Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: ZNeby6mOa/iSa4Q1+JrfG+vskPScGvv86+0SrBv00PU=
Subject key identifier: DB:BF:44:D8:CD:81:93:21:7A:C9:C6:0F:DC:1E:AE:B0:18:48:B4:19
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019D2A3BA453FBD266AFC704A1048AB9AF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 13:00:44 +0000
Manifest this update: Thu 26 Mar 2026 13:00:44 +0000
Manifest next update: Fri 27 Mar 2026 13:00:44 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: GiMD83gMPkp6MKbrWQai9u2H4VA8s4I4VbbP4rz0AJ8=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:a4:53:fb:d2:66:af:c7:04:a1:04:8a:b9:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Mar 26 13:00:44 2026 GMT
Not After : Mar 27 13:00:44 2026 GMT
Subject: CN=dbbf44d8cd8193217ac9c60fdc1eaeb01848b419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:5a:5f:a8:7b:f7:27:23:28:5a:4a:f6:02:
fa:45:b9:f3:3b:d8:6c:bc:35:c7:73:38:3e:49:1e:
63:27:fe:da:9f:d4:30:95:81:57:47:4d:eb:b6:b1:
9f:cd:8f:9a:15:f0:3b:b1:73:6e:84:2f:d7:a6:6c:
1d:e8:8f:1e:3f:96:45:d4:77:6e:a4:4d:96:ff:32:
f1:67:0b:e6:ca:72:84:83:29:84:ab:2f:a8:68:fd:
5d:c8:e3:82:9d:6c:3f:e6:23:6c:6c:ee:b0:86:05:
f1:00:6e:8b:f3:1b:da:d9:67:f7:fa:b5:a9:f8:d6:
91:11:1e:2d:36:0d:90:91:6e:4d:0d:9d:a7:77:2c:
96:ab:d5:04:7e:1a:5b:59:1b:16:e6:39:b5:72:5f:
80:9c:6d:db:d0:32:64:66:c3:80:2c:c8:56:a2:2b:
be:a7:43:84:83:81:1e:71:d2:04:a8:e3:28:18:9d:
b6:fa:cf:6b:9b:4d:a2:41:21:22:2b:9a:1f:f8:c5:
5b:56:cd:c0:1a:f4:fc:e2:69:fc:d6:7b:b9:a4:0f:
34:51:bc:68:ea:47:ad:45:40:e3:f3:05:14:82:37:
60:3b:2a:29:ff:3e:65:53:ca:20:5f:43:b3:6e:3e:
b3:1c:12:a9:d8:28:b2:70:99:89:a0:fa:4a:e5:6f:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BF:44:D8:CD:81:93:21:7A:C9:C6:0F:DC:1E:AE:B0:18:48:B4:19
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4c:22:c0:44:af:7a:fd:43:45:f6:12:5a:54:ba:3c:64:41:
72:01:f7:f5:94:49:75:7b:8f:3c:7d:df:a7:6f:20:84:f8:88:
dc:8b:2c:69:31:44:b8:88:e9:2a:b7:ca:c5:5b:a4:29:b5:65:
2e:33:b1:33:69:16:c4:50:e5:07:0d:9a:b1:b0:75:50:76:11:
02:26:7c:5b:98:d2:33:bb:c2:fe:eb:c9:4c:3f:87:6a:75:70:
79:05:56:07:a0:a1:82:4d:70:5e:5f:34:9f:6c:ab:35:58:42:
bf:2c:92:41:f0:dd:4a:89:48:50:25:e0:37:24:1d:4a:b1:85:
9a:76:8c:0d:88:4f:c5:48:9d:4f:2a:85:c3:77:d1:3a:35:1d:
d0:b7:84:2f:22:47:57:c0:b4:bb:91:26:3b:71:38:1e:e8:92:
b3:81:e1:5c:79:a8:48:5b:93:16:26:e4:1c:11:ff:17:f8:4a:
3e:0c:84:e8:c8:6e:9a:ed:cc:10:5e:3b:fd:49:37:b1:b8:48:
5f:b2:eb:5a:b8:f6:b0:d0:ff:e2:8a:0a:db:7d:0d:d2:2b:d6:
7e:ee:57:f4:bf:a7:2d:91:3d:d4:6e:79:a3:dc:d2:e0:8d:45:
22:5c:dd:43:fa:5d:73:91:0a:50:59:9a:6d:f8:58:7a:97:15:
d7:44:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:01 2026 by rpki-client