Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: 8s17lrX0QmpRu+vgX5hWPXeFR35coJXDgS4ncYHX84I=
Subject key identifier: 4E:9C:E5:D3:F5:18:5F:08:48:D6:27:C9:18:2E:6A:CE:62:6C:50:AA
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019D2B177D50B8E77B324519E929679EEBA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 17:00:52 +0000
Manifest this update: Thu 26 Mar 2026 17:00:52 +0000
Manifest next update: Fri 27 Mar 2026 17:00:52 +0000
Files and hashes: 1: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: DtZT4EP+4Z3yS13thdmRjY9M0BpV+zN9qNVriRsuX/U=)
2: unrdcZbrdHFGkYI2NvQ0Uuo8iuQ.roa (hash: CvLqQM5rLi1faTdwSBeTlBwQCQBbSATUvwP2tHqg/FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:7d:50:b8:e7:7b:32:45:19:e9:29:67:9e:eb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Mar 26 17:00:52 2026 GMT
Not After : Mar 27 17:00:52 2026 GMT
Subject: CN=4e9ce5d3f5185f0848d627c9182e6ace626c50aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:1f:99:fe:d7:68:69:ad:56:8a:c2:f9:a3:
e2:a7:de:60:00:a1:b7:2a:f7:73:c7:c3:83:34:72:
04:1d:2f:5e:5c:c9:f1:fd:e8:fe:78:2f:cc:a1:4d:
66:da:a2:01:de:3b:9a:27:fa:24:c4:5c:5c:c7:05:
9f:c2:3f:1d:47:a7:18:8f:02:e9:e2:47:fd:77:03:
5e:cf:bd:0f:ba:5b:f7:ff:af:75:36:1b:36:d2:20:
46:d8:ba:94:13:6b:dd:9b:d1:71:42:62:96:9f:34:
9b:5a:87:8d:07:d6:8a:b4:2a:6b:92:2c:29:6a:50:
b3:5b:bf:f2:71:c5:15:d2:68:c2:11:42:72:8b:82:
0b:59:b3:a0:e0:c7:cd:5a:ce:14:4f:2d:73:82:87:
f1:fe:3b:04:da:0b:a9:b0:73:06:70:fa:0b:b1:d8:
5b:61:9e:83:c2:a3:02:b9:01:e3:e4:76:14:ae:60:
76:ec:a2:60:73:3f:a3:fe:53:cb:2c:8a:e1:90:c0:
cd:6a:67:d9:57:74:cd:11:45:1b:70:2b:10:0f:c3:
62:47:fa:21:4f:eb:7c:88:29:ab:fb:61:21:7a:9a:
2d:70:ed:c3:db:da:ab:15:dc:1c:75:f8:5f:34:f0:
03:3d:3b:fa:d7:6d:cb:8a:83:2b:b8:cf:f6:b4:96:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:E5:D3:F5:18:5F:08:48:D6:27:C9:18:2E:6A:CE:62:6C:50:AA
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:29:67:b2:00:96:73:ab:a7:4a:77:57:0a:d6:ed:a9:cf:e4:
30:76:7e:71:ae:d2:1f:b6:6e:c0:66:a5:75:30:10:5a:67:4e:
a4:c1:4b:d3:d7:d4:a4:25:a0:5c:a2:55:8b:95:f6:bb:11:bd:
0c:32:84:b7:e2:e2:5b:c9:a1:f3:91:b7:d9:91:9f:ba:c8:4f:
45:07:00:2a:e7:f6:e6:d3:5e:a8:5d:41:c6:bf:e7:82:f0:1d:
5c:40:f9:ae:87:a6:87:60:de:29:0a:08:2a:45:3c:1d:26:33:
cb:f1:f0:a8:03:2c:0c:3a:3f:9b:63:77:96:49:49:51:b2:42:
09:da:85:2e:20:9c:65:81:66:a2:c5:46:4a:7d:ee:3d:c0:ef:
a9:dd:d6:ce:dc:cb:c8:f4:5b:8d:1c:ec:ee:37:4b:cc:8e:3f:
7b:18:93:83:bb:09:c3:9b:ca:c7:05:94:ad:94:48:4e:48:a0:
19:51:77:e6:a1:0f:8c:4e:6d:4b:f8:23:42:33:4b:a1:d0:de:
db:5a:c5:42:0d:c7:7a:c9:20:45:3c:e3:49:92:d2:0a:a9:ca:
41:7f:60:a6:48:92:6e:b0:23:8f:4b:c4:d7:7a:67:7c:0c:eb:
17:5a:76:c2:07:e6:65:2b:8e:58:15:88:6a:7a:15:93:d6:4a:
29:ac:e5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:55 2026 by rpki-client