Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: RxhP68pZBajgy3fjyWA0SWipxtMtk4c5l8ME81A8gYw=
Subject key identifier: 04:AE:0D:78:C7:E2:B4:BB:49:55:A8:A3:02:B6:AD:7A:82:3D:5E:11
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 019D27DFFF4F6DE74E61CB2854EE548FEF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 181B
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: CYUGbD7BZFVjVnpbve2aJpU9t4Pb2jzEvcFv4o59Gic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ff:4f:6d:e7:4e:61:cb:28:54:ee:54:8f:ef:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=04ae0d78c7e2b4bb4955a8a302b6ad7a823d5e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:bb:21:58:4a:d9:52:76:d4:5c:32:ae:f8:
ec:b1:cf:73:11:41:c0:3a:86:9a:e4:25:d0:9f:a0:
1c:a6:2c:80:ac:61:b9:3c:fc:dc:3e:93:42:25:88:
e4:6f:02:cb:03:91:00:ce:7e:ca:ef:b1:8d:89:d5:
3d:aa:2e:a4:3c:42:17:69:5d:0e:74:de:ac:4e:cc:
7b:65:35:56:d5:a7:72:93:ad:a9:83:f4:57:99:aa:
cf:1d:ec:31:2f:f8:dd:fa:98:04:a5:1d:b7:9b:f7:
13:89:c4:a9:cb:78:bf:9b:59:54:8f:ac:d2:ab:95:
a5:5f:3c:f6:80:15:6e:5b:3e:ab:81:aa:d7:d5:67:
6d:cb:96:16:cf:ba:d3:d6:db:8e:e5:03:d7:bf:8f:
87:1a:af:a0:cb:7c:74:07:2d:be:97:a1:86:b8:13:
8e:cc:43:47:e1:21:6d:4c:4d:65:6d:76:e9:8b:a6:
97:f2:6c:77:cd:ab:0f:82:67:bc:5b:73:ec:17:85:
1c:be:04:ef:0a:20:b1:8a:3a:c3:14:73:27:a3:ca:
6a:c2:28:4c:37:22:70:a0:e2:36:14:13:0b:17:e8:
a8:43:b5:6c:d7:7f:52:b5:da:36:f6:1c:71:e9:73:
f1:43:ca:d3:2a:41:4e:f2:93:e3:0b:70:49:a4:68:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AE:0D:78:C7:E2:B4:BB:49:55:A8:A3:02:B6:AD:7A:82:3D:5E:11
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a3:0c:ec:01:f3:e1:1b:57:47:f4:b4:95:c6:b3:5b:8d:6e:
fe:95:8b:27:54:18:0c:e0:69:c8:64:ee:42:a1:ef:4d:43:66:
78:81:2a:06:9b:9a:8d:b5:e8:a1:4e:d4:e5:79:06:fa:10:99:
61:d5:31:bc:d8:52:79:ff:3d:3c:e7:ee:e0:21:91:b7:e7:9e:
1d:93:de:d5:a9:e7:24:7e:a2:6d:c3:e0:7e:5b:83:3e:eb:42:
5a:71:c5:0b:30:5e:b4:3c:cb:9f:eb:1c:38:5e:4e:b4:88:bc:
e8:4d:ef:88:50:08:87:56:03:54:af:4e:c7:c4:77:4d:6c:1c:
46:4a:58:6d:a8:21:69:de:e9:38:57:60:f1:c8:5b:65:95:7f:
71:24:09:f6:51:2c:02:74:cb:92:bb:f9:71:35:48:1d:51:0e:
e9:1e:af:78:30:96:86:ea:c8:16:59:12:a2:47:e3:d4:58:53:
20:cd:01:26:2d:51:df:37:b0:51:be:b4:1c:f4:b2:90:6b:a1:
d0:33:9c:06:f2:aa:6d:0f:b5:84:cf:76:51:18:2e:54:78:ed:
8e:d2:1f:5a:f8:70:52:b5:1c:95:26:60:07:5c:1b:63:0a:a2:
8a:de:a0:7f:8b:8b:66:cd:8b:7a:ec:bb:d3:1e:20:56:f3:1e:
6d:8c:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:48 2026 by rpki-client