Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: rGEui93DwJx5RRCVyrCNJ6BYBy7pG2oWg69fZsyn3s8=
Subject key identifier: E7:D9:B0:31:2A:EE:0B:1A:73:BE:89:81:C6:42:92:83:0D:DB:65:F4
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 019D2AE0A05332478C2547B7EC4666CAB2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 1374
Signing time: Thu 26 Mar 2026 16:00:57 +0000
Manifest this update: Thu 26 Mar 2026 16:00:57 +0000
Manifest next update: Fri 27 Mar 2026 16:00:57 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: He/4cYSBUKPSjm4RxDjSILfiRphDSpkefnwJXnLnLWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:a0:53:32:47:8c:25:47:b7:ec:46:66:ca:b2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Mar 26 16:00:57 2026 GMT
Not After : Mar 27 16:00:57 2026 GMT
Subject: CN=e7d9b0312aee0b1a73be8981c64292830ddb65f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:33:36:30:61:e3:eb:8f:b1:3a:7d:c5:f6:
6d:f7:33:b5:0d:ee:b1:6d:db:34:df:f9:fc:e1:e8:
82:4a:99:ee:43:0f:fe:48:bd:c7:67:5e:48:d2:87:
69:7e:df:12:ba:35:48:e3:51:7a:45:d6:84:97:cc:
b9:55:5f:bd:5f:21:4f:d0:13:49:17:ce:71:c1:e7:
36:6d:26:6c:ef:72:dc:06:e0:4a:ee:6e:22:e5:9b:
b0:d2:c9:94:c4:0f:5d:72:8c:41:e7:ec:fa:a9:75:
21:ee:b6:c9:53:36:c6:ec:b1:d7:8b:25:01:24:13:
35:4b:8c:1e:80:bf:e1:f9:24:bb:7b:f3:7e:a6:16:
f1:f7:9b:12:d5:df:a5:c5:15:86:49:e4:14:16:e9:
97:0d:b5:66:12:68:dd:29:4b:3f:65:5d:b7:a5:14:
b0:46:07:ff:f8:6a:da:2a:59:99:08:87:7e:f1:2e:
83:b3:c0:17:f1:00:9e:89:72:b6:3c:fc:72:e9:2c:
dc:af:3b:7e:22:ea:c0:19:7b:24:88:a3:8a:f6:e5:
ac:e5:ce:00:a0:36:9a:fd:58:e0:1e:14:e6:56:17:
42:1d:3d:b6:6b:7b:39:30:90:e3:83:67:ab:19:09:
64:98:23:87:41:1b:2e:17:8f:fd:80:54:13:60:ed:
f0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D9:B0:31:2A:EE:0B:1A:73:BE:89:81:C6:42:92:83:0D:DB:65:F4
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2e:26:c1:3e:53:63:a6:bd:76:11:a6:cd:43:f6:08:f8:f6:
c2:93:ef:ef:6a:53:3d:32:11:b6:20:10:2d:3b:4a:e5:a4:38:
9e:94:a9:57:da:c1:1e:9b:44:e0:e0:e1:b2:c7:3f:c2:45:be:
8d:13:32:7b:8e:3c:f3:21:99:81:09:d7:3c:0e:66:f9:70:f9:
03:14:4f:33:66:dc:f9:73:5d:8c:b8:4a:8f:61:19:3e:56:5b:
08:7e:47:f0:cf:bc:61:d4:8d:5f:ae:2f:64:0f:16:e0:e1:04:
45:a0:ac:73:fe:f2:77:7e:b1:be:71:f3:45:fa:09:a5:79:6f:
8f:fb:78:47:39:f7:2f:7c:50:f1:ba:60:d9:60:73:ff:76:c3:
41:cc:35:c3:21:44:83:51:45:f3:f1:a4:77:10:ec:8f:ed:c1:
c7:fe:f7:c8:28:2d:ec:d8:f8:33:92:26:19:96:0a:45:e4:51:
c5:dc:a0:9b:b3:55:42:56:6f:77:d6:eb:86:fd:cb:1b:b4:e1:
4e:2a:7b:88:04:97:f2:45:2c:a3:81:c0:af:3f:9a:e5:5b:b9:
93:2f:1a:e6:ad:24:df:c8:ca:ab:ce:c6:18:bb:90:a6:67:cf:
25:3b:a8:d3:84:ad:7a:d1:45:49:88:36:d1:79:49:5e:5f:14:
25:b3:07:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:15 2026 by rpki-client