Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: chJaiqyVR8NY7Qkg7G/LjVRKbeUuKU/uFrg3F5DU7Qg=
Subject key identifier: 1A:6D:BA:07:05:9B:42:EF:E6:F1:B4:33:1A:88:84:90:E0:0F:5F:3F
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 019D27A9411D880F929AB032FAD8B3E68E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1841
Signing time: Thu 26 Mar 2026 01:01:36 +0000
Manifest this update: Thu 26 Mar 2026 01:01:36 +0000
Manifest next update: Fri 27 Mar 2026 01:01:36 +0000
Files and hashes: 1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: IA1t+2kkUzU4VtmMwUbfENt6rZo6b7yCZD69YdB1cwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:41:1d:88:0f:92:9a:b0:32:fa:d8:b3:e6:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Mar 26 01:01:36 2026 GMT
Not After : Mar 27 01:01:36 2026 GMT
Subject: CN=1a6dba07059b42efe6f1b4331a888490e00f5f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:7e:a8:35:43:29:4b:3b:71:03:a3:ae:29:
ff:82:6e:f7:86:74:fa:8a:1e:86:63:99:e1:54:f3:
a1:2e:a1:92:a0:47:39:fe:bb:a8:d2:95:87:73:ca:
51:2b:f2:bd:8b:d8:f2:ad:0f:99:20:da:52:ff:22:
ea:5d:d9:12:c7:80:30:24:31:d8:be:37:21:a4:b9:
5f:f6:06:71:14:2a:58:c5:aa:02:fc:3a:c3:1b:43:
f6:34:1e:f7:e7:d9:31:43:4e:40:a3:45:b5:65:45:
6c:a8:97:8c:b9:27:da:a9:6a:7c:8d:ee:6b:09:1b:
f7:b7:1d:1f:44:f6:01:fb:c8:0b:34:04:5c:d4:e5:
d5:33:b1:56:1b:91:31:6e:6a:d2:6e:e7:ae:d8:8d:
f9:f5:02:f8:5e:2e:d9:24:3b:8a:ea:ef:ae:f7:63:
9f:7e:69:f5:1d:28:fc:b7:5f:1c:91:4a:3e:4a:41:
ad:68:12:38:58:c8:80:2b:26:ef:6f:58:19:70:3f:
68:5e:d2:e5:d8:88:5f:51:94:9f:2c:97:db:d9:dd:
6b:b5:c7:0e:c8:76:d0:74:dd:c0:3f:30:34:1d:a8:
54:db:13:dd:91:bd:46:17:b5:6a:e8:2d:6c:08:7b:
b5:89:8a:12:9d:55:35:73:b6:1c:1c:a7:e5:32:45:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6D:BA:07:05:9B:42:EF:E6:F1:B4:33:1A:88:84:90:E0:0F:5F:3F
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9a:de:53:8b:78:b8:4f:04:ce:6b:5c:f6:39:b4:6e:e2:b3:
c2:22:db:4c:95:25:8b:ad:b5:bc:39:fa:3b:fa:f5:69:62:a8:
c2:bb:90:92:b9:7c:68:52:5d:51:6a:b5:ea:9b:2a:3c:ed:ff:
63:11:08:ff:29:e5:6a:78:e8:2d:24:c5:00:ed:27:df:46:3d:
aa:d1:68:7b:59:af:02:a8:6a:55:ce:76:41:d7:82:5f:d2:92:
17:ec:99:e3:a1:56:44:f8:2d:dd:49:22:1a:0c:43:75:8b:f5:
31:db:28:0a:34:7e:f6:f2:0a:9a:c6:60:6c:77:9d:93:82:50:
fc:8a:75:3c:01:f6:56:d5:45:a3:8d:76:e6:c6:90:c1:c4:02:
0b:6b:0c:97:89:d8:88:54:8f:c1:49:e7:50:43:19:29:71:61:
84:87:ee:12:13:5d:4a:9e:64:c2:63:0e:a3:48:f1:32:94:9d:
ad:36:df:1c:c6:0b:40:8c:ef:68:69:6f:c0:9f:4b:b7:a6:87:
5e:28:b3:af:cc:34:53:4e:27:d9:88:eb:09:37:36:7e:fd:3d:
f0:b9:c9:c6:2b:ab:4b:47:52:86:75:1b:77:0c:50:c9:bf:fb:
e4:2c:e1:c5:b9:46:02:9a:23:b5:5d:bf:a4:b8:f5:40:5b:59:
22:9a:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:26 2026 by rpki-client