Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File: iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier: iFF6Q8uQoaOeUfOlAXSsiSAFiYt2rkdtedKSMrHTbIo=
Subject key identifier: 04:11:2D:76:C2:57:7A:A5:73:3A:DA:6B:10:5D:89:FD:20:E8:B4:28
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial: 019D284D9762CCD119E054E6F030096C4AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number: 1025
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: gKM1I6QA5j9PHAZvlqFqXjmcthC5+IMC07G5KPGnX0Y=)
2: yjCN4h-OQwH-dv_bxbcZqXCm3bE.roa (hash: p3KrL6JUxzdYriz06hWpPAtkTxaVZyDG1Zr5vFYZVTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:97:62:cc:d1:19:e0:54:e6:f0:30:09:6c:4a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=04112d76c2577aa5733ada6b105d89fd20e8b428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:63:ee:8b:9a:63:e4:7a:08:34:92:46:58:
08:a1:f6:be:3a:48:18:f5:e2:37:01:81:8a:f8:2e:
a8:22:c1:08:70:6c:eb:c7:69:65:f1:15:04:20:b3:
13:b4:2a:e2:a8:9d:52:e6:2b:f1:1d:bd:2e:17:f2:
4a:84:96:e8:db:12:f9:02:76:25:85:b8:f8:d9:9d:
54:6f:3c:bf:2b:b7:d2:bf:8c:3e:bd:d7:1f:2a:2a:
e7:9e:2f:b6:96:9c:b5:21:97:43:1d:ac:a8:46:ab:
4e:20:69:5d:cb:c5:5c:56:3e:79:87:8e:27:2a:dc:
0e:75:75:5d:6d:5b:1b:43:d4:f0:b7:11:d7:52:64:
d8:86:b3:a6:59:53:43:1c:49:2c:fc:22:a9:f8:f8:
a9:3d:48:73:36:f6:e2:6e:4d:8d:45:f0:94:76:89:
9a:6b:fa:ae:9d:8d:ad:29:a1:95:d6:ff:32:11:ca:
f1:5f:6e:33:e7:c3:7f:f7:3d:5f:07:55:4b:18:ab:
64:4d:dd:da:2e:62:f9:4c:69:2f:f2:d7:58:f7:1d:
b3:0b:cf:3f:95:03:8b:08:9c:f8:43:34:d2:18:b2:
6d:4c:fd:8a:5c:8d:9c:3b:cf:47:b9:50:f4:50:9b:
ee:d7:a5:0e:df:72:25:b1:58:da:23:f8:bd:d4:a4:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:2D:76:C2:57:7A:A5:73:3A:DA:6B:10:5D:89:FD:20:E8:B4:28
X509v3 Authority Key Identifier:
keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:c6:49:1b:6b:a4:66:29:2d:16:56:32:79:8a:c6:d2:7f:
d4:5e:0e:fc:b0:66:e6:33:c5:2f:20:e8:0e:b7:7a:46:47:32:
06:d7:03:9e:59:8d:71:d0:2f:f1:05:53:b9:a3:ca:92:3d:d7:
b1:0c:fc:31:ac:36:f4:fe:36:ee:5a:c3:87:b5:32:05:fd:4c:
4c:1e:10:f4:97:ec:5e:c2:55:2b:7a:b8:00:9f:ca:32:8e:87:
85:fa:a7:3b:b8:7f:45:21:d8:91:8c:10:ac:79:cc:ad:90:af:
22:fd:89:54:bb:6b:40:2e:50:bd:1e:82:47:30:4a:c1:c0:ac:
99:bd:61:52:cf:d0:5a:19:01:3a:92:2f:b7:1f:2e:ab:c8:9b:
dc:ee:c0:5e:6f:b8:d4:e9:c0:69:a1:cf:a1:e6:13:8d:0c:98:
c9:f1:52:22:58:8f:32:98:b8:80:ce:bc:20:fe:57:15:1f:59:
cc:ec:77:76:50:d2:ed:86:45:34:ab:dc:bd:72:84:64:7b:ad:
b6:2d:7a:1d:92:c4:c9:cb:84:05:66:c9:94:00:48:e4:cf:d1:
d2:1c:29:a4:3c:fc:23:62:5f:72:fb:6d:c6:8c:2a:3c:c0:81:
bc:7c:54:80:53:2f:e0:3a:df:47:c4:78:ba:9e:6b:a3:96:d9:
a8:3d:0e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTZdizNEZ4FTm8DAJbErZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWJhYTJmMTc2OWEzZGRmNjVmODczZGMzMWYzNTFlZjA3
OGFkMjUwHhcNMjYwMzI2MDQwMTA2WhcNMjYwMzI3MDQwMTA2WjAzMTEwLwYDVQQD
EygwNDExMmQ3NmMyNTc3YWE1NzMzYWRhNmIxMDVkODlmZDIwZThiNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNhj7ouaY+R6CDSSRlgIofa+OkgY
9eI3AYGK+C6oIsEIcGzrx2ll8RUEILMTtCriqJ1S5ivxHb0uF/JKhJbo2xL5AnYl
hbj42Z1Ubzy/K7fSv4w+vdcfKirnni+2lpy1IZdDHayoRqtOIGldy8VcVj55h44n
KtwOdXVdbVsbQ9TwtxHXUmTYhrOmWVNDHEks/CKp+PipPUhzNvbibk2NRfCUdoma
a/qunY2tKaGV1v8yEcrxX24z58N/9z1fB1VLGKtkTd3aLmL5TGkv8tdY9x2zC88/
lQOLCJz4QzTSGLJtTP2KXI2cO89HuVD0UJvu16UO33IlsVjaI/i91KQJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQRLXbCV3qlczraaxBdif0g6LQoMB8GA1UdIwQY
MBaAFIjrqi8XaaPd9l+HPcMfNR7weK0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEt
MmJiZjQ2ODg0NTg1LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEtMmJiZjQ2ODg0NTg1
LzEvaU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJivGSRtr
pGYpLRZWMnmKxtJ/1F4O/LBm5jPFLyDoDrd6RkcyBtcDnlmNcdAv8QVTuaPKkj3X
sQz8Maw29P427lrDh7UyBf1MTB4Q9JfsXsJVK3q4AJ/KMo6HhfqnO7h/RSHYkYwQ
rHnMrZCvIv2JVLtrQC5QvR6CRzBKwcCsmb1hUs/QWhkBOpIvtx8uq8ib3O7AXm+4
1OnAaaHPoeYTjQyYyfFSIliPMpi4gM68IP5XFR9ZzOx3dlDS7YZFNKvcvXKEZHut
ti16HZLEycuEBWbJlABI5M/R0hwppDz8I2JfcvttxowqPMCBvHxUgFMv4DrfR8R4
up5ro5bZqD0OOA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:35 2026 by rpki-client