Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File: iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier: UOygr8RUPWHFWw8hdsrE7F8sv5gOFN3CZRGFFuXnpsc=
Subject key identifier: D5:B9:22:96:91:A6:EE:1B:BD:7E:A6:97:C7:D1:E0:09:41:47:27:3D
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019D2704B8A8CD8F3CE94FCC17E2AB50F348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number: 1939
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: XMPEmo3VyZNZxdfu5EddVS62vv8.roa (hash: 2ZYUsjgp2DTdjQCWXZ434UAo5JDqjz2ePaAoipm0c8M=)
2: YklH_vepZzEkc4R0x2RBX8IDDUk.roa (hash: pv6n+2hKIVBO6+P4Pldjs2VXfAy2gbQUsUHIIXPpa8Q=)
3: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: cBQJJM6BhcMV1CisV1S+noO40uf0IIzDJaIu09TPFDQ=)
4: p1-tBjo82YK5-hLx49YUOkRO8B8.roa (hash: pyv7bHMphEmXFj30CUE4/gG4n4biXAKLWYLes38ZMKE=)
5: psBFyd0hTNhbvZHPVPCTUfi9Q2o.roa (hash: /FnOfx1SdD/epfrxbTa7bP0djVz2kffTH1AWAe+LQA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b8:a8:cd:8f:3c:e9:4f:cc:17:e2:ab:50:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=d5b9229691a6ee1bbd7ea697c7d1e0094147273d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:cd:aa:76:2f:40:87:8e:3b:fb:1c:17:82:
ac:11:36:ce:31:fc:56:e1:4e:77:5e:d6:20:59:69:
97:04:a7:d3:76:d6:58:db:cd:7d:2b:f6:e1:92:c3:
01:2f:af:9c:c5:29:0b:1d:d0:f3:27:04:a2:a0:1f:
ef:6a:a0:6b:e2:ed:61:df:e1:65:06:09:83:6d:ae:
66:d8:aa:03:e8:23:6f:d8:cb:9e:46:41:0c:0b:1a:
b9:6e:56:43:f9:19:e7:79:17:dd:d5:9a:53:e4:99:
c0:02:04:ed:4f:22:79:d3:b8:7e:ca:9f:17:b6:34:
4a:3d:8d:b6:e5:94:cf:08:f5:0e:12:29:13:db:9f:
2c:cc:92:49:b9:8c:e2:8e:08:01:fc:b3:c8:88:65:
2d:ba:9c:9e:cc:eb:75:5b:89:f4:3f:65:af:2f:aa:
03:1d:b5:7a:5b:7c:36:85:00:5a:3f:3a:f4:43:13:
74:b0:12:04:a8:d0:30:b4:b2:a3:d0:2b:d8:50:ab:
f0:6d:3c:f4:06:6b:3f:d1:8a:9d:1a:e3:82:78:40:
3a:f9:d8:a4:4e:1a:f2:1b:ec:f9:27:2f:2e:a9:ac:
e0:1c:0d:a5:ff:f6:af:b9:57:23:19:60:14:40:8d:
92:da:58:20:8d:8c:06:a6:31:50:2e:be:cf:48:85:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B9:22:96:91:A6:EE:1B:BD:7E:A6:97:C7:D1:E0:09:41:47:27:3D
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9a:39:93:d3:a1:b2:db:41:f3:2b:82:a2:ed:55:6b:16:2b:
4b:29:9f:46:08:20:c2:d2:5e:6e:7e:a9:6f:68:b0:bb:83:45:
50:44:ac:37:a6:fe:e1:e1:23:80:77:be:d5:5a:a7:36:6e:28:
31:ea:b1:35:7c:9b:d9:de:0f:55:9e:b3:19:60:6b:9d:e9:ba:
7d:13:cf:95:39:50:78:ac:63:68:74:a6:b0:f2:88:3b:a9:98:
41:08:e4:2c:cb:d4:60:52:44:bd:12:99:de:7e:33:89:1e:56:
23:5d:fe:dc:02:02:2d:f9:bd:40:e2:59:5a:92:c9:51:ca:f1:
99:67:72:72:5e:56:a9:48:84:ce:b1:48:32:81:75:1d:7f:d4:
25:1b:eb:e6:1c:18:96:d6:13:8d:a5:43:f3:eb:70:bf:9e:d1:
62:8d:1c:03:14:69:ea:84:0f:7e:f0:8a:b3:3f:84:cc:b0:70:
5d:33:35:87:dd:7d:d4:41:c4:c8:67:81:4b:34:18:74:c5:f8:
e2:c9:3a:b7:82:03:b0:88:d7:3c:d9:ca:52:1d:6f:8a:c2:6b:
12:96:b7:6d:38:61:d5:d4:e2:36:16:d4:ef:12:7f:95:33:b7:
b4:ed:35:55:f0:63:ba:07:fc:88:f7:da:3f:87:05:b5:5d:cf:
f7:f4:20:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:53 2026 by rpki-client