Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: pZM+PHvd/ZOB5HzpCD0hiSJhrHrpDHqHSu+Van1ky1Y=
Subject key identifier: D1:72:E0:28:75:E3:2E:60:E1:D3:9A:94:49:9C:86:D9:93:42:CE:E3
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 019D2BF2D5CDE50B2F0551A44A0CE6ACDF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 21:00:27 +0000
Manifest this update: Thu 26 Mar 2026 21:00:27 +0000
Manifest next update: Fri 27 Mar 2026 21:00:27 +0000
Files and hashes: 1: Hbn8x0ebxYPZ2S4cZB-DuECWRIY.roa (hash: vgpms375ZNHUjcZk9fgkMXFPfvTYsPPbiXsTHzCrq6o=)
2: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: Tc1OGNlwflAjVt4+MbjMHHRV7FPsumE1bwwA5EBDR54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:d5:cd:e5:0b:2f:05:51:a4:4a:0c:e6:ac:df:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Mar 26 21:00:27 2026 GMT
Not After : Mar 27 21:00:27 2026 GMT
Subject: CN=d172e02875e32e60e1d39a94499c86d99342cee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:06:7c:98:f5:06:b3:40:c1:cc:88:85:43:
b1:46:f6:38:f3:46:8d:bb:69:98:73:81:97:5a:03:
d0:e7:18:e9:c8:ea:c5:0a:30:52:af:60:b6:8d:bf:
ce:cd:9d:a2:bb:16:b4:2c:17:0b:5b:eb:ac:cf:31:
c1:cc:07:0c:0b:42:c1:b0:04:91:fa:1c:b2:a4:e7:
24:12:49:32:f8:d6:07:b7:72:26:0c:81:b0:d5:6b:
7c:47:eb:47:a6:10:72:b3:37:bc:a5:59:f9:59:f2:
0e:6e:3f:ff:3a:94:87:7d:25:b7:72:49:c5:92:a5:
1b:63:c4:61:ac:9d:b7:1d:f3:bf:aa:7b:0d:c8:6b:
c3:e7:f6:4c:6c:7c:7c:19:f8:0f:6f:b2:01:97:0e:
44:2f:ce:2e:b3:05:36:83:47:63:99:71:e5:90:63:
f3:d7:35:02:08:4b:d9:df:b3:ef:36:35:94:98:9c:
55:de:77:ca:a5:b5:b0:57:6a:a6:96:3d:90:58:ff:
61:0d:16:e3:5f:02:f4:af:1b:39:11:81:fb:3f:a5:
8a:f4:0d:1c:00:9d:a2:2d:33:f9:05:72:f3:a5:2c:
d0:5b:0c:79:24:92:07:80:12:1b:a5:fb:09:61:ca:
96:da:5f:27:f1:e5:c5:91:84:5b:3f:84:d7:8f:79:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:72:E0:28:75:E3:2E:60:E1:D3:9A:94:49:9C:86:D9:93:42:CE:E3
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:67:d4:65:f0:24:7f:5f:74:e6:55:c4:6d:3a:f0:d8:c7:8b:
83:40:9c:7f:9e:f5:bb:11:f7:b1:d2:27:e8:7e:85:d7:79:f9:
4f:ba:5b:cd:1a:1c:aa:de:4e:b2:d5:3d:e8:b3:f2:ee:15:13:
19:e4:2c:b4:aa:b5:dd:3d:9e:dc:ad:b2:a0:02:c1:3e:91:bb:
4e:8d:9c:7c:54:ff:f1:d1:9e:6c:2b:cb:27:4d:96:3b:f6:64:
06:a4:3e:b1:9c:e5:ac:99:99:14:27:0a:cf:90:fd:a6:3f:44:
9e:b9:3d:40:46:80:21:21:78:f5:9b:8b:e6:0e:55:45:b2:c1:
e5:8b:67:e8:ff:e3:46:2b:fc:92:67:ab:e2:74:a3:ba:69:1b:
b2:d8:27:fd:74:ff:1a:f8:2d:a3:2f:46:07:83:9f:e7:96:eb:
57:52:f2:1d:9a:87:d7:d0:b7:19:37:df:f6:e5:8c:46:89:c1:
a0:53:60:09:cb:6b:3e:bd:e1:17:98:69:fc:d0:a6:ff:5d:42:
15:7e:ff:35:ba:2d:2a:0b:b7:44:c5:f2:48:24:37:55:34:c8:
cd:cd:91:32:db:ea:d3:8b:1a:6c:8c:44:19:90:c7:62:eb:c2:
e5:ec:46:b4:b1:b5:16:6f:01:75:fb:24:d1:d5:c8:f6:15:4e:
ee:44:61:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:59:11 2026 by rpki-client