Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: XVrlyRehH1TkVNTo5/VSQ7a4hacJ0jqHpXG8MJAEwR0=
Subject key identifier: 3D:36:D5:45:2E:D3:97:98:04:2B:7C:0C:3F:D4:25:47:22:A1:BC:DA
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019D281703EF99B6748B58B1B125E0E83F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 03:01:30 +0000
Manifest this update: Thu 26 Mar 2026 03:01:30 +0000
Manifest next update: Fri 27 Mar 2026 03:01:30 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: 8WzcsRQsgPE+oNipmRIzM+n6Dg+jKC9NiipNYdm6gg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:03:ef:99:b6:74:8b:58:b1:b1:25:e0:e8:3f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Mar 26 03:01:30 2026 GMT
Not After : Mar 27 03:01:30 2026 GMT
Subject: CN=3d36d5452ed39798042b7c0c3fd4254722a1bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:e8:57:54:bf:96:e2:0a:da:71:eb:14:22:
95:db:03:cc:35:29:62:e1:1c:71:ae:29:03:2b:95:
2f:41:13:ec:bd:8e:8d:58:08:88:86:6b:ee:3d:91:
66:de:39:14:8b:db:18:a8:76:ff:a8:2b:76:19:e6:
b2:dd:1b:90:71:5e:c5:61:60:12:90:30:4e:46:93:
08:d6:61:0e:90:27:23:a7:68:95:84:c7:32:5a:4a:
d8:00:52:34:a5:d6:0b:bd:5e:0c:f6:48:5a:ae:98:
ac:e1:ec:39:84:ff:e9:70:a5:31:6d:80:ca:3a:6d:
a1:bb:d4:1c:68:6e:83:6c:67:74:90:51:56:33:85:
13:ce:a7:a9:af:78:a7:d5:84:9b:a5:e9:44:61:e4:
bd:37:69:d5:16:5f:0a:92:1d:13:5f:ed:41:5e:58:
90:6b:fa:0e:d7:67:d3:7b:57:e0:20:50:d5:fe:d1:
b8:1f:d6:30:10:21:c2:e0:65:9d:8a:c7:04:a6:d6:
a2:0c:98:be:6b:d8:6e:5d:7c:22:1b:27:d5:ad:0f:
39:31:82:34:55:3b:0f:ec:e1:b8:ae:1a:3e:dd:7c:
ae:bd:9d:89:5f:52:c7:df:e9:b6:77:57:6a:0e:0b:
88:cf:7c:cb:22:68:83:86:8f:f9:c3:46:4a:0f:19:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:D5:45:2E:D3:97:98:04:2B:7C:0C:3F:D4:25:47:22:A1:BC:DA
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5e:34:63:e4:c9:e6:8c:9e:c3:76:1b:37:6a:a9:7f:eb:5c:
c6:bd:b5:39:aa:70:5b:8d:54:3a:0a:55:ba:05:48:3c:a7:1f:
29:21:d7:aa:e8:d6:c2:29:14:5a:b9:ac:58:ef:3f:40:53:6d:
d7:ed:4b:e7:5f:e9:c2:94:b9:bb:1d:77:56:8f:bf:53:2d:92:
2c:4f:ca:21:46:5d:4e:7d:ee:5c:7a:91:a3:f3:e3:b5:08:7f:
3e:21:28:a2:e5:99:2b:b2:f3:fe:4b:36:a3:90:b7:3e:15:50:
be:9a:4f:b7:05:08:5f:11:1b:42:13:79:82:5a:f6:d4:6c:70:
26:63:5e:3a:95:12:af:e2:4d:16:1f:f4:f3:d0:dc:16:18:72:
2f:f4:8b:99:94:ea:74:8d:30:f6:2b:3b:d5:ef:34:77:1a:bb:
61:e8:92:b6:19:27:d1:6f:f9:a0:02:16:4d:b7:d4:0f:3b:8b:
fb:a0:1b:64:d0:5f:99:96:d3:aa:0f:13:6a:b6:5d:a6:0b:55:
ae:ee:b5:56:da:9c:fd:41:fd:d2:fe:0b:01:b0:73:ea:f3:7f:
e9:f2:53:68:c1:fb:ef:52:93:9a:c4:84:32:50:e5:ff:45:fa:
57:2d:7b:0b:6c:5f:f0:e7:79:95:58:ff:d2:eb:6a:2c:fa:42:
27:79:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:08:38 2026 by rpki-client