Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
File: iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft (raw, json)
Hash identifier: mipVZKSWs0CE2H0wFRTAxcwe5rtufZMkbSERV+zIMjs=
Subject key identifier: 8E:72:8F:C0:69:55:7B:E8:85:4F:35:7E:38:9E:96:A4:D2:C6:A3:8E
Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Certificate serial: 019D27E07F6E0E5B18B4D1F77CDF9A8D53C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 02:01:57 +0000
Manifest this update: Thu 26 Mar 2026 02:01:57 +0000
Manifest next update: Fri 27 Mar 2026 02:01:57 +0000
Files and hashes: 1: iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl (hash: Ips50RJtZ8jnshKrMpY6nAY4wDykCOcso2ftrGg1UQQ=)
2: iojxs-4stuh5VLOzZynsjkM6c0E.roa (hash: UEmjKKCU8lRCDvcwWsLDPsTENcP/mGR9V70rcXozZ0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7f:6e:0e:5b:18:b4:d1:f7:7c:df:9a:8d:53:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5
Validity
Not Before: Mar 26 02:01:57 2026 GMT
Not After : Mar 27 02:01:57 2026 GMT
Subject: CN=8e728fc069557be8854f357e389e96a4d2c6a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:43:b1:59:bf:20:f7:68:26:17:f6:77:f0:
63:1b:b6:c9:28:a7:94:dd:cf:78:42:42:ce:00:a1:
dc:38:ee:87:b3:ee:5e:9e:f3:20:1c:92:5c:4b:83:
9d:d0:c0:fe:83:0e:dd:53:34:6e:b4:e1:ed:ed:2c:
01:0d:af:f4:58:3d:8f:d2:86:e8:6d:1a:54:92:69:
a4:b7:cb:85:67:51:5b:76:e3:8f:bf:c4:66:56:a1:
9a:b7:35:e8:c7:02:7f:d1:ac:c9:39:cf:8b:08:45:
66:1c:03:70:68:70:f3:3f:1e:3b:e0:c6:9d:e3:ee:
41:a2:2b:ca:bb:3e:73:3a:00:37:cb:e7:a9:7d:8c:
a4:f0:fc:13:b1:8b:7d:06:77:5b:da:21:19:44:28:
df:33:ab:77:56:06:02:c4:63:c4:d7:36:99:9a:9d:
83:f0:2b:db:e9:d9:4d:19:5c:ba:74:be:59:5e:8a:
e5:08:ca:25:bc:6e:0e:11:1f:22:30:b8:7d:4f:58:
35:c6:e3:a5:90:85:db:4d:9e:c7:02:f1:fe:8b:d0:
c9:54:de:39:d4:a3:2c:33:d6:e4:6c:41:4c:f2:57:
da:1f:ab:8d:47:09:15:37:19:9c:64:4d:3d:66:4e:
97:51:ed:08:9f:d1:62:db:14:25:57:a6:3b:43:07:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:72:8F:C0:69:55:7B:E8:85:4F:35:7E:38:9E:96:A4:D2:C6:A3:8E
X509v3 Authority Key Identifier:
keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a5:ed:0d:29:dc:db:d9:d0:dd:37:fb:ec:76:c2:36:f2:6b:
09:c1:b9:b3:29:8d:7b:86:04:80:2f:cd:fa:df:cf:ef:c4:72:
51:26:82:51:65:69:fe:34:98:be:cd:a9:e6:8a:60:31:00:e4:
f5:24:a9:c8:8e:71:cf:ac:5e:a9:19:6d:42:39:9e:4e:80:47:
ef:83:ad:48:6e:92:40:0a:0e:1d:6a:92:ba:2a:f8:79:08:55:
c9:31:fb:2f:06:f1:f7:9e:fc:48:8d:00:e2:28:bf:0f:6d:ac:
ae:6f:24:9b:bf:2d:79:b4:48:07:ec:6d:f3:61:c7:7f:1f:42:
34:2a:4f:05:81:57:7b:10:e4:df:88:5d:7d:ef:e8:c7:77:4c:
bb:46:b8:d2:fd:16:52:8c:c7:2d:8c:6c:aa:46:f6:07:8a:10:
b1:05:5b:2d:89:75:f3:6e:a4:2b:36:b6:a8:be:7f:0b:be:0f:
81:9a:58:a5:29:be:21:76:05:7e:a3:c7:da:14:ec:1d:e8:ce:
7d:b9:69:83:9a:9e:92:e5:3d:c0:4e:6b:5a:82:d1:3a:6e:01:
12:30:d6:e2:60:05:43:4c:26:14:92:a0:71:5e:63:20:e5:c3:
9d:e0:c5:aa:35:73:57:e3:9d:56:c4:b6:c1:a9:ac:61:df:e4:
59:79:de:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:57 2026 by rpki-client