Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: 0iCXTxQGBDzD46x5jMRlKK7urL9BGa5hpmsxuHMMKDw=
Subject key identifier: 42:74:9E:02:BD:94:3E:AF:AD:8C:EF:F8:E3:A3:BD:CD:6F:39:31:38
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 019D2AE0BB4504DA4A1B94B9C9BB7287093A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:01:04 +0000
Manifest this update: Thu 26 Mar 2026 16:01:04 +0000
Manifest next update: Fri 27 Mar 2026 16:01:04 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: KvJSaaivG/HKrDrJNF57fo5M0Q+2eZ+PJ0fSzF/RUtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:bb:45:04:da:4a:1b:94:b9:c9:bb:72:87:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Mar 26 16:01:04 2026 GMT
Not After : Mar 27 16:01:04 2026 GMT
Subject: CN=42749e02bd943eafad8ceff8e3a3bdcd6f393138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:80:2b:7f:9e:37:b5:13:ee:5a:63:39:44:
4c:bc:0f:8c:57:6b:71:72:5b:4e:46:65:e4:2c:8a:
8a:a8:b6:90:b7:74:50:c2:a6:f4:9f:5d:4d:a2:fa:
c3:c9:9c:3b:1e:87:1e:40:86:83:48:9f:9a:f9:8c:
3e:9c:93:61:94:6a:20:83:a2:76:f9:e6:7f:4f:70:
05:c7:be:56:2a:15:12:7f:b5:59:09:b4:c8:a0:22:
b2:19:c8:6c:91:97:fb:e8:b1:de:87:ee:c1:34:f7:
69:eb:81:db:c7:ee:e5:9d:5d:09:e4:42:4f:dd:f9:
6b:9d:b1:20:9c:fb:b7:e0:46:12:59:b4:1c:3a:20:
bb:cb:08:b3:04:91:79:7d:56:6b:86:51:69:78:7d:
8a:73:00:3f:a2:ba:38:35:bf:25:90:94:29:d4:26:
b5:b9:e1:e0:24:e1:fc:92:20:50:f6:99:b3:d6:6a:
5a:3b:e2:a0:0a:c7:4c:34:d1:ba:b2:9d:90:a8:69:
28:4d:bd:63:a6:46:d5:ec:4b:54:67:a3:56:be:3a:
95:a2:28:9d:19:44:7b:57:00:10:13:7a:1e:42:32:
49:41:d9:96:4b:bc:7b:c8:d9:ea:66:73:0a:1c:82:
fb:89:69:ea:82:e4:b1:e2:29:1e:e7:7a:ba:69:6b:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:9E:02:BD:94:3E:AF:AD:8C:EF:F8:E3:A3:BD:CD:6F:39:31:38
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7d:09:49:a8:4c:88:3c:ab:f7:6e:02:f3:85:7a:5d:ab:f7:
7d:fd:55:60:fd:fd:0c:2e:42:bd:c4:d6:72:67:32:44:e8:fe:
88:ab:7f:20:7a:9a:27:24:9b:41:1c:4d:fb:5e:32:c8:66:e8:
80:e2:19:9e:e1:d3:fc:f5:1e:a2:3a:91:25:38:e6:a5:ec:6b:
df:1f:da:f7:0b:f8:2f:3e:b8:5f:81:82:50:42:de:02:f7:37:
35:b7:49:82:79:88:dc:2d:45:09:dd:47:e7:b8:22:f3:b8:a8:
a3:e4:45:3b:cd:00:8e:1a:0c:4d:93:00:d0:a8:11:15:64:d0:
f3:f1:a8:32:50:e5:49:5e:44:3c:79:c6:b8:d6:4c:81:4f:27:
b8:b4:f4:dd:94:f2:f8:21:e2:15:57:3f:f7:04:ae:40:45:66:
75:f4:8c:d6:8e:25:40:e2:52:83:e8:1e:fc:58:ae:56:1c:ce:
9f:b1:0c:85:58:86:24:a7:c5:00:ea:55:d9:96:c4:c0:05:6f:
c0:aa:02:81:cb:dc:3a:3e:9f:dd:49:02:eb:11:a7:ef:24:e8:
8c:5c:b5:a3:21:3e:1f:e1:b7:2f:52:e9:8b:c6:09:f3:73:b3:
49:2a:aa:18:78:59:a8:ea:ec:b0:c1:67:65:69:a5:d6:11:46:
48:a2:d1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4LtFBNpKG5S5ybtyhwk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGIzYWQ4NzVmNzYyNWM2MzkyMzY1OWYxNDI5NThkYjc4
NzhhMzIwHhcNMjYwMzI2MTYwMTA0WhcNMjYwMzI3MTYwMTA0WjAzMTEwLwYDVQQD
Eyg0Mjc0OWUwMmJkOTQzZWFmYWQ4Y2VmZjhlM2EzYmRjZDZmMzkzMTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7KAK3+eN7UT7lpjOURMvA+MV2tx
cltORmXkLIqKqLaQt3RQwqb0n11NovrDyZw7HoceQIaDSJ+a+Yw+nJNhlGogg6J2
+eZ/T3AFx75WKhUSf7VZCbTIoCKyGchskZf76LHeh+7BNPdp64Hbx+7lnV0J5EJP
3flrnbEgnPu34EYSWbQcOiC7ywizBJF5fVZrhlFpeH2KcwA/oro4Nb8lkJQp1Ca1
ueHgJOH8kiBQ9pmz1mpaO+KgCsdMNNG6sp2QqGkoTb1jpkbV7EtUZ6NWvjqVoiid
GUR7VwAQE3oeQjJJQdmWS7x7yNnqZnMKHIL7iWnqguSx4ike53q6aWseeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ0ngK9lD6vrYzv+OOjvc1vOTE4MB8GA1UdIwQY
MBaAFIrbOth192JcY5I2WfFClY23h4oyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUt
ODg1YmM1NGRjZTYyLzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUtODg1YmM1NGRjZTYy
LzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtX0JSahM
iDyr924C84V6Xav3ff1VYP39DC5CvcTWcmcyROj+iKt/IHqaJySbQRxN+14yyGbo
gOIZnuHT/PUeojqRJTjmpexr3x/a9wv4Lz64X4GCUELeAvc3NbdJgnmI3C1FCd1H
57gi87ioo+RFO80AjhoMTZMA0KgRFWTQ8/GoMlDlSV5EPHnGuNZMgU8nuLT03ZTy
+CHiFVc/9wSuQEVmdfSM1o4lQOJSg+ge/FiuVhzOn7EMhViGJKfFAOpV2ZbEwAVv
wKoCgcvcOj6f3UkC6xGn7yTojFy1oyE+H+G3L1Lpi8YJ83OzSSqqGHhZqOrssMFn
ZWml1hFGSKLR0w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:08:59 2026 by rpki-client