Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: s7/mL7xMbo8Xxnio6QmGx5BFShlCxmutCw/GtA26fzM=
Subject key identifier: 1E:7C:DF:68:17:35:A7:FB:7B:2F:A7:D3:79:56:56:5B:CA:AA:47:BB
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 019D2772E2D8D46A7D813812B89DB8DEC1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0F43
Signing time: Thu 26 Mar 2026 00:02:13 +0000
Manifest this update: Thu 26 Mar 2026 00:02:13 +0000
Manifest next update: Fri 27 Mar 2026 00:02:13 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: Sn2gucOqPa8Mpf+rIqQ+eL3Mow5L7SeJxC4I6lg3huw=)
2: LIiML1O5GYrYT2OXv04_3crEOSo.roa (hash: GEv40+sowJMzMWvtaNBUTp1Lf4CV4ySJkJ0S9aCKf/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e2:d8:d4:6a:7d:81:38:12:b8:9d:b8:de:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Mar 26 00:02:13 2026 GMT
Not After : Mar 27 00:02:13 2026 GMT
Subject: CN=1e7cdf681735a7fb7b2fa7d37956565bcaaa47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:b4:7e:79:63:fa:67:fd:b9:61:e0:7b:bf:
57:b6:4a:4e:58:4d:8c:d2:5f:69:5a:4d:09:a5:aa:
03:7c:6d:b6:48:38:77:9a:1b:ff:d0:b3:bf:ad:eb:
8e:7a:8b:c6:95:f0:71:81:da:4e:54:df:40:d9:8f:
04:bc:bb:78:b1:10:de:47:21:74:49:a0:fb:95:8a:
90:c4:e6:81:6b:6a:87:f5:16:5f:8b:96:bb:95:ba:
fa:a3:38:2c:40:f9:46:6e:b2:44:42:da:74:ea:07:
23:c8:82:a7:91:c7:c5:f9:d6:6e:32:13:3c:cb:49:
40:11:75:65:3d:aa:7e:52:04:20:7b:fc:a8:57:88:
5e:21:b5:05:fe:fc:64:04:cc:83:1c:ea:54:b7:68:
4e:a2:b8:ae:a0:43:13:e1:2b:58:ef:56:d4:99:cc:
3d:ef:4c:0e:2c:7a:54:ee:87:a5:38:d8:50:60:13:
76:19:66:fc:0f:e2:f9:35:d2:2c:b6:49:df:fc:80:
11:c9:e5:25:15:c1:c9:7b:61:17:cb:d6:93:e5:c0:
f0:bc:d6:eb:b7:c6:a4:2b:34:79:21:81:28:c4:20:
5c:30:2d:1d:3e:7a:7e:f4:73:e4:81:b0:e5:00:8a:
5a:ba:05:2c:df:a7:e7:7e:5c:2e:19:62:7f:42:4a:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:DF:68:17:35:A7:FB:7B:2F:A7:D3:79:56:56:5B:CA:AA:47:BB
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:06:c7:58:76:ec:ae:b6:86:bf:9f:8b:d4:41:1a:cd:df:53:
73:67:ff:c2:7e:c9:ad:96:6a:c0:37:50:a4:79:fb:3c:04:49:
67:3b:49:25:f4:35:84:5f:d7:c3:43:3d:aa:be:b7:de:42:79:
f3:9d:f0:61:7f:ba:87:a4:44:28:38:f9:a8:f1:32:71:2b:1d:
66:c6:75:47:f8:56:59:27:b2:93:23:a7:e7:6f:0a:8f:7e:eb:
ba:44:c4:5b:81:ab:e1:59:ab:60:e3:a1:39:b8:47:78:bb:38:
aa:1a:7a:5f:01:3e:e3:90:91:47:7e:dd:15:eb:2b:4d:c2:7c:
f9:58:70:bb:b6:a0:d2:62:f3:c3:92:de:cc:5c:a0:01:35:71:
94:95:d1:eb:91:fa:ec:5e:6f:5d:d7:5e:bf:80:ce:57:a3:61:
3d:35:d1:d9:c7:56:ff:90:03:e6:b1:ad:c7:e3:1b:42:29:42:
e5:72:33:98:62:d9:24:85:9c:d2:bc:c4:be:de:c6:45:47:1a:
66:64:f2:6c:64:72:03:a9:35:67:ec:66:74:4b:7d:5c:10:29:
8c:14:99:11:af:b0:68:10:e5:05:51:92:ac:57:bf:84:75:7e:
13:74:96:c4:cb:f8:08:c9:0c:20:26:ac:40:cd:bd:73:27:52:
e5:fd:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:23 2026 by rpki-client