Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: ruMTUv07NCAOXIJuuxhFQlpPjRSjguWF6btIo96oPL8=
Subject key identifier: 3F:6E:04:6C:6D:09:63:99:9C:A6:99:85:EC:D9:D6:A4:3B:EB:F3:87
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 019D2B4EBF0E168FBEB72023DCC76A04D4B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 18:01:14 +0000
Manifest this update: Thu 26 Mar 2026 18:01:14 +0000
Manifest next update: Fri 27 Mar 2026 18:01:14 +0000
Files and hashes: 1: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: 2Jvf31gERq4zeT9JIZ5oVOfCuP6PpfAWnc5yKld1seI=)
2: n90xmr_CM6O4WDRtYmfgJfxxrvA.roa (hash: lPtn9C/LBef80I4Gcyice5R+gf5Md1ot7qq45wVZu/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:bf:0e:16:8f:be:b7:20:23:dc:c7:6a:04:d4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Mar 26 18:01:14 2026 GMT
Not After : Mar 27 18:01:14 2026 GMT
Subject: CN=3f6e046c6d0963999ca69985ecd9d6a43bebf387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:72:b5:36:82:c4:c2:16:64:b5:d3:cd:59:
c3:84:4b:67:f2:62:27:73:43:a9:30:43:28:44:0f:
43:33:40:82:7f:9a:4a:b2:70:00:9a:e6:28:da:4e:
17:4b:2e:1a:64:e1:7f:77:90:88:a1:5c:bc:79:fe:
74:99:ac:34:5a:19:65:9e:08:6f:43:fe:87:93:77:
d9:79:e1:67:aa:37:37:a3:9f:0d:49:74:71:52:85:
b2:a1:94:d4:31:c1:3e:af:57:13:81:ac:9b:4a:af:
5b:12:11:e4:98:73:c5:cc:0a:2d:ab:1c:e8:e2:df:
4c:d1:c2:29:eb:33:c0:1e:fd:a9:41:ea:49:f4:4d:
b2:0d:bf:94:53:01:0e:2c:38:0b:78:e0:f3:e8:39:
e8:4b:4d:bd:d0:8a:90:37:57:c4:93:2e:92:cc:a1:
b6:eb:e2:99:3b:93:61:28:73:7c:7f:d5:d0:ed:ec:
1a:41:8b:d8:86:2c:88:94:e1:44:d7:a1:ef:6e:68:
bc:8e:e0:cb:dd:4c:3b:73:63:04:a1:aa:f3:a9:89:
89:17:d2:bd:bc:93:b9:bd:fd:4c:fd:2d:a2:ad:7d:
65:d5:63:cc:c0:78:9e:3e:b5:76:dd:a6:01:f7:f1:
26:76:8b:ff:91:43:5d:3d:9d:69:74:6b:1e:31:7d:
ee:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:04:6C:6D:09:63:99:9C:A6:99:85:EC:D9:D6:A4:3B:EB:F3:87
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:2b:58:d7:c7:62:58:45:28:d5:02:6c:e1:38:a1:65:90:
8e:0b:71:b8:4a:23:0a:23:d9:6f:b2:64:13:b0:2d:ed:32:1c:
64:03:5a:4f:d5:34:cb:29:47:fb:7b:10:5d:71:f7:2f:fd:89:
aa:af:96:8d:f9:db:12:ee:b8:4a:4b:14:17:de:45:3b:2a:87:
ca:56:ee:16:ca:cc:79:e1:d7:92:7e:da:bc:ba:e9:43:aa:7c:
50:b7:4b:96:c6:47:41:92:d9:40:df:ae:a4:ba:03:c6:e0:c7:
94:37:60:8b:21:a1:2c:14:9f:6f:b2:5f:84:1b:e0:b8:1b:09:
91:16:94:67:75:c7:ad:a5:75:46:6f:71:ce:bb:7e:23:23:7e:
9b:2d:0f:d3:d5:30:bd:72:d2:9e:9d:07:d8:36:f9:4b:03:c0:
f8:f0:16:11:49:51:1e:9b:d3:d2:8c:a5:d3:02:e1:f4:90:d1:
95:b4:fe:ec:af:09:16:bc:80:04:ca:c6:aa:df:86:a9:0b:de:
3b:08:f0:e1:18:71:b7:2e:b2:0f:8a:df:77:25:79:fe:ed:68:
90:74:04:61:f9:a5:c9:cb:ff:9f:06:54:4a:5a:5c:44:71:5e:
bc:b3:83:b4:ae:bc:a4:a5:cc:b1:a0:f8:6f:de:0b:b2:da:66:
e6:8b:4a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:43:52 2026 by rpki-client