
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: z1gL5Z3v0Ah6IsUcblJLZk7LWUwOkVTFpT15qCtuGxA=
Subject key identifier: 97:C4:7E:DA:99:26:3F:C7:30:E9:6C:36:05:D0:77:CA:FA:6B:C8:E4
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 019D26CD021DFBC5FE9C7994AFB979F62542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 188C
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: 0CdqlW01ACbv3EQD2O6eNsK9tUw.asa (hash: 9WhwZoBfEGd5k4zvC4ZA/vr5vp3EXDon/OkKYutAIU0=)
2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: fhiHy0W3NGTUS0Gly9fPJ4Bt3WTiDLsXAp/++ElIVbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:02:1d:fb:c5:fe:9c:79:94:af:b9:79:f6:25:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=97c47eda99263fc730e96c3605d077cafa6bc8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:d1:e2:48:7b:2e:cd:80:40:40:6c:de:78:
3f:17:70:64:d7:b0:db:69:c8:bf:bf:88:d2:99:36:
78:59:5b:7a:7b:da:b6:4d:3e:2a:03:27:16:8f:5f:
86:34:3c:f5:31:8a:a5:f3:d2:41:9f:40:82:9b:16:
1d:a7:fc:9c:b9:c1:11:68:ad:b8:0b:45:7d:a0:2b:
8b:21:da:4c:31:e6:e6:5e:e2:36:36:93:3b:ba:99:
7e:37:2f:bc:d3:13:d5:94:50:b6:31:60:1d:66:4a:
d3:66:be:8a:20:55:d3:93:00:3d:7e:c1:13:ea:2e:
4d:7a:8b:c1:1a:d3:9c:e1:ae:4a:67:e3:0e:c0:3a:
29:c6:5b:2d:fc:0c:6b:2a:52:61:e8:46:fe:88:9f:
f2:30:bd:6b:a1:f0:e0:c6:00:ad:46:a5:0f:54:10:
10:bf:5a:01:ef:53:91:b1:10:92:ab:2a:f8:97:c7:
af:97:74:87:21:0b:55:e8:a3:76:17:43:f2:63:a3:
47:f3:05:7d:0c:79:85:c8:1f:eb:63:95:d0:ee:9c:
14:db:96:12:2b:ac:0b:64:0a:4e:76:48:3e:58:a3:
e5:c5:33:b1:32:ed:3b:2c:3e:96:77:8f:71:ba:02:
99:43:d4:00:ec:09:42:b0:70:6a:7a:d5:9e:20:05:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:7E:DA:99:26:3F:C7:30:E9:6C:36:05:D0:77:CA:FA:6B:C8:E4
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9a:26:c1:0c:b6:c3:79:0a:1d:35:51:8a:bc:77:5c:7b:8b:
f4:03:be:32:6a:50:05:98:8a:94:c5:60:a4:ad:4e:39:43:0d:
73:32:78:a0:11:db:4f:cc:1a:ad:17:c5:15:8b:f4:65:83:e1:
a9:e1:8b:99:b3:7c:ac:f5:b9:f0:f5:ee:6d:18:83:e3:57:06:
0f:c4:44:95:4d:17:8c:68:92:1f:61:ad:dd:c5:ae:cd:08:81:
94:3f:13:b5:9b:59:0f:c6:30:d2:5e:a1:5b:41:29:4c:7a:34:
cb:b2:de:c2:70:c2:c6:d4:ab:dd:4e:00:6c:5b:85:f3:4c:7a:
f0:25:fb:7a:21:99:fb:05:7f:ee:04:39:67:e0:40:12:43:bc:
3b:cd:81:94:46:c8:21:24:df:9f:25:cd:1d:13:ae:04:34:2f:
92:4c:01:c6:9c:3e:e7:2c:b2:87:eb:74:f0:e3:d4:f4:53:51:
a2:43:62:a3:d8:2d:06:d2:36:d0:94:ad:42:fc:b9:cf:b0:a2:
e7:cf:3c:ee:a4:6f:f8:f4:dc:33:6d:b9:d0:e4:96:7e:f1:8e:
0b:8a:99:ce:2c:4b:1f:23:75:1e:43:07:d4:41:30:4b:3d:19:
28:ed:d2:82:f0:77:5e:ee:61:d3:93:4b:e6:c4:d5:ca:91:64:
6e:ed:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:06 2026 by rpki-client