Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
File: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft (raw, json)
Hash identifier: jeun4GgoiT73D5xAkWG50KDPGqQtLsaoZYuwC7vA/xE=
Subject key identifier: 9D:37:6B:A9:C8:28:4F:B3:E0:F1:1B:14:12:78:C1:B2:12:8C:67:F7
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 019D28848870CEAAF85E71FD98AEF22E76E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: 8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl (hash: vW4Ep1cgIEK20/JVU1aEu+Yr1DP6w6uje72JC9f86bY=)
2: JC7SpRs2Up1FyDKN9fRpb32kUNo.roa (hash: 4G4RVjTZuZAjn+Z3Oy76fDFT7GE1perVRfpxsazJC1k=)
3: wmf-yPqG2ZS7mezex8_xqyD_zwI.roa (hash: 9fpYJ00dESb0YftBPOVVC+D9JxFJntLrwwnBd1IBOJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:88:70:ce:aa:f8:5e:71:fd:98:ae:f2:2e:76:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=9d376ba9c8284fb3e0f11b141278c1b2128c67f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:89:da:af:39:34:6f:61:e1:e8:c8:17:86:52:
5e:9b:87:2b:04:6f:a2:4b:3f:7a:36:14:c8:13:16:
70:6e:67:29:6d:c4:92:4e:fb:5b:1d:47:ed:6d:e2:
89:b7:ee:a7:30:9a:58:98:8b:7c:e4:3d:cf:0a:48:
35:52:2c:fd:f3:26:ae:d6:df:04:f7:b8:c9:ee:ca:
b3:ab:27:01:ee:47:5e:b3:51:fc:c7:61:20:48:e7:
b9:6e:77:2a:1a:3f:81:3d:16:29:b9:42:59:29:93:
f3:7c:bc:73:ca:c6:40:04:99:fa:ac:07:b8:17:33:
2c:68:66:65:bb:f7:c3:ae:98:41:0f:de:8d:f1:54:
7b:ad:79:56:1b:1f:05:f5:f1:92:37:ac:e3:ea:7b:
7b:ff:23:88:22:7f:c3:09:22:bf:43:02:a8:53:f2:
60:87:3d:e7:44:19:a3:3c:60:92:9b:63:6c:cf:1b:
00:0a:7a:73:17:46:0a:f6:fb:96:99:1b:8c:8a:80:
c6:70:ef:2f:05:57:e1:56:43:c3:66:16:9f:43:80:
ee:d8:b8:37:11:2d:7a:f6:f9:65:95:7d:39:19:c6:
93:78:d5:74:7e:8f:be:c8:5b:92:58:64:2c:c7:da:
f5:de:9c:da:1d:a1:ff:e1:49:10:f3:97:f2:43:ca:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:6B:A9:C8:28:4F:B3:E0:F1:1B:14:12:78:C1:B2:12:8C:67:F7
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:42:eb:7e:e1:6c:2f:5a:19:05:73:f5:26:c6:a0:98:ae:9c:
37:cc:ca:40:f7:a9:ea:5d:c8:2f:c2:10:5c:33:4a:c2:08:15:
33:0d:5b:de:fb:19:46:59:75:49:f2:70:c6:84:66:49:d3:5c:
da:99:1e:f7:23:18:09:16:95:1b:82:02:50:42:84:5b:ab:ad:
39:29:9e:56:b7:b7:4a:3d:bb:17:cd:f5:4f:44:f6:c9:5f:d7:
43:03:93:93:18:20:6a:1c:26:d0:5d:de:ca:34:ca:aa:0d:ba:
0e:74:56:a4:97:c0:27:05:aa:e6:32:45:99:70:15:44:90:0b:
2a:fc:a1:a7:69:c7:c0:3d:45:a6:22:de:2c:5c:60:6b:45:4a:
3a:e7:c3:2b:e1:a1:f4:46:da:f5:02:db:e3:9e:48:1a:82:f2:
18:0d:b1:32:42:e0:31:bc:b3:0b:f9:4b:73:ec:45:1b:82:18:
a6:b0:3c:42:9d:5e:02:57:7c:ae:c3:55:b4:2d:39:98:9e:39:
8a:f3:51:e9:6d:28:ac:0e:ea:17:b5:a8:30:4a:73:28:34:a0:
96:e0:e3:a4:f6:92:d3:2e:0d:1a:f8:07:fd:de:72:fd:7e:75:
3e:43:a6:08:cc:ec:6b:e9:23:be:6c:df:6a:5a:35:8f:5c:07:
39:f6:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:41 2026 by rpki-client