Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: 8nA5r0DCdjY8jPBAlakr6M/K8GKjKa6HXJeaanA7AV0=
Subject key identifier: 8D:2B:29:F2:50:D5:D8:71:F3:4B:B6:AE:40:C1:75:AD:5E:36:67:58
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 019D284D954C2025AE51693644CE14C899A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: OvCLZv7TonaGJB1evrOFMF4B60B0vvhkofX97EpYzxU=)
2: vlgEFLVkNwRtCEx7sTNLVkmYtlg.roa (hash: +zusmP86eI1NBAkkNvI1Gm9fd+tKP132pkvvT3BYBhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:95:4c:20:25:ae:51:69:36:44:ce:14:c8:99:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=8d2b29f250d5d871f34bb6ae40c175ad5e366758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e8:ae:07:35:e9:0d:7f:0f:76:8d:3e:f5:5d:
20:66:ba:38:e6:6d:3d:cf:3c:db:ae:5a:37:ec:53:
30:2a:4a:0f:d1:cf:ed:8c:49:46:f5:4c:c4:90:6c:
4a:c9:c4:e8:27:38:80:56:56:d0:17:88:d4:e3:07:
05:71:aa:94:fe:fc:15:46:f4:6a:c2:d3:0a:51:b6:
a3:3a:fe:9f:07:05:75:55:eb:ad:78:07:0d:9c:f7:
2d:be:e4:5d:b6:b3:70:3f:db:97:07:35:cf:ff:04:
59:f0:6c:fc:f5:55:9b:52:da:fc:04:6a:2b:a1:50:
5d:23:48:c8:7d:e4:b0:ae:c0:f7:74:b8:22:50:93:
a7:c3:98:0d:6b:93:c7:e9:0a:ef:36:8f:21:e2:17:
14:6c:07:df:3f:f8:b4:2f:59:e0:31:38:32:8a:d7:
a7:5b:71:b4:5b:e1:a6:f1:66:7f:28:72:d1:ce:ce:
2b:73:12:51:dc:ff:5b:3c:24:9f:38:c5:9c:16:f7:
c7:0b:89:25:91:db:0d:0a:4a:e0:30:b2:10:d4:82:
b3:6d:37:06:99:a3:98:df:9e:a3:b9:09:69:bd:03:
cb:41:54:0b:b3:8b:11:a3:cd:02:a1:52:19:ca:ae:
03:2f:f3:1d:cb:d9:ae:d2:0c:0e:ae:06:e1:ed:3e:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:29:F2:50:D5:D8:71:F3:4B:B6:AE:40:C1:75:AD:5E:36:67:58
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2a:89:28:1c:70:b5:01:3b:17:33:39:6e:26:f0:c9:b1:e6:
36:b2:d7:e4:56:be:46:8e:09:6e:00:79:11:60:b8:7f:82:05:
7e:eb:48:35:19:a7:73:4f:43:cd:cb:2c:cf:17:99:c2:9d:cd:
95:ee:7d:42:87:81:7a:5e:76:26:fb:14:e0:6f:a8:61:0c:c3:
29:06:5c:1c:a4:45:28:85:6b:7c:b0:2c:bf:16:fc:b7:ab:48:
3f:c8:c2:ee:58:b3:34:bb:d7:8d:97:6f:24:57:12:c8:e8:6b:
ce:7e:bc:0e:8f:09:48:09:ad:b6:43:7f:f1:e0:01:e8:17:43:
55:56:39:bb:ae:f5:b3:10:4c:76:ab:96:b6:2b:0d:29:e3:6a:
4d:d5:15:ef:3b:1d:f1:83:05:62:b7:ed:e8:fa:18:e3:25:b0:
64:98:24:9a:d7:28:31:6d:42:ca:d4:ae:fd:e7:e7:68:44:a0:
c7:3a:01:03:36:0f:87:31:c4:f0:c8:73:6c:dd:be:8b:a6:b2:
0c:e7:c9:e9:59:ff:06:e1:55:81:8f:fa:0c:19:e7:c9:39:ae:
63:17:1d:87:78:53:f7:f5:df:56:a6:ff:21:d6:fe:be:96:5a:
2c:b6:37:bf:1f:ae:14:6c:eb:65:78:75:47:fc:bd:97:17:64:
a3:ea:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:15:33 2026 by rpki-client