Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: igWki87BAeP1lhsHf7gveE1XNDTdNfYUI9e+NLQpmcg=
Subject key identifier: 48:7D:D0:44:11:C1:0F:65:93:5C:D7:34:45:0E:66:82:7A:BA:D6:DF
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019D2A3C4AA9B6F0E35488C7462B05409B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:01:27 +0000
Manifest this update: Thu 26 Mar 2026 13:01:27 +0000
Manifest next update: Fri 27 Mar 2026 13:01:27 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: aNBiFf4PkrKjo+cOgaEYOsV574tR8if6wfalS3vFUqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:4a:a9:b6:f0:e3:54:88:c7:46:2b:05:40:9b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Mar 26 13:01:27 2026 GMT
Not After : Mar 27 13:01:27 2026 GMT
Subject: CN=487dd04411c10f65935cd734450e66827abad6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0f:c0:0e:eb:d9:39:96:50:aa:57:f7:85:e5:
06:cd:ec:3f:2d:3d:b8:62:98:43:78:d8:fe:61:ba:
94:ee:75:7b:73:02:4d:91:7a:72:d5:0e:34:32:7b:
73:ed:0f:0a:34:6e:29:f8:8f:de:c7:74:36:eb:09:
29:21:e7:73:30:63:41:84:df:ad:cb:1d:b9:cb:0d:
16:d6:1b:c8:c0:3d:40:d7:83:2b:44:56:03:f1:24:
8b:a3:0b:1b:5a:ff:86:2a:f4:7b:c3:0b:0f:68:1a:
90:fb:1f:61:40:14:91:f2:c5:2b:98:43:52:0e:42:
22:63:e8:76:4c:aa:ef:9e:52:e3:1d:a2:cc:92:0a:
2c:66:5c:40:99:9b:5b:9d:94:1c:47:88:c6:76:a8:
0e:66:8b:74:b2:b1:5c:11:d8:36:d4:54:ed:06:be:
ee:d5:a0:90:01:49:75:0a:68:8b:2e:96:ab:bd:77:
a7:43:a5:51:4c:63:57:9b:3c:96:62:e3:20:7b:dd:
50:d3:36:15:93:01:e7:f1:1c:ea:72:6c:da:9a:cb:
41:d2:f6:27:aa:d7:5f:a6:8c:95:45:59:31:69:88:
81:25:3c:ca:29:07:40:61:95:86:60:41:e9:20:b4:
58:3b:f8:50:91:fe:d8:a3:02:73:d9:5a:e5:55:ca:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7D:D0:44:11:C1:0F:65:93:5C:D7:34:45:0E:66:82:7A:BA:D6:DF
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:14:fd:49:2e:64:b0:37:38:20:88:c9:ac:d7:ee:31:15:
38:b1:46:d1:92:5c:e5:e3:ef:b2:74:81:c2:8e:a9:63:85:1a:
24:ea:68:de:5b:f5:84:64:9d:c4:7f:c9:2c:96:ee:da:6b:e4:
50:ab:1a:7a:82:d6:74:6e:38:50:0e:55:f6:63:0a:29:54:96:
f1:37:da:d9:fd:30:0e:be:f4:b3:67:aa:ec:00:6b:f1:3a:32:
09:f8:8a:40:86:4a:89:18:a0:3e:2b:7f:9c:88:b4:52:ce:b0:
6f:8b:47:17:19:d2:db:81:12:d7:ec:d3:d2:7e:a6:81:2f:03:
f6:d9:2b:d0:3b:36:c1:33:dc:bc:7c:b4:96:4d:25:5f:ba:9c:
c2:a8:6f:38:74:1d:1d:2e:6f:aa:3f:e7:a1:b2:9c:d4:df:bd:
1e:85:1b:84:90:eb:fe:48:5f:5d:26:47:8f:f3:fa:2f:b3:b4:
af:3b:1f:dd:95:63:a0:df:0d:72:dd:52:d1:9b:a4:3c:4a:ce:
0a:12:57:df:d6:9d:d7:bc:18:8d:fa:3a:16:a0:e3:1a:83:10:
a0:8e:a6:cf:52:a6:6f:11:1b:32:3e:97:81:f0:42:5e:2d:a8:
33:46:f1:29:99:02:b8:98:be:e7:08:27:b6:ee:8a:28:38:00:
81:e4:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:03 2026 by rpki-client