Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: 9IdFFf+AiZt313O2Xp5VAM618iRVivNGZhMX5olo9OQ=
Subject key identifier: 50:D8:8E:8F:01:5F:7D:7E:63:14:49:32:CC:1E:BE:CA:55:96:4E:24
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 019D284E4BF295FC47D9C41BB45F35104F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 0522
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: BWUwPoH2pcJOhmeyYhTxGsMWoYPXEc/W36C96fZ0kgw=)
2: siRrAgt6VgHA0m1baM4YFf-i5gE.roa (hash: H+L66KQaqxYD6TNvSo89HsSzeFEI3jv0iuGT7ONN7vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4b:f2:95:fc:47:d9:c4:1b:b4:5f:35:10:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=50d88e8f015f7d7e63144932cc1ebeca55964e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:07:85:e6:bf:36:d7:06:c7:44:69:30:9d:
76:c4:98:59:27:0d:d9:ae:29:0c:85:f9:08:22:cc:
b6:ed:d5:bd:f4:04:f0:4b:82:e2:1c:aa:c1:1d:a3:
df:88:97:39:e9:a5:be:f0:08:fc:e1:7c:45:12:d3:
73:94:97:a5:f0:41:88:f5:4c:5c:2e:b7:78:ff:f7:
b2:09:dd:25:e8:a8:a4:4d:68:c9:9a:2a:53:bd:67:
3d:21:82:fe:2d:aa:87:d0:02:1d:5b:5a:a6:75:80:
b6:32:11:5f:d7:dd:30:f4:d3:73:e1:73:7a:5e:60:
23:fc:2a:b2:fb:70:12:c1:7b:1a:c3:af:f3:63:89:
3c:7d:fd:e6:fd:51:70:e7:f2:40:7f:cd:f9:63:bb:
70:f5:3f:d4:46:05:49:45:40:10:be:3f:c4:a6:d0:
76:a3:67:e0:f2:dc:89:38:9c:8d:a1:8a:d3:cb:9b:
2c:23:36:59:ee:17:ef:b1:2f:6f:1d:4c:53:65:68:
e3:0f:45:f3:89:a0:f7:f4:be:9e:2e:48:37:66:70:
8b:7c:60:db:78:fc:d8:0a:b3:32:3c:51:7a:d6:3c:
1d:7b:2c:22:12:cf:c9:e4:83:3e:fd:de:65:15:93:
c8:da:46:70:3f:60:6f:18:47:01:85:5a:6f:59:60:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D8:8E:8F:01:5F:7D:7E:63:14:49:32:CC:1E:BE:CA:55:96:4E:24
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ce:38:1a:09:78:75:e9:51:57:9e:de:cf:20:a9:c2:d9:3a:
38:b5:6b:2f:01:86:dc:50:ea:55:dc:66:91:a4:fa:f0:60:88:
1b:b7:dd:72:2b:b9:a5:07:6a:5a:48:4e:62:02:87:fa:54:87:
82:07:dc:ba:f4:90:9e:f8:68:f4:a0:e5:9a:38:3d:1b:a3:b7:
02:d1:d8:02:8e:37:9f:9c:8c:a2:b4:55:00:e6:c4:74:bf:36:
59:67:85:3b:c6:99:1b:ae:d7:e6:04:2a:d9:a1:ec:c9:69:93:
e0:49:84:63:bb:16:57:74:10:e1:ef:f1:5f:93:83:9f:46:12:
fa:fb:61:a9:f2:f6:54:75:8f:32:f7:fc:3c:b6:c6:ce:f4:5c:
e6:f9:4a:f5:65:94:ef:ca:62:fe:d7:bd:c9:f0:d5:91:83:2a:
f5:40:8d:f0:f6:78:e9:3b:76:fe:be:85:a0:dc:93:45:71:83:
e0:b9:af:ac:06:49:27:a5:0a:93:70:61:ff:51:f6:2d:4b:db:
53:80:46:8a:71:e8:b8:ac:6e:c0:4d:09:fd:ae:2b:08:00:cd:
74:5a:92:14:86:90:76:f8:85:67:25:dd:e5:25:b6:dc:64:1d:
e5:80:fc:2e:ad:41:e9:3e:f0:d3:00:67:1a:8b:f9:1c:49:f8:
b3:7f:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:04 2026 by rpki-client