Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
File: iqrwV67ry_cGh34qqnSjljgL4hU.mft (raw, json)
Hash identifier: l5xqbqyKn3lti3eNBUE5+LtBCdjEDJvqSdvRTUQw8lQ=
Subject key identifier: 4D:47:85:E7:22:94:EF:5A:9B:EE:F1:FC:69:A5:DE:17:AC:94:FC:6E
Authority key identifier: 8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
Certificate issuer: /CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Certificate serial: 019D2996F0F7C33C31FF651B4038E2BD80C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
Manifest number: 0619
Signing time: Thu 26 Mar 2026 10:00:51 +0000
Manifest this update: Thu 26 Mar 2026 10:00:51 +0000
Manifest next update: Fri 27 Mar 2026 10:00:51 +0000
Files and hashes: 1: iqrwV67ry_cGh34qqnSjljgL4hU.crl (hash: sEhnZbYRYhIyyd6AbOF5ZFi5jgeJWhsooAEp/E2Hi3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:f0:f7:c3:3c:31:ff:65:1b:40:38:e2:bd:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Validity
Not Before: Mar 26 10:00:51 2026 GMT
Not After : Mar 27 10:00:51 2026 GMT
Subject: CN=4d4785e72294ef5a9beef1fc69a5de17ac94fc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:8d:55:4b:2a:9d:4a:ec:8f:ab:e0:60:3f:
f1:84:ee:67:a3:4d:1f:e3:16:5e:be:78:78:3a:21:
1f:9a:74:a5:83:a2:14:78:2d:b7:28:7f:ad:b1:9b:
91:1f:66:be:ba:12:22:16:c3:94:1f:dd:2d:7f:dc:
af:fd:14:5f:d3:87:24:b2:9b:44:a8:b5:31:d5:c5:
8a:fd:4e:2f:32:05:cb:d4:fd:75:04:2a:22:cc:b4:
18:96:a8:fb:d5:43:f9:08:25:66:34:38:37:a5:45:
40:b2:81:f9:15:b6:0b:0f:a1:20:b3:e0:c9:92:4f:
d5:ff:1b:34:64:4c:ba:e3:dc:f8:07:a1:50:87:2b:
f1:d1:22:8a:e0:87:89:73:26:60:dd:ea:ba:bb:48:
b6:7d:0e:f1:0b:41:3e:05:e1:af:6f:10:16:4e:df:
9b:72:a2:8f:98:70:71:62:3c:36:5c:19:fb:08:0c:
f4:cf:ff:87:17:2f:67:5f:f2:d3:1a:b3:d1:c5:60:
ef:0a:15:2f:25:7e:e4:39:77:ba:c1:52:eb:4c:e5:
8d:ff:ea:a8:31:34:a7:ea:53:db:ac:c5:4e:56:13:
ea:10:1a:1b:d3:1a:c4:42:44:db:39:02:06:a4:71:
a3:c7:95:9e:75:01:35:70:3d:ac:de:cd:1f:8a:77:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:47:85:E7:22:94:EF:5A:9B:EE:F1:FC:69:A5:DE:17:AC:94:FC:6E
X509v3 Authority Key Identifier:
keyid:8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:5d:c5:86:0a:ae:d4:32:9d:91:b0:1d:f1:c3:75:d1:08:
fa:af:a9:eb:4b:dd:48:28:8f:43:6c:f8:cf:19:0b:23:0e:17:
89:77:57:2b:8d:18:a4:6f:f4:ce:1a:47:15:03:ff:44:cc:37:
12:fb:db:5f:41:8a:63:66:97:45:ff:ac:77:18:65:71:82:89:
21:4a:26:58:dc:77:d0:a4:6d:7a:d2:cd:3a:37:4a:d9:24:d6:
ce:6b:47:8f:02:6c:d7:f5:98:31:d0:c8:3c:d7:8b:6a:78:dc:
c1:9b:fc:ee:d3:83:fb:5d:d5:76:ca:83:3c:ef:67:99:7d:76:
5e:18:dd:11:0c:46:4b:74:3f:75:25:f7:88:f1:ff:12:c2:5c:
d0:f2:a7:7e:ba:2b:40:99:60:1d:40:43:d8:bf:65:63:cf:b3:
85:84:9c:69:a9:4e:b3:2d:8f:e9:3c:a2:59:dd:ae:82:cc:f9:
ad:a9:22:9b:62:53:c9:7e:f5:41:c7:dc:94:0f:8a:e5:7c:e8:
39:d6:05:f3:f2:69:7f:b3:1e:46:2e:f7:7e:e4:a7:80:31:0a:
cc:a4:14:c9:9f:0d:fc:9b:98:30:0a:b0:e6:c2:56:64:f7:09:
56:f6:b5:6e:23:1f:8c:14:56:c3:82:6b:28:d6:9a:e3:63:57:
21:d1:14:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:08:53 2026 by rpki-client