Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: u2vUOTEtDKv2Khk6hCORaLKHLqqW5bd5UUzXerTvnFk=
Subject key identifier: 46:91:75:11:D4:3D:3B:DE:DC:5D:20:B3:ED:FA:B2:60:DE:DC:C1:6C
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 019D27048D1EC046D3A8E29E5C455E1114C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 22:01:42 +0000
Manifest this update: Wed 25 Mar 2026 22:01:42 +0000
Manifest next update: Thu 26 Mar 2026 22:01:42 +0000
Files and hashes: 1: DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa (hash: H5hh0chuQLZ9k4SOj22nhApIqV8qceTKzoblxLgW6NE=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: MKWDEMfcrD7mpnyw1gOJn/zsoNwaE61LFqIvc6G5ui4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:8d:1e:c0:46:d3:a8:e2:9e:5c:45:5e:11:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Mar 25 22:01:42 2026 GMT
Not After : Mar 26 22:01:42 2026 GMT
Subject: CN=46917511d43d3bdedc5d20b3edfab260dedcc16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:53:59:37:ac:d0:27:4b:97:33:db:fc:c3:
ad:88:48:73:43:4e:8f:91:56:4d:ce:38:fb:03:aa:
29:31:60:94:15:4e:ba:21:34:da:c6:6f:ab:a3:f8:
24:53:28:c0:c2:03:f7:32:93:ad:6a:a0:88:09:ab:
36:4f:f9:ad:a0:52:30:e5:0d:fb:e4:27:26:ef:de:
55:69:2c:de:6d:95:1b:7c:22:ae:81:7d:d5:8a:92:
43:ee:f9:4c:af:ee:41:99:91:10:31:11:14:d3:39:
1e:e2:6c:1d:da:8a:f3:cc:15:65:61:91:e4:db:bc:
9a:14:df:1e:e9:05:da:50:cd:ec:ca:e0:22:b2:36:
20:38:f6:d9:b7:95:b5:7b:18:b2:c7:25:fc:da:8c:
af:cc:50:c3:fd:db:2d:07:c0:9d:52:0b:1e:39:4d:
99:b5:7d:ac:b3:ef:e4:b0:a6:ad:26:82:b6:b9:b1:
87:ed:a3:4f:b9:92:67:b3:ff:ea:5c:7b:38:2b:53:
1f:7c:98:8e:87:90:1c:d4:5d:e7:8f:55:ed:1e:62:
8b:37:e3:d0:96:b1:54:61:6d:0c:82:40:1a:20:bc:
7e:e2:96:a7:5a:87:d2:35:72:33:79:c4:c3:f6:4a:
b4:4c:28:5a:91:22:e1:4d:e7:78:b8:65:9c:61:06:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:91:75:11:D4:3D:3B:DE:DC:5D:20:B3:ED:FA:B2:60:DE:DC:C1:6C
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:1e:39:71:44:4a:df:d0:52:78:3e:d2:c9:5c:fa:ae:8b:
ba:81:3e:7e:96:37:cb:df:e4:e7:cb:9e:59:44:46:7e:57:b4:
e1:b4:da:31:74:18:04:a0:11:17:fa:56:ea:83:26:ee:0a:b0:
6a:8a:3d:6c:00:9f:99:ed:9d:de:e6:3f:3d:c9:29:ef:98:bc:
25:bd:0e:74:69:76:73:1b:bc:80:fd:f9:5b:10:ae:50:b2:df:
ff:97:7b:d9:39:6a:eb:86:6d:54:36:cf:97:f2:1f:f1:00:ed:
28:5a:c1:92:98:95:47:a6:b0:2c:4a:2d:b7:8d:c4:e1:ca:5d:
35:89:04:fd:99:dc:77:41:0d:d2:ad:26:03:70:12:87:25:63:
a6:01:74:ee:b5:5c:dc:28:20:a8:dc:6d:16:31:4d:7c:ba:75:
ad:2b:e5:e9:e2:69:82:ef:5e:fa:0d:99:e1:87:47:6f:1b:38:
b0:a0:14:62:77:8c:ee:ff:8b:de:fa:b2:18:c9:b5:08:87:f3:
47:c5:02:aa:72:8c:06:0b:c8:3e:f4:c2:01:a3:15:98:1b:89:
f2:70:2d:56:ea:93:ef:1f:7f:87:a9:af:b4:8c:b3:1b:68:db:
66:6d:e9:cc:1d:26:ad:bd:28:b7:23:99:4d:79:c9:64:3a:98:
98:96:fc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:17 2026 by rpki-client