Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: 4i+wutscLqKyryJqBcmXwkT8OW3PLCyKMzrHW0pRN04=
Subject key identifier: D7:6E:CD:B4:6A:48:7E:D0:F5:C4:BA:FA:91:08:05:C6:AB:25:2E:CF
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 019D27A9388D5CBF3F1AE29D7706310E712B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: LeRzY3GY8yYz9fNZ2HE1C2gibYQWmN0/o+2s6GW8bnQ=)
2: pjJ3h-AtM7br3AuCdoLvUYqZ6Us.roa (hash: oMubblgpXo7TWZ3eL9+/USYMfrR1dHWkBzKitQqRPPI=)
3: tIEL4J6jSkAPZLSFtELamVkICgM.roa (hash: mcwIFqfoI6qXjVDhr4bgReH1f7CPQDUrI4HFRmfb3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:38:8d:5c:bf:3f:1a:e2:9d:77:06:31:0e:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=d76ecdb46a487ed0f5c4bafa910805c6ab252ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:39:29:62:20:00:05:42:30:68:ed:a5:22:
63:ff:88:8c:3e:90:8c:0f:38:ba:6e:53:3e:88:93:
62:f0:2c:e8:35:27:53:b0:f7:34:92:b9:3b:8f:59:
e3:c3:1e:75:06:78:3f:94:fc:68:e2:fc:b4:7d:ef:
48:5c:f6:6d:c1:e3:1a:f0:07:de:9c:f7:a2:b6:7b:
d8:fe:89:c5:55:e3:5e:ee:da:97:82:54:c7:51:73:
b2:2e:d7:a8:fb:82:98:78:88:fb:de:df:38:17:b3:
ac:41:93:c3:2c:9d:e1:37:ae:2a:ff:01:8f:2a:69:
dc:7f:96:44:60:71:c6:4f:67:57:11:da:53:ec:7b:
11:22:75:ea:64:51:c7:d5:f6:03:7e:79:7f:ba:68:
e5:b7:20:e1:01:ed:f8:bf:d3:8e:ac:51:56:e0:83:
6a:71:d8:65:5d:fb:50:c9:37:9e:ce:81:38:80:a2:
ce:cc:6d:4f:47:d3:1e:f2:9b:62:17:28:ce:aa:d2:
43:57:69:5b:06:ea:09:44:46:c3:75:0e:5c:eb:83:
80:f5:c6:38:9f:49:d4:55:38:d2:f6:ab:5a:b4:6d:
59:a3:7a:66:5f:80:bf:91:f7:d2:a8:ef:77:5c:71:
28:cd:0c:e2:d2:5e:0e:f0:59:7d:2e:7c:d0:e1:42:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6E:CD:B4:6A:48:7E:D0:F5:C4:BA:FA:91:08:05:C6:AB:25:2E:CF
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e1:c9:2d:72:96:4c:c8:23:ff:94:84:4f:eb:ed:f5:54:9c:
58:90:f4:60:0f:dd:b0:ef:9a:42:44:ae:df:0b:4a:42:55:37:
0b:74:20:69:55:57:1c:dc:f5:cc:85:7c:96:4d:c9:c6:65:15:
73:64:c0:7b:6e:57:ec:ed:3c:42:90:ec:bc:b7:77:8d:9c:b2:
aa:5b:a3:8b:b1:c1:7a:34:38:04:59:4f:4e:4a:d6:8c:31:ba:
8e:b6:d7:fd:d5:0f:03:67:19:0f:61:e5:d7:d5:f0:65:21:d4:
29:07:c5:b2:97:f1:75:e8:ff:19:14:4c:79:b4:1e:cf:c8:02:
ba:b3:b3:6f:43:ab:bb:92:2e:6f:93:35:1b:f4:63:37:b6:5d:
b2:e6:0d:d5:32:21:ad:89:b4:dd:bf:fd:52:6d:75:45:42:8d:
46:ac:79:9f:6c:c1:cf:20:e3:0f:98:00:6d:0e:7d:dd:64:04:
ce:91:7e:64:c8:b4:c7:34:cd:cb:40:5a:e6:d1:54:bd:96:40:
99:ff:d1:a9:6d:4f:ad:b2:5d:df:fd:00:d6:84:d5:ee:5d:c1:
e5:e8:86:01:55:23:b4:a4:cb:5f:ce:bd:28:e6:75:bf:5f:30:
b3:1d:20:d6:d2:20:c0:72:19:dc:d0:fe:72:06:ca:86:a7:0b:
ea:e6:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:51 2026 by rpki-client