Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier: sHBU7UiNDqNpUcctY3Zn6nflwfCgJa4W1NbQXeJvha4=
Subject key identifier: CD:4D:42:75:CC:09:DE:88:4D:64:B6:EA:69:20:2C:A0:0E:27:21:10
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 019D2772A2A9FA5844691D2C5C9CCE94CB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number: 1186
Signing time: Thu 26 Mar 2026 00:01:57 +0000
Manifest this update: Thu 26 Mar 2026 00:01:57 +0000
Manifest next update: Fri 27 Mar 2026 00:01:57 +0000
Files and hashes: 1: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: c7/X5gXAqwVRzMOxIa4fO/WE06P3PA8JmNxCSsDenZg=)
2: bnpZWoK19n1XzIl8GBiTgjFaI8E.roa (hash: +AVNEsf0hyxywK+MPw4MlTXuOoeM9Lhba5oG66zfeHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:a2:a9:fa:58:44:69:1d:2c:5c:9c:ce:94:cb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: Mar 26 00:01:57 2026 GMT
Not After : Mar 27 00:01:57 2026 GMT
Subject: CN=cd4d4275cc09de884d64b6ea69202ca00e272110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:08:10:6a:aa:d7:ac:18:3c:f3:5f:73:d7:0b:
8a:19:71:ba:37:f0:19:6a:6c:6a:4e:b0:87:b7:82:
c2:c0:8e:ca:87:da:72:d3:3f:82:2e:97:a5:f7:54:
e2:44:dc:fe:f1:03:35:ca:e1:14:43:45:fd:19:cf:
13:bc:72:82:c0:1a:ff:08:bd:06:6c:4d:43:01:ce:
f2:d1:e1:a0:eb:06:f0:7f:95:db:72:0c:17:69:67:
1a:06:c5:b7:00:87:36:28:2f:9c:76:bb:e3:30:a9:
4c:f9:53:9d:c2:c0:9b:90:c0:67:97:1a:76:64:03:
bb:2d:4b:ed:e0:1d:5c:b0:be:16:0d:40:93:4a:51:
06:7d:bf:16:98:49:0a:2c:a1:a3:f7:17:86:2c:31:
58:f2:c0:99:4c:a8:f0:0c:29:83:54:39:c3:e2:da:
c4:26:b9:44:7a:a0:3e:a7:59:f0:ed:63:e6:52:3a:
63:cb:59:e3:f7:73:07:56:ca:1e:4c:92:79:0f:61:
91:b5:91:c2:ae:fb:04:79:4e:b8:22:2f:62:46:44:
2c:36:28:48:68:81:2a:c2:31:5e:33:3c:f1:3d:f1:
cb:d8:e4:67:a3:49:6d:29:c3:c3:ed:be:7c:8d:3f:
45:10:80:fe:4c:37:d9:b6:21:64:25:6f:81:65:35:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4D:42:75:CC:09:DE:88:4D:64:B6:EA:69:20:2C:A0:0E:27:21:10
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:84:20:6f:71:05:6c:ea:44:2c:05:aa:44:c9:e7:3b:6f:a5:
c8:9a:d3:3f:01:86:d3:dc:fc:62:a5:70:ff:9b:27:7c:0a:d9:
53:74:f2:6e:4e:d1:3e:cb:73:5b:fd:e3:9c:05:b6:1d:57:07:
1a:0e:a5:da:7c:cf:78:53:f2:a9:95:3c:b7:f9:9c:79:3d:80:
d3:d1:0c:a0:54:c0:ff:2f:62:2f:2e:ca:ea:7c:61:6c:77:3a:
62:e4:11:b6:fd:02:4a:c7:a4:14:7c:c5:01:52:a3:94:30:00:
0d:22:cc:84:f6:a2:04:0b:85:39:8b:30:c9:22:d1:e9:07:22:
08:c0:28:14:17:ff:e6:e9:51:ab:6d:31:b2:8b:10:ff:d5:53:
1f:8f:4b:25:de:24:e6:3f:3b:40:6f:8e:82:4f:15:79:7f:a1:
17:d0:4f:12:a1:27:21:29:39:5c:24:3c:f5:e6:6c:f9:e3:ad:
f6:16:18:fe:d0:f8:45:c6:f6:df:26:cf:78:ca:30:8d:77:a1:
7f:7e:a4:05:47:bf:88:36:e4:1b:ff:f3:2c:38:44:8b:2a:76:
68:ae:2a:ff:e0:7c:6a:ca:f8:64:2b:20:04:41:f7:0c:a9:24:
3e:41:5f:40:1c:21:00:9e:46:49:1a:13:7b:67:29:ef:70:c8:
55:53:55:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:36 2026 by rpki-client