Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
File: IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft (raw, json)
Hash identifier: ZCnhzsDV+jyMwU0bCVOpJQ8veo1BRoqRNF1xuTUJS7s=
Subject key identifier: 5A:EC:B9:37:E3:5A:AC:93:2B:01:9F:52:47:59:E9:EF:23:11:E9:9C
Authority key identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05
Certificate issuer: /CN=2307652144c9127dd626796056c9ec2932a4f205
Certificate serial: 019D2704BB6698C5A59E5CAD5E668A32EDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
Manifest number: 0365
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl (hash: Kr+8Js19+UmjK8RIahWMD+0VC6KFL4xprceZZWZeeuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bb:66:98:c5:a5:9e:5c:ad:5e:66:8a:32:ed:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2307652144c9127dd626796056c9ec2932a4f205
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=5aecb937e35aac932b019f524759e9ef2311e99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:86:9f:d4:f0:0a:f4:85:4e:84:2c:60:2e:
bc:8c:a6:a3:16:89:6a:58:1f:d4:ce:96:b3:dd:ea:
d0:ff:5e:fd:b8:d5:e9:c6:36:c7:fd:43:21:3d:79:
8d:8e:db:45:fb:91:16:27:99:e3:53:77:c8:8b:f8:
a1:2a:25:7b:10:e2:3e:44:7e:a6:98:14:9b:da:30:
87:43:7a:21:9f:97:7b:33:d6:1e:9a:1e:a1:6b:2a:
6f:19:0f:92:a7:3f:1e:9a:12:2d:ae:01:ce:77:2c:
17:77:5e:7e:79:0e:56:34:dc:bb:57:6d:db:42:2c:
b7:13:2d:a1:dd:a6:3b:59:4b:fe:89:c5:2b:06:6e:
33:a7:b0:18:e1:c3:28:d6:42:c0:a4:80:c1:be:22:
46:6b:f8:d2:09:e9:be:14:c9:1d:9b:26:0f:c7:f4:
85:97:d3:1b:c9:6a:c0:fa:bd:09:02:86:54:8e:57:
9e:c5:53:b5:d2:52:b7:86:aa:e7:4d:9e:17:08:9a:
a6:7b:76:4a:80:37:74:82:fe:1b:e1:80:b8:4d:3e:
0f:8a:f5:2f:84:4e:78:69:62:dd:1b:73:27:a0:c4:
4d:e8:28:de:ee:0f:d7:db:86:19:ea:a7:eb:58:ce:
ac:29:48:6b:59:a3:4d:1d:bf:e8:9f:5e:55:7f:2b:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:B9:37:E3:5A:AC:93:2B:01:9F:52:47:59:E9:EF:23:11:E9:9C
X509v3 Authority Key Identifier:
keyid:23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9b:1e:53:ef:d6:96:c4:47:97:f4:32:4c:2e:8e:17:c7:aa:
00:07:1e:8f:1e:9c:d2:41:7f:29:27:38:59:18:bc:a8:57:82:
c8:4d:41:63:22:f7:4d:40:b4:a2:26:7e:1f:3b:61:a1:93:d8:
50:02:97:67:2a:64:37:e8:d0:bb:77:d4:4d:8b:bc:a7:e9:2d:
46:8c:08:e8:85:23:9a:94:ab:71:41:8a:f0:ae:3e:b9:86:27:
d4:69:72:7c:18:45:4e:76:cd:9f:90:14:15:33:e2:7f:25:fc:
e5:b8:99:f8:89:b7:a3:68:ca:bf:b0:06:e6:94:b1:5c:c2:18:
96:95:e7:5f:4b:ff:fa:ca:76:16:3f:5c:cd:05:c7:c1:68:a9:
48:f6:fd:f4:ea:20:83:03:3d:3a:65:aa:a0:af:4a:c7:ff:13:
43:45:fb:78:c7:1e:c9:b7:25:72:c9:71:2e:85:14:16:55:d5:
98:e1:a6:dd:bd:d8:bb:52:90:ae:b8:3c:0a:78:90:b0:b4:c2:
c0:3c:27:d8:21:72:e7:a5:db:6a:fd:56:8f:55:ed:6a:4c:47:
12:f0:d2:b6:2a:e1:7b:4c:d3:b2:14:e2:53:42:cf:37:51:58:
c0:d0:a4:08:4b:82:6c:e5:59:cd:8f:41:6b:c3:12:6a:2e:b4:
89:fb:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:25 2026 by rpki-client