Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: eMvl6tNU69EB7FWf8D5Uf1hjVZLk4Cg0BWqFxrALUNg=
Subject key identifier: 1E:27:69:31:78:50:8C:D8:67:09:23:A6:C8:25:B2:CA:33:44:0C:7F
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019D27DF707B615C483AC45817725AFD08B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: daY1x/rBHXfCwkYBRNRcuia7PT5939BrAO728Ep/GJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:70:7b:61:5c:48:3a:c4:58:17:72:5a:fd:08:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=1e27693178508cd8670923a6c825b2ca33440c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:da:55:22:57:2a:ad:c0:bb:a5:44:87:6a:
73:b7:ea:e7:85:91:6c:84:23:f9:b5:41:81:17:5c:
c9:60:80:7e:c3:5d:d0:46:45:cf:bc:cc:70:be:10:
74:a0:88:68:03:33:c5:f4:5d:53:69:5f:4d:87:37:
d2:b1:d2:61:c4:8e:74:11:b0:72:93:29:19:43:c5:
a0:5a:a0:08:ef:56:08:af:56:a5:be:01:a6:1b:74:
38:ec:d9:12:84:9a:ff:8e:5d:22:d5:1b:03:fe:2e:
2f:09:f9:ce:61:2d:b5:7b:c0:53:a8:d7:85:3a:87:
24:5a:50:9a:bc:1a:2c:f0:7d:23:a0:17:b9:02:c5:
2f:34:a7:7a:8d:21:e7:36:a5:67:9c:9f:3b:14:20:
37:77:29:77:0f:6f:cc:a4:7b:cc:1c:51:1a:9e:bf:
54:d4:6e:d6:20:6d:11:12:31:dc:72:42:96:5a:68:
d6:b6:2e:79:06:79:ce:44:98:2d:ba:84:ac:de:6e:
f8:40:db:64:90:19:f9:8f:99:fa:fd:8d:07:d2:37:
63:b8:62:14:65:9a:8f:4b:c5:ca:89:df:34:bf:dd:
be:e2:56:e0:19:29:15:36:3e:79:52:12:6b:33:07:
37:5d:8d:d6:d0:0d:a2:b0:89:75:d0:fc:64:f2:ef:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:69:31:78:50:8C:D8:67:09:23:A6:C8:25:B2:CA:33:44:0C:7F
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2e:bf:78:02:3e:5b:a2:1d:40:d3:3b:1d:7d:7b:5c:78:8b:
9e:95:b0:93:f5:46:87:a9:a8:53:eb:7b:57:7b:57:75:ff:6d:
bc:1e:9c:71:f6:31:2c:79:59:e1:0d:e9:ca:13:30:6c:5f:c9:
75:39:dd:ca:98:49:ac:b3:5d:2b:09:8e:63:0d:b1:cd:cf:57:
19:9e:6c:35:04:16:6d:9a:7f:7f:fe:aa:09:b4:e9:a4:5e:28:
ff:21:ce:a0:78:5a:f6:64:e5:fc:96:ef:54:de:73:3d:88:18:
ba:06:02:0a:28:01:34:60:4c:87:dd:35:ff:5c:2d:77:a8:95:
30:b9:3c:2d:ad:58:fb:8b:66:c9:91:02:f0:c1:d1:15:0e:f3:
4e:1b:18:ec:29:df:3f:ad:16:1c:20:22:82:3f:f2:a5:f7:41:
53:ab:2c:7f:ae:8c:27:23:45:6e:1f:ab:59:9f:e9:4e:a6:4a:
81:00:b5:df:4a:62:5b:74:c8:7b:e1:06:a2:89:69:df:44:cb:
78:3a:2a:5d:50:73:ab:f8:f1:bf:f9:0d:6f:82:dd:22:40:17:
8e:76:2a:77:3e:be:a3:67:73:33:57:19:b7:56:f7:f0:2c:61:
a4:a5:52:a6:95:70:06:6b:38:15:83:f6:48:fc:53:ca:2a:3a:
62:d1:dc:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n33B7YVxIOsRYF3Ja/QixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjYwMzI2MDIwMDQ3WhcNMjYwMzI3MDIwMDQ3WjAzMTEwLwYDVQQD
EygxZTI3NjkzMTc4NTA4Y2Q4NjcwOTIzYTZjODI1YjJjYTMzNDQwYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4raVSJXKq3Au6VEh2pzt+rnhZFs
hCP5tUGBF1zJYIB+w13QRkXPvMxwvhB0oIhoAzPF9F1TaV9NhzfSsdJhxI50EbBy
kykZQ8WgWqAI71YIr1alvgGmG3Q47NkShJr/jl0i1RsD/i4vCfnOYS21e8BTqNeF
OockWlCavBos8H0joBe5AsUvNKd6jSHnNqVnnJ87FCA3dyl3D2/MpHvMHFEanr9U
1G7WIG0REjHcckKWWmjWti55BnnORJgtuoSs3m74QNtkkBn5j5n6/Y0H0jdjuGIU
ZZqPS8XKid80v92+4lbgGSkVNj55UhJrMwc3XY3W0A2isIl10Pxk8u+A4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4naTF4UIzYZwkjpsglssozRAx/MB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy6/eAI+
W6IdQNM7HX17XHiLnpWwk/VGh6moU+t7V3tXdf9tvB6ccfYxLHlZ4Q3pyhMwbF/J
dTndyphJrLNdKwmOYw2xzc9XGZ5sNQQWbZp/f/6qCbTppF4o/yHOoHha9mTl/Jbv
VN5zPYgYugYCCigBNGBMh901/1wtd6iVMLk8La1Y+4tmyZEC8MHRFQ7zThsY7Cnf
P60WHCAigj/ypfdBU6ssf66MJyNFbh+rWZ/pTqZKgQC130piW3TIe+EGoolp30TL
eDoqXVBzq/jxv/kNb4LdIkAXjnYqdz6+o2dzM1cZt1b38CxhpKVSppVwBms4FYP2
SPxTyio6YtHcsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:56 2026 by rpki-client