5:4e:c9:ff:c9:46:92:e0:85:f5:0e:ce:bd:08:
2c:7e:c2:6a:af:18:1f:18:af:24:22:b5:9c:80:7a:85:bf:b1:
0d:2b:57:5d:4c:9d:f4:14:62:33:9e:0e:74:c0:9e:12:59:5e:
90:60:a1:e0:91:b6:63:7e:bf:4a:b8:29:89:ce:36:6b:fd:b3:
22:2a:74:97:40:33:27:20:e7:36:74:7c:c2:4b:c6:ae:2e:d4:
72:7a:73:d6:f0:3f:d0:d0:4f:e8:69:dd:b9:48:64:4f:2f:83:
fd:08:89:b2:29:74:2d:26:48:40:6f:37:fe:2e:83:e2:d2:61:
be:84:7a:b8:ad:5e:0f:76:b6:da:28:a7:eb:38:36:d4:e2:64:
41:d6:41:ca:e8:74:0a:55:96:2b:1f:94:9d:a9:98:5b:fc:d3:
42:bf:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client