Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: SEIwjIK+b1MwNLTZAYaVFepeiIdN0201HrJoGl7GWv8=
Subject key identifier: 30:01:6B:D0:BD:8D:B0:7D:8C:06:28:9E:AB:B7:37:A6:24:4F:BB:03
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 019D3376034B73A8104B1FB43DFD102F9CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 1042
Signing time: Sat 28 Mar 2026 08:01:05 +0000
Manifest this update: Sat 28 Mar 2026 08:01:05 +0000
Manifest next update: Sun 29 Mar 2026 08:01:05 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: 0mbzA1yZGRx0ToeT9OqsVWKeP/ddEonQ6Eo5Ho336pI=)
2: swlvSyg5P2tG5hf6QszpyWKMn_k.roa (hash: bb3L+IeAkS1sZt2NMi7C0qunZyUMt8jC260rx3ny2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:03:4b:73:a8:10:4b:1f:b4:3d:fd:10:2f:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Mar 28 08:01:05 2026 GMT
Not After : Mar 29 08:01:05 2026 GMT
Subject: CN=30016bd0bd8db07d8c06289eabb737a6244fbb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:c0:37:cf:5e:16:7a:20:a6:b9:b1:e4:02:
b6:18:39:a8:fd:91:2c:bd:b8:9b:60:e7:a6:23:5c:
53:0d:51:cc:f6:4f:b6:10:7e:7e:a3:69:e2:76:97:
b7:68:30:50:ec:f2:42:4b:60:bb:0d:b3:cd:46:22:
1b:0f:ee:39:ed:de:02:8a:04:52:2a:a3:89:7c:0d:
d5:26:1c:f2:b9:ff:4b:7b:94:b8:d4:1e:e4:7f:5c:
d7:d9:6c:9c:28:dd:83:b4:ba:e0:6e:4b:8e:9a:b4:
70:dd:9e:1b:8c:b5:87:d1:35:91:90:e5:e2:76:c2:
b5:c9:6e:88:1a:39:8c:c5:d1:01:c5:58:a1:e8:19:
ab:a9:82:29:ea:a1:a1:94:3f:92:23:b8:95:cf:92:
c7:e6:56:fb:ea:91:81:2f:74:14:f3:50:d4:cf:5c:
47:1f:54:5a:57:21:ff:73:16:db:50:60:c8:15:07:
f4:7e:63:74:0a:1d:cf:2c:97:e4:28:12:cd:c0:97:
33:1a:be:c3:42:94:ad:23:09:ad:58:ae:86:fa:ed:
2c:b7:17:d4:31:5c:74:21:5f:82:ff:ef:f3:6a:ae:
9f:bb:b8:37:0f:3c:5e:3a:ec:dd:33:8d:4c:78:da:
55:1c:7f:19:4a:36:cd:b8:cc:a7:7c:93:13:26:9b:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:6B:D0:BD:8D:B0:7D:8C:06:28:9E:AB:B7:37:A6:24:4F:BB:03
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:65:ad:ed:42:5d:9b:85:7a:99:35:8b:2f:e1:a3:96:37:06:
7e:e3:53:0d:a7:48:93:84:92:9c:de:02:d8:a6:37:44:c3:d0:
07:cf:4e:7d:57:21:5a:1b:5e:23:d7:c2:41:4a:cc:34:07:81:
03:3f:2b:de:d5:fd:26:74:31:d6:ed:3e:ab:7d:74:b7:50:12:
1d:f7:56:b3:19:6e:2d:08:62:e8:89:63:23:d2:b1:54:ea:88:
f3:92:57:e4:4c:a6:42:5d:5a:f8:98:59:fb:96:52:ec:60:8a:
17:75:9a:c2:0f:3e:53:80:34:aa:9b:8f:6e:9b:9e:16:75:9a:
a2:52:67:a8:2d:78:27:fd:aa:dc:d1:de:b3:49:29:d9:0c:84:
cd:0d:8a:c5:ca:08:bd:03:b4:3c:96:a1:9b:7f:3d:0d:51:10:
2e:e7:4c:fc:d5:d0:eb:f2:85:36:fa:2b:01:dd:d2:c4:0f:92:
1e:aa:ce:90:e1:ba:5d:de:53:c6:bd:9d:fb:58:05:12:70:9f:
5d:ac:1a:7f:72:59:a4:e1:33:6a:59:17:01:cc:03:c9:c2:e4:
42:94:9c:34:2d:ba:9a:d6:ee:e9:9a:06:a8:7d:27:1e:be:3d:
db:1f:73:37:42:33:ef:5f:3b:93:8f:57:0f:e5:28:99:4d:c3:
61:6e:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:44 2026 by rpki-client