Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: I9vymi3PDXK9PTHew7K8uy3JrIuRnfdPFfAPKbShH6k=
Subject key identifier: 65:DB:B6:34:CC:A4:99:1C:A5:A8:23:94:1A:8F:4A:83:10:AD:7F:5B
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 019D26CD750DF696C9C3807103F2660E0E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0DCD
Signing time: Wed 25 Mar 2026 21:01:32 +0000
Manifest this update: Wed 25 Mar 2026 21:01:32 +0000
Manifest next update: Thu 26 Mar 2026 21:01:32 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: D9C/NfexODUdPmFLouBHsZa8XY8toSrOT/IDgPa/Q0A=)
2: QFN1Pmp0QiKx5d3w_NYc2ZWKHEw.roa (hash: Xxu/WKTNsoIWst3QbQSPutJklBpFRyV1E6yTl52XKwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:75:0d:f6:96:c9:c3:80:71:03:f2:66:0e:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Mar 25 21:01:32 2026 GMT
Not After : Mar 26 21:01:32 2026 GMT
Subject: CN=65dbb634cca4991ca5a823941a8f4a8310ad7f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:f6:14:a9:5f:96:9d:78:10:4b:83:d3:2e:
4e:06:8d:bf:56:37:82:ed:ee:a3:7d:c0:6a:a1:c5:
79:f1:96:b9:ae:a6:94:56:68:2d:f8:97:8f:76:e4:
55:91:2b:22:69:a2:e6:fb:98:43:37:10:08:4d:74:
49:39:2a:f5:42:04:41:64:58:68:10:d0:3f:31:69:
ff:d6:c8:eb:c5:57:ed:8f:16:6d:80:aa:d8:85:86:
5c:70:82:ab:d1:47:f1:2d:b7:45:3f:65:ce:cf:a3:
58:51:ad:16:72:cb:ce:b9:72:ca:e7:6e:83:6f:27:
3e:b8:33:23:8c:21:6d:76:64:b0:b4:d6:b1:0f:47:
fc:e9:b6:0f:04:cc:5d:77:40:76:4f:dc:78:21:72:
f6:ef:e3:2d:be:7b:e0:c2:d9:9c:34:04:36:b2:8a:
96:bc:d2:16:ad:e1:63:84:0f:de:bd:85:56:de:1f:
e4:ed:1e:06:a1:dd:43:a8:71:6c:d9:90:9a:af:60:
d3:c6:5e:57:1f:b1:c4:df:e3:c0:f1:32:b3:f3:4e:
9e:26:94:ae:28:fc:73:fd:db:fa:38:bf:76:04:f8:
bf:99:a7:00:72:f6:28:ff:78:28:8a:e1:1a:32:63:
1c:8c:00:c3:3b:36:4d:59:3d:14:a0:5f:1c:2d:bd:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DB:B6:34:CC:A4:99:1C:A5:A8:23:94:1A:8F:4A:83:10:AD:7F:5B
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fa:67:0e:26:eb:d5:4d:26:e4:cd:29:88:26:95:2b:0e:e4:
40:ca:cd:7a:ca:27:c6:8a:dc:d7:9d:83:ae:8d:dc:af:cd:0b:
63:f0:76:e5:8d:c2:47:15:fa:ae:76:8d:6e:65:46:09:22:e3:
f5:b6:79:53:d5:5e:0a:ba:e3:23:c7:e3:10:53:15:9e:09:32:
53:1a:b7:4a:52:46:7c:19:6a:ec:59:f7:24:35:a1:e5:18:9b:
95:5c:63:25:b4:a8:c6:f6:d8:3b:1a:cf:55:86:55:e9:36:e0:
0a:91:bb:67:37:1c:c7:51:b5:05:ab:bf:11:32:50:07:38:ae:
a0:38:ee:67:c6:90:c3:4e:36:bf:2a:d7:1e:2a:27:2a:50:1c:
51:43:93:fd:10:0f:d4:eb:69:bc:02:81:5d:d7:81:8a:79:0c:
49:46:82:7d:3d:76:92:d6:d3:26:c7:fe:98:08:50:b2:dd:70:
39:08:49:0d:0e:2d:a4:79:5e:34:4d:50:a8:7b:85:0b:b1:7b:
53:55:38:94:14:db:b7:4f:76:7e:3a:1c:b6:0a:1c:03:42:46:
f6:e9:10:50:3c:53:d8:bd:57:d3:86:ac:54:54:25:7d:e9:7f:
e1:51:f5:29:0d:d2:bf:e4:a4:13:8f:f7:bf:60:ce:c2:e0:9f:
3a:32:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:01 2026 by rpki-client