Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: GJUQIcGQYSQ/T0jCsMFkDXtYBE/LcpaIgMCcDeEcoTk=
Subject key identifier: 6C:A7:3F:F1:EF:9B:1D:E5:B8:C3:97:18:E0:82:21:F6:BF:1B:95:AA
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 019D25F12A02D3B4F719C3FE34DA3DDA6FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 15A8
Signing time: Wed 25 Mar 2026 17:00:54 +0000
Manifest this update: Wed 25 Mar 2026 17:00:54 +0000
Manifest next update: Thu 26 Mar 2026 17:00:54 +0000
Files and hashes: 1: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: NkbZiwcFElcla3jXm6kGnJRPMvDOT0Cbad6BGr/i+QQ=)
2: sR4ns811nFIbjvjg3wltUzH6BEI.roa (hash: ZbJugbRHpIt2Y4hqLk7H0rTD6BGfncHuX2f1Y5HnqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:2a:02:d3:b4:f7:19:c3:fe:34:da:3d:da:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Mar 25 17:00:54 2026 GMT
Not After : Mar 26 17:00:54 2026 GMT
Subject: CN=6ca73ff1ef9b1de5b8c39718e08221f6bf1b95aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:01:79:8d:91:c3:92:f3:27:ad:70:ef:b4:
8e:86:e4:b8:32:99:51:1a:0e:a0:52:55:7f:20:7e:
a9:ff:9c:72:e6:87:df:e2:e5:23:8f:01:44:86:c8:
2e:64:87:c3:fe:82:8e:05:9f:11:c7:e8:2f:f2:05:
11:02:3d:fb:fd:01:73:d1:25:5b:64:d9:30:65:06:
45:b5:b5:1a:56:5d:e2:1c:ac:bb:9a:cd:e6:c1:1b:
98:6d:e6:30:fd:de:eb:c4:b3:05:81:b2:ce:75:65:
4d:e7:96:b8:e9:5b:73:45:10:c6:a3:42:62:c4:24:
d8:98:2f:ab:1d:f4:d2:94:d7:78:71:74:a3:ff:a6:
e9:6b:9d:78:5d:44:14:ed:22:c9:82:85:54:d1:95:
91:c7:ed:60:2b:2e:1c:20:5a:96:d7:86:c1:f8:7e:
9a:42:08:14:d3:a6:cc:ec:13:9d:6d:bc:22:b7:47:
c3:36:a2:dd:b1:99:ab:d3:3f:b8:9c:5e:d8:a2:f7:
70:82:ce:77:f7:e6:c6:1d:be:fe:5b:1e:61:51:49:
49:0b:e6:43:19:c3:1e:0e:97:83:a4:17:c1:52:3a:
cf:ec:46:1b:1f:ef:30:a5:12:de:f9:97:0b:5a:15:
07:38:e3:52:12:a0:6a:58:f3:53:ea:6c:b4:a2:10:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:3F:F1:EF:9B:1D:E5:B8:C3:97:18:E0:82:21:F6:BF:1B:95:AA
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:4e:f0:64:04:dd:ed:6f:f0:d2:5d:dd:54:85:02:ed:4c:
43:a5:58:e5:99:ee:ed:b3:3c:27:ff:c3:f8:90:cc:63:87:70:
c4:0c:01:27:19:4c:d1:25:48:31:b8:24:8b:a3:10:ec:23:32:
7d:dd:07:82:dd:15:ef:40:29:8f:3c:52:05:65:79:e6:eb:ff:
47:18:78:8d:c3:35:20:1f:26:af:32:80:64:cd:37:8c:5a:39:
40:a6:26:35:c8:67:74:5f:bb:a6:ae:8f:79:50:da:f4:9a:5b:
0c:1c:2c:81:24:c2:55:4e:1b:f0:30:66:6a:e7:d5:60:49:67:
6e:93:78:a7:87:50:ac:fa:88:71:07:61:3d:59:7e:6a:24:e7:
96:8a:d6:10:c3:4b:90:96:bc:52:56:e5:0c:7c:2e:9f:b4:27:
2c:21:0e:50:f9:bd:5a:bf:96:d4:4b:fe:0d:0a:a9:94:56:1c:
8c:c7:40:a3:d5:3e:5d:86:e2:04:69:17:6a:7d:14:08:b2:1f:
70:00:df:c5:2e:65:30:6e:87:b6:8c:84:9f:b7:59:27:9c:87:
72:43:11:6a:81:52:15:02:69:8a:a3:ab:a2:ca:ad:18:88:57:
1f:8d:91:46:f2:a1:11:80:92:46:d0:0e:5b:f3:68:ee:74:e0:
f8:58:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:18 2026 by rpki-client