Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: lZU0r9yw+oDtwZ1fdCuum8jO/49FK2bTPy+2CaAXlAc=
Subject key identifier: A6:E2:AA:2C:87:EF:DF:1A:59:46:00:76:93:04:82:CF:85:38:DB:95
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 019D292939E1DBDAC160D7A162E4865E37CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 084A
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: +39xlQ47gRAiTIuZhMuTziLw5tJT7eLCIyFyOfw8+m4=)
2: u4vgRPiGJN_uy7XS4Ei6ANq07Xk.roa (hash: B983HqaReMNEcqs8+hdzrl8wmUkdYz1ezJd1jwO+3yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:39:e1:db:da:c1:60:d7:a1:62:e4:86:5e:37:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=a6e2aa2c87efdf1a59460076930482cf8538db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:2e:60:54:c5:56:61:ea:bc:6a:cd:30:fc:
3a:1e:a6:53:c6:cf:00:0f:66:e4:d0:c4:2f:f0:14:
14:e3:59:19:bf:96:85:17:19:26:b2:30:65:1d:28:
55:a5:e9:ef:6f:84:3e:f5:94:ce:61:4f:98:96:e8:
3f:7e:17:3a:b0:0c:c0:bc:24:92:4f:20:ec:d6:3d:
a0:c1:b8:fe:c6:f4:5c:f5:6b:b2:db:e7:35:bf:28:
9b:02:4f:f1:d4:98:f3:10:ff:2b:74:9a:fd:54:38:
37:4f:b5:c0:f2:0e:24:bb:c1:f5:8b:a0:d6:06:c0:
a7:e6:b5:82:f6:b0:cb:97:3a:7d:ee:85:89:67:8b:
6a:7b:ee:e3:65:9a:dc:bd:31:6e:7f:32:f1:7e:d2:
dd:51:f7:23:9b:93:d5:cc:d0:d1:84:c2:f3:99:d0:
ea:14:db:6c:78:4e:2c:b5:32:f8:c0:1d:26:05:be:
73:f7:26:fd:71:c8:e6:0b:8c:43:9a:77:7f:2d:8e:
51:e8:88:a5:2c:0b:66:f7:ae:d0:44:b6:2e:10:79:
9b:7b:23:ae:de:ef:d4:06:88:7b:e6:e9:27:2b:64:
65:6c:d0:86:06:52:fa:82:e6:3a:33:2e:15:af:d1:
6d:88:da:14:11:6c:64:7a:da:69:3a:a5:4b:8a:4b:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:AA:2C:87:EF:DF:1A:59:46:00:76:93:04:82:CF:85:38:DB:95
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ff:c7:9b:7f:27:7b:e6:8a:95:b6:73:43:97:35:07:b4:a2:
6b:82:6c:24:f0:e8:cb:b0:d7:a3:09:85:84:bc:27:eb:04:d3:
a8:04:0c:aa:ef:de:a2:c0:2e:6f:b7:f3:7f:ee:c6:1e:09:c9:
fa:6a:59:57:a9:e5:cc:d8:07:b7:a2:25:bc:2a:05:de:cc:cc:
09:88:32:a0:62:6a:de:79:c6:7e:00:74:4f:60:6a:75:fc:15:
fa:85:44:34:36:bf:72:5b:aa:d5:89:57:90:b5:a6:07:69:b0:
b4:34:6c:61:83:90:03:92:57:18:fd:5e:36:b8:17:07:4b:72:
7b:e6:f1:0d:38:af:31:92:34:b3:05:00:32:8e:fe:a7:86:7a:
b6:1a:c3:b7:50:dc:f1:e5:70:14:65:74:4d:88:08:96:90:79:
f1:83:32:1e:98:49:62:3b:41:33:af:ae:19:5e:b8:da:3a:fc:
01:ff:d9:66:48:71:20:29:8d:ab:9e:9b:60:4b:d5:47:a2:c3:
99:27:88:ea:82:d3:f0:ce:6e:10:33:d2:52:86:eb:0b:be:d2:
b6:0b:c1:6d:5c:2b:3d:8f:b8:15:7f:87:f1:20:cd:62:46:07:
00:02:62:1b:ea:77:9b:e0:db:ce:51:78:32:4a:38:36:3e:e6:
e9:c5:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:43 2026 by rpki-client