Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json)
Hash identifier: w5tv23uG+bmc9JErmuijUgHVR5a+0xwljc8wgitGZAQ=
Subject key identifier: 92:47:DE:48:BB:3F:89:B7:40:58:DC:00:C6:75:50:38:6C:31:8F:36
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 019D26280B11CA2AACDC0217E4F09082C5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
Manifest number: 0BE6
Signing time: Wed 25 Mar 2026 18:00:51 +0000
Manifest this update: Wed 25 Mar 2026 18:00:51 +0000
Manifest next update: Thu 26 Mar 2026 18:00:51 +0000
Files and hashes: 1: 1-oQkBgC1KtD4YbEgIZgWwDGwMZI.roa (hash: dv8y3sb289eQlJ2it24+CyBcLvJoFUqHwqUDVlJyHUA=)
2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: PQ8YAnEA7DBCvimmCc+8RwnRBqoanM2xJbDC1wSn3aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0b:11:ca:2a:ac:dc:02:17:e4:f0:90:82:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Mar 25 18:00:51 2026 GMT
Not After : Mar 26 18:00:51 2026 GMT
Subject: CN=9247de48bb3f89b74058dc00c67550386c318f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:83:19:58:46:5f:6d:4e:53:3d:47:3a:50:
36:c8:71:15:b1:bb:75:8d:24:6d:3a:47:6f:15:69:
5e:54:2e:35:53:a3:d7:a0:ad:79:cd:23:41:a8:9f:
a6:d3:d3:ad:81:a2:5e:e2:b6:5d:8a:9d:da:d9:a6:
c6:55:88:8c:1a:3a:72:45:95:89:83:bf:10:0f:60:
2f:c0:01:90:00:84:07:bb:dc:19:c5:ae:d6:b0:34:
8e:c4:d6:9d:77:05:71:71:f6:a3:c9:2f:d9:e7:6e:
e5:0c:e9:22:fb:9d:23:42:e0:32:8f:bd:eb:9e:7c:
ce:de:e6:6d:ad:91:65:8c:94:18:f2:cd:f5:1b:74:
2b:f3:3c:5d:6c:49:50:26:da:db:44:d8:d2:16:d3:
29:85:3f:54:c4:34:26:8d:39:60:13:4a:4a:69:b7:
f8:30:07:16:36:ff:b1:a7:39:26:b6:b2:9d:b9:3d:
9a:20:ab:65:1a:5b:1e:c5:08:2d:21:44:bc:27:67:
07:04:c6:0d:c3:ab:32:d6:dc:02:50:24:4b:13:5e:
c7:c1:72:3d:ab:87:a7:9a:77:f6:e3:1f:e4:b0:da:
7b:60:92:41:f0:0c:1a:11:c0:be:71:5d:86:66:58:
c1:f7:01:ff:80:8d:2a:9c:7a:09:3c:0e:ee:2b:7b:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:47:DE:48:BB:3F:89:B7:40:58:DC:00:C6:75:50:38:6C:31:8F:36
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:45:f3:ab:51:62:02:ef:4b:14:9a:83:e7:16:04:f8:80:a4:
46:25:9f:a3:83:d1:a9:f4:68:f6:64:34:55:5f:b6:05:f8:11:
e2:1b:6c:93:2e:2c:6c:57:39:56:96:7b:cc:15:0f:bf:aa:95:
c8:62:0a:0d:f6:5d:c5:9a:70:9d:36:d5:df:54:b5:e7:b6:3d:
68:7e:e6:da:d4:b4:c1:e8:ea:1b:12:6c:fe:8a:41:5a:6b:b5:
a2:37:b5:41:36:5c:94:e2:b9:42:0a:a4:c1:c6:04:85:ff:be:
c4:ee:b6:ce:4b:3a:de:5a:cb:5a:7b:90:a5:8f:ed:1e:3d:17:
25:d2:ac:89:e6:81:80:97:a0:82:16:a3:e0:57:5f:27:c3:b2:
fa:5b:63:79:c8:c5:89:b5:8c:db:fb:35:23:ef:ed:82:f1:ac:
7b:4e:7b:f8:71:6f:c4:96:d6:ca:03:1f:77:44:a1:65:a6:81:
0e:32:3e:9f:0e:b5:67:7f:e9:0b:e1:53:a3:72:8c:ab:db:db:
da:82:b2:03:39:01:0d:58:13:16:53:f8:c4:03:f1:20:d6:68:
a6:50:a2:46:55:29:28:80:a1:65:4a:68:0f:51:79:71:c8:b5:
14:c3:99:f7:76:82:0f:b1:31:54:7d:2c:04:a7:fe:5e:00:ea:
9f:e0:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:41 2026 by rpki-client