Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: HtRxYQpN+QaXzQ/sM/GDT8VewirRjjKpWLsK4g6JiGU=
Subject key identifier: A3:5B:6C:5D:E7:57:DC:FD:2F:84:D3:32:0E:2E:D1:FF:E9:FD:0B:F4
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 019D2772710956E51D0AF3CBAC48C3DB688F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 0822
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: h95cesxdDB7j2XWx3lIIhYnh7d587Fa8gf1L/BWkALA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:71:09:56:e5:1d:0a:f3:cb:ac:48:c3:db:68:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=a35b6c5de757dcfd2f84d3320e2ed1ffe9fd0bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:5f:f2:70:19:95:65:22:a6:cf:c4:36:0c:
37:05:64:c6:22:bc:f1:d9:3f:b0:08:5c:e7:45:6a:
59:81:b2:65:03:9f:48:ab:3f:39:de:fe:42:cc:28:
1a:cc:34:09:e7:db:38:da:4f:fd:69:e7:1d:f3:04:
77:08:e2:ec:ed:60:20:4f:92:e3:d4:76:3a:a9:2d:
47:6b:b8:f0:77:b3:00:41:81:c4:55:0f:1e:b8:e8:
0b:d5:d8:e9:02:7b:1a:81:70:3c:8f:cb:c0:b2:a6:
6c:92:b6:59:99:d3:8d:4c:30:af:3e:8b:40:17:db:
de:07:8d:2b:b0:75:e1:ff:50:96:17:a3:37:25:80:
34:e4:99:23:a0:04:f4:3a:a5:b3:89:4c:f9:88:12:
8f:a5:c7:38:28:b8:06:8e:3d:e7:d7:fe:b1:8c:f7:
fb:6a:de:e8:22:30:44:5a:c4:4d:51:41:7c:a0:96:
e6:0b:c6:cb:e4:ea:68:ff:d9:a9:61:a9:92:2c:83:
53:29:86:61:0f:7a:a7:18:09:02:e5:57:a3:76:8c:
05:d9:00:03:11:67:6b:a8:a2:1b:ae:c3:c7:a8:eb:
44:39:a9:54:45:a8:99:6d:c9:93:9e:5a:1b:82:4c:
4d:e4:e9:03:b2:15:4d:df:11:bc:64:58:04:cd:90:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:6C:5D:E7:57:DC:FD:2F:84:D3:32:0E:2E:D1:FF:E9:FD:0B:F4
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:b9:81:d6:1b:b5:f8:88:1a:51:30:f4:c8:c2:5f:f9:ad:
7b:fd:01:b5:94:88:dc:64:6d:f8:a7:8b:c7:90:a0:47:e2:e0:
50:f2:38:ea:5a:da:f7:0e:94:5e:24:93:6b:db:b0:be:c2:0a:
cc:4a:5b:81:07:a9:ee:90:41:76:3c:53:19:03:af:9e:76:c2:
f5:d3:cf:d6:46:f8:88:03:41:61:6c:f9:44:e6:2f:b0:81:6e:
23:34:61:8f:b9:40:38:eb:29:46:c2:63:f2:dc:d8:6b:31:d0:
ed:be:95:52:53:04:24:05:0b:b2:70:23:ab:f5:7f:00:24:d3:
09:a4:03:27:91:5c:53:62:05:bc:44:d6:c6:8d:67:0e:df:61:
84:eb:2a:f3:d2:17:bd:76:c2:2b:9e:44:3f:b0:48:37:ca:e1:
8e:d0:db:fe:60:03:d1:9d:85:af:8a:df:2b:fd:8a:4e:0d:08:
aa:19:79:0f:87:aa:3e:61:65:4e:8f:e3:25:0d:3e:2f:ef:c9:
54:cc:d7:f3:cd:6c:97:ea:59:9a:59:4e:db:88:71:08:cd:39:
04:12:c7:36:e6:dc:07:fe:1e:6e:38:88:2c:35:f0:56:4c:e8:
c6:de:fc:d4:96:1d:80:9a:1c:aa:09:0d:c8:12:3c:6c:cc:6b:
0b:5e:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:26 2026 by rpki-client