Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: omRHTMk1QCIYeVo7Ll1kNl9rj4ZkrBho6TDNssyya+U=
Subject key identifier: D6:85:11:ED:BF:71:8F:8F:10:22:6D:C7:EB:2A:EF:09:89:1F:32:9B
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 019D284DA1DCEC7128AC8894952FDD64DCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: nFX+EXOtXu6nMfO/fIJP2z3sK+swwZniM9aoVdW29/c=)
2: M7U-ppZwsd4Y0hqrg3uFvL3fNF0.roa (hash: V5ZqVNY/FzC23usoRi5oNuuG/BK57r9pMG9x1bcd1BQ=)
3: ZD6ajEH0bv8mrB6nbh6DLa6EVFo.roa (hash: mzlpti+1V/oTEeIRtH/QUHo9IeJTt/iu7YBQ2fE92aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a1:dc:ec:71:28:ac:88:94:95:2f:dd:64:dc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=d68511edbf718f8f10226dc7eb2aef09891f329b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:e8:ed:85:7d:9d:07:45:f2:fd:74:43:d1:
bb:93:fe:10:79:92:12:d6:89:cf:38:00:b4:4c:1a:
88:98:64:62:47:14:52:0a:35:f7:40:e9:9c:11:8e:
85:6a:d3:06:f9:f4:fd:2b:09:f3:f0:b1:97:27:9d:
06:30:ea:cb:76:a5:a6:8c:57:43:37:b5:ae:2c:dd:
8b:34:1c:cd:60:24:a1:5f:09:f6:96:a4:ad:61:82:
ff:b4:56:d9:3c:93:8a:bf:e9:f3:56:91:bf:65:ad:
36:e3:00:a4:c0:31:6c:83:a9:04:f8:ff:92:2e:69:
6f:69:b3:c7:4a:ca:92:dc:e2:12:cb:87:2f:a4:ae:
bd:a1:43:cf:ce:b2:4d:e9:27:31:dd:04:fc:34:50:
64:08:b6:1c:20:21:75:32:38:48:93:68:9f:99:d9:
a0:f3:24:18:79:c7:25:82:f6:57:c3:00:83:d4:f0:
10:e2:46:a0:c2:ab:a3:c2:eb:ca:0e:8f:f3:e4:26:
d7:bf:06:4e:3e:7a:b2:5b:ee:ae:ae:6d:cc:3d:1c:
a5:04:ed:ba:f3:7c:69:6c:3a:a4:72:4e:20:2f:73:
d3:29:4e:25:3f:78:3f:62:f8:f6:bc:c8:fb:a1:6c:
c6:9b:6d:3d:e9:db:e4:76:93:e0:46:4c:fa:a4:df:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:85:11:ED:BF:71:8F:8F:10:22:6D:C7:EB:2A:EF:09:89:1F:32:9B
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:68:1f:e2:14:eb:b3:b3:ef:4e:69:2b:9f:e5:ae:33:dc:
81:10:70:35:18:53:88:89:93:bd:4d:68:d2:4c:7e:88:6b:23:
b6:d0:df:8a:15:82:42:e9:f1:44:91:68:a9:cb:c8:22:af:55:
c2:a1:b8:e3:99:ab:8f:46:89:df:d6:30:96:67:30:97:0e:3f:
17:09:38:8c:81:de:2e:1d:a4:3f:7a:b7:65:b2:24:2c:61:37:
21:40:7c:70:59:03:9c:b5:68:ba:2d:00:89:ae:e3:8c:3c:40:
55:ea:b2:9a:34:f6:c9:4d:32:86:6a:e2:9f:59:5d:3d:af:ad:
2a:c5:04:45:58:76:e7:73:d6:48:b4:84:f5:14:71:bf:ee:10:
a8:66:ce:34:ea:52:08:d5:35:1a:f0:a6:de:bb:e7:33:4b:82:
64:e9:68:05:fb:91:32:0d:91:ca:ea:aa:3f:92:6a:a5:c9:90:
05:01:60:63:f1:40:04:42:fb:cb:df:1a:53:0d:51:3d:04:87:
f6:93:db:88:82:d4:76:dc:f3:31:fe:40:c4:57:1d:83:6f:3e:
25:a8:35:c8:5c:0f:d9:92:ba:76:7e:64:78:f4:99:2e:3a:70:
28:42:2b:10:a5:17:26:74:91:5f:71:ec:5f:71:cd:3f:5f:ea:
11:b2:d2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:04 2026 by rpki-client