Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: uhcauZkVE/yxwuG8qQs724VmmDFFxhnqCGAZS2Gp2mY=
Subject key identifier: 3D:92:D1:BF:CC:ED:DC:21:0E:1A:C7:2D:C2:7C:3D:2B:98:39:0C:5F
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019D284D96C9C702AB416A3F185D209492D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: N2J4eRjux5MoHheURmn6R//y0wkrZ+8isOgXyKc7HNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:96:c9:c7:02:ab:41:6a:3f:18:5d:20:94:92:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=3d92d1bfcceddc210e1ac72dc27c3d2b98390c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:ea:63:60:38:83:f1:f9:5e:19:c3:21:08:
d5:fc:1b:71:3f:7a:73:b0:b9:7c:f3:a2:e2:6a:49:
90:3b:94:dc:76:ed:94:dc:79:87:c3:64:81:e3:f3:
22:ae:75:f4:d2:66:6a:e9:9f:c9:ba:3b:a9:51:1a:
78:de:24:bc:43:5c:20:63:d9:56:c6:04:df:1c:d7:
c4:95:71:42:66:05:60:52:44:c0:04:b8:fa:67:6f:
47:78:fd:ab:d0:da:19:28:a9:40:39:2c:6d:b9:76:
f1:dd:37:59:7f:c3:28:de:f4:b7:1f:d0:7e:bf:b9:
c1:b4:30:19:39:5e:42:53:bf:cf:98:90:d0:f9:8e:
aa:8f:53:5b:7b:23:4a:dd:a3:0e:e6:8a:7a:ea:d0:
6e:d1:18:55:3c:a8:87:f3:f5:45:de:31:64:3e:c9:
c6:16:4e:a3:dc:77:d0:ae:4b:53:8e:c8:8b:ed:4b:
c8:51:ed:f4:61:e5:f8:2f:f2:1b:17:ce:97:19:53:
f1:bc:b8:e9:42:61:af:11:ae:c7:9d:14:a6:9e:8e:
79:70:a5:f3:c1:05:1d:c7:8b:b2:6a:c4:03:bd:b6:
be:4a:a5:fb:44:08:e6:a7:0e:9d:57:6a:8e:64:87:
ed:df:78:93:29:25:53:cd:69:7b:66:79:7c:13:6f:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:D1:BF:CC:ED:DC:21:0E:1A:C7:2D:C2:7C:3D:2B:98:39:0C:5F
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f0:40:87:2a:03:01:6a:a1:31:3e:63:3d:90:ab:7c:75:ff:
18:fb:6a:5c:69:00:43:00:ea:a0:30:ef:86:55:c6:e3:54:59:
70:cb:01:8f:96:d0:e5:9e:13:10:c0:64:68:56:9b:89:00:2b:
f3:de:ee:c4:92:bf:79:b3:4c:a9:47:cc:79:5e:f9:d9:6d:cb:
22:85:88:5d:73:5e:86:67:3b:fd:44:7e:e8:f2:3a:05:54:c0:
4c:92:ce:5d:69:69:fd:fa:91:e7:34:6b:06:d1:72:53:6f:82:
66:ec:53:47:b7:47:38:10:77:1d:56:ce:a3:83:0d:c3:c7:52:
ff:fd:8b:4c:f0:64:af:a6:52:48:a3:62:1a:9b:e9:3d:ab:00:
e0:2a:6e:ad:b4:6d:82:f7:14:ad:5e:8e:e5:7f:fe:48:77:df:
f4:54:89:b8:1f:19:59:d8:dd:db:1a:ce:8b:4d:36:6d:9d:7b:
77:bf:13:6e:1b:4a:3d:f9:82:68:e5:f2:3e:2f:89:b2:e0:ba:
7d:1e:87:ba:99:59:59:8c:d0:ea:aa:a7:1c:14:81:d9:19:d6:
ca:d5:79:0d:4d:64:48:56:b6:0b:fa:13:36:f6:b5:28:fd:5e:
e0:84:93:4e:7e:3a:3d:6e:7a:44:28:86:6e:b4:83:d0:e7:be:
ee:ec:cb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:05 2026 by rpki-client