Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
File: iBLpJPysuGLPO2T1bnZ7wybyf8o.mft (raw, json)
Hash identifier: C+IhM72xYjUhIloi4vmqOYY9zcCsAMT4lxvpvy5V4Qs=
Subject key identifier: 70:A6:87:DE:BF:7E:C2:70:9D:8A:58:E1:4A:A6:68:67:15:39:A9:EC
Authority key identifier: 88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
Certificate issuer: /CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Certificate serial: 019D292900D9C8424224DFAFC2B4FC4FC2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 08:00:46 +0000
Manifest this update: Thu 26 Mar 2026 08:00:46 +0000
Manifest next update: Fri 27 Mar 2026 08:00:46 +0000
Files and hashes: 1: iBLpJPysuGLPO2T1bnZ7wybyf8o.crl (hash: JvteLeUwdsYdQOePEPVmb4i++U6wK2SgrfKg981c77w=)
2: tZEur65DZRQxS8J-3HPiT7ZHHZQ.roa (hash: QH0sRva7RS+lctZ8onEh+mUTqcR1lWAI/dUY/rIRqdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:00:d9:c8:42:42:24:df:af:c2:b4:fc:4f:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812e924fcacb862cf3b64f56e767bc326f27fca
Validity
Not Before: Mar 26 08:00:46 2026 GMT
Not After : Mar 27 08:00:46 2026 GMT
Subject: CN=70a687debf7ec2709d8a58e14aa668671539a9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:65:46:c2:9a:12:83:b3:1d:9b:58:bb:d8:
63:47:4a:9d:23:db:80:9b:ea:94:38:37:ca:27:a3:
58:a6:eb:13:85:fc:31:9f:15:08:1f:92:05:69:e4:
67:e4:25:18:01:aa:c6:2d:67:7b:6a:ac:10:15:88:
c1:8b:c1:0e:f9:55:14:a4:85:29:8d:05:73:1e:c9:
28:4c:aa:de:c7:e1:37:80:71:88:80:71:f5:09:0a:
bd:7f:8b:80:45:4b:88:8a:fd:c0:fc:3f:04:c4:60:
45:4a:06:06:a7:8e:42:2d:49:41:1f:c6:74:f7:65:
4e:0e:54:db:61:81:1c:4e:06:a7:dd:19:7e:d9:68:
7c:e3:96:7e:38:60:4d:3e:40:10:70:27:57:aa:90:
6f:04:b6:26:16:a1:e3:bb:21:9f:4d:3d:c8:78:7e:
64:ba:66:34:d0:f5:2c:03:32:22:32:cd:e5:a7:df:
04:eb:0a:80:11:ab:50:b5:c3:a1:dd:6d:c2:d9:e9:
8a:d1:16:cb:ae:1a:02:f6:c0:52:a5:04:5f:82:12:
66:28:d2:c7:cd:51:a5:52:b6:60:6f:55:d3:99:40:
03:9b:e5:42:65:e3:3f:44:96:12:48:6c:80:d2:f7:
21:c0:c7:f0:72:f3:04:35:86:33:44:2d:6c:fa:49:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A6:87:DE:BF:7E:C2:70:9D:8A:58:E1:4A:A6:68:67:15:39:A9:EC
X509v3 Authority Key Identifier:
keyid:88:12:E9:24:FC:AC:B8:62:CF:3B:64:F5:6E:76:7B:C3:26:F2:7F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBLpJPysuGLPO2T1bnZ7wybyf8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3a98e2-8ae8-4723-8959-ce2d8e3fc804/1/iBLpJPysuGLPO2T1bnZ7wybyf8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:e4:5a:fa:5a:36:4f:3e:73:5a:dc:19:c7:bb:4c:f6:20:
3c:19:b6:21:4b:d1:35:e3:6a:c7:d8:bd:3d:18:24:19:d2:be:
be:45:10:a5:ff:73:c2:35:29:9f:b3:bf:7d:fa:c1:bc:19:ae:
d2:b8:8f:1e:7c:bc:92:b3:f7:8b:8c:a4:1a:ac:93:fc:3c:4d:
40:1f:75:c0:2a:7e:3c:a4:93:f4:42:41:41:d8:b8:81:8a:2a:
a0:d5:b0:d7:93:4d:4b:cb:bc:e9:d9:e5:3d:c4:95:fe:21:02:
22:fd:2a:4e:6c:c5:50:8a:bd:f7:b4:37:6d:33:54:f0:55:c9:
04:da:87:59:05:c9:0a:8e:e6:6f:f1:f5:bb:f8:1f:ec:8b:44:
4e:cc:6d:a4:cf:37:6f:0d:17:4c:0b:02:eb:b7:70:9b:5f:61:
32:c2:ad:3c:3f:2a:67:ca:af:d5:20:95:2e:23:d4:ff:7a:52:
9a:1f:45:d3:97:01:9d:41:0c:f3:98:a1:81:ad:fd:e2:48:70:
82:bf:7c:09:25:fe:54:31:92:f6:d6:22:d9:4d:00:3b:b8:8a:
25:68:26:5a:f4:58:7a:d7:c9:29:99:0e:83:c7:e1:7c:1c:88:
fe:5a:ac:ea:1f:75:24:f4:85:de:66:b0:d4:81:c9:36:07:0e:
b9:6b:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:23 2026 by rpki-client