Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: IHekgdMc1H8LQ9XBu1Ao4I6by7Tc1veZb7Zlb2QrGeA=
Subject key identifier: 86:9D:C3:1A:9E:55:77:CE:E1:73:F7:F6:F4:F5:6F:D7:30:D5:1B:C3
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019D281675CE3F8D0E0764B2BC8E4980CE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 181A
Signing time: Thu 26 Mar 2026 03:00:53 +0000
Manifest this update: Thu 26 Mar 2026 03:00:53 +0000
Manifest next update: Fri 27 Mar 2026 03:00:53 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: E8xKufLuepDd/Z5XPE0WkEt4iP0kM6BKms1TmD1/yqA=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:75:ce:3f:8d:0e:07:64:b2:bc:8e:49:80:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Mar 26 03:00:53 2026 GMT
Not After : Mar 27 03:00:53 2026 GMT
Subject: CN=869dc31a9e5577cee173f7f6f4f56fd730d51bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:fb:94:bf:5f:cd:8c:75:3c:e3:a1:59:c5:
49:5e:73:10:f4:56:e5:2a:3d:9c:8a:56:43:a6:6f:
29:84:14:60:45:32:56:9b:c9:89:3f:59:d6:3c:93:
f8:6e:63:75:33:fc:98:fb:34:be:a1:69:fc:49:60:
13:10:c0:4f:dd:52:9d:bf:e5:82:3f:4f:83:f2:f5:
05:56:a7:39:4f:c0:09:49:4d:5e:da:92:85:4a:e4:
da:9a:d5:11:5f:3f:4e:80:57:b8:92:e4:1f:02:23:
d4:3c:e9:43:1c:0b:a7:b4:ba:b8:b5:e5:2e:d9:ee:
45:56:f3:2e:3a:07:1a:c7:6d:8a:61:ac:63:17:fd:
16:f4:1b:18:18:c0:90:6b:a1:cd:f7:29:3f:99:99:
52:11:d6:d6:47:88:a9:39:90:83:42:2a:c4:53:18:
7a:4c:f0:67:35:fd:10:61:10:9e:e3:6b:b9:73:6c:
09:65:1c:dc:4d:bc:c2:3c:3f:fc:11:d6:88:d8:78:
54:ad:78:55:b3:de:ba:1d:91:b0:a0:b6:66:0e:0e:
1e:15:bd:12:a4:b8:cb:8e:49:e7:88:99:3c:d5:36:
6a:56:17:da:75:ae:be:0a:49:fc:5a:c4:ee:6d:3d:
c0:2a:79:3e:f9:29:b6:5d:1f:48:cf:87:db:89:cc:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:C3:1A:9E:55:77:CE:E1:73:F7:F6:F4:F5:6F:D7:30:D5:1B:C3
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:a1:9f:8a:2c:85:4e:1d:e4:b2:51:0b:1c:0a:e3:e0:87:
a4:a2:d3:c9:b4:1f:50:fe:22:7b:79:f4:da:c7:4f:5e:b7:c6:
36:62:cc:4e:7a:ea:de:68:a5:88:8f:59:53:11:01:68:df:cc:
c0:c9:58:17:06:73:fe:68:a2:46:09:76:fb:57:33:0c:80:f3:
09:46:f8:e7:c1:8c:b9:19:1a:bf:33:58:19:b8:a4:80:0f:6d:
3b:7a:d3:87:79:c7:bb:a7:f1:43:e0:20:50:b1:09:61:d9:05:
26:e7:9f:43:f7:5f:0e:ca:80:ba:fe:4b:9d:43:a2:9b:9c:97:
f4:e9:4a:0b:78:11:83:c4:a5:0e:6a:74:e8:40:ee:9c:24:68:
d4:c9:c0:67:c9:6a:3b:ca:6f:1c:6c:82:3d:fc:a3:ad:5d:c5:
4f:ad:4f:1d:f2:2d:29:14:42:5b:12:29:97:8d:0f:67:6e:5e:
ef:bc:5f:0a:26:eb:6b:6b:83:82:cd:73:f8:cf:cf:d1:d1:18:
3e:01:97:82:00:23:d3:6d:a3:e8:d3:e5:46:d1:a0:9d:84:5e:
ef:36:9b:e6:f1:80:7b:68:1f:7e:49:b3:5f:f8:49:6d:1e:6d:
69:3f:d9:f4:f7:67:81:9e:69:4d:97:10:8c:47:94:7f:c1:55:
33:32:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:22 2026 by rpki-client