Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier: YcZ38tz5SwT4KgEQWANIT+UTgdPDMyx5Tkzl9Ga0+BM=
Subject key identifier: A7:57:0D:F2:88:D5:EB:73:4B:2A:4C:49:C3:B9:FA:4B:5C:25:EE:0F
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 019D27A92C07776838DC3547ED14C4518C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number: 0B8F
Signing time: Thu 26 Mar 2026 01:01:31 +0000
Manifest this update: Thu 26 Mar 2026 01:01:31 +0000
Manifest next update: Fri 27 Mar 2026 01:01:31 +0000
Files and hashes: 1: F7Rl3gkShjk9K5KCESdLS7DMA7I.roa (hash: c2n9H0jyH5wMRpTPvaViBcpdlnGbUmhYtVd+x1NbnoM=)
2: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: IDBSgKIsWsuNDwJOA2NmDUowIy2gFvABkXO2atpYxto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:2c:07:77:68:38:dc:35:47:ed:14:c4:51:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Mar 26 01:01:31 2026 GMT
Not After : Mar 27 01:01:31 2026 GMT
Subject: CN=a7570df288d5eb734b2a4c49c3b9fa4b5c25ee0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:64:6e:bf:9e:c0:0c:a0:8b:d0:29:75:90:
9c:0e:b0:a0:8c:96:59:4a:c3:8c:73:0c:0d:de:d8:
26:79:3d:8b:ae:bd:f5:bf:14:d0:c4:f5:d2:58:5a:
45:89:20:cf:96:3e:59:a1:86:03:31:f7:98:c0:54:
29:eb:0a:f8:0d:1e:00:b2:6f:f6:4d:e4:f7:46:17:
1e:eb:e5:36:43:c1:2d:36:22:eb:d6:55:8a:c2:63:
77:59:b6:bd:ed:b1:36:d8:31:48:9f:1a:a1:b3:e1:
ce:54:53:cb:46:6e:3a:e2:c1:14:a2:8f:3a:c3:87:
a0:f0:00:7f:29:b0:84:de:be:21:fe:59:67:44:4f:
1e:3d:db:42:63:60:a6:c2:e7:62:a1:ac:6c:7a:b4:
77:8c:ca:70:c3:44:4d:1c:35:57:dc:a9:46:1b:f5:
9f:fa:80:43:9b:dd:3a:cb:5c:6a:11:c2:2e:40:24:
03:c5:6b:6f:de:88:17:d7:96:8f:bf:c5:42:e5:9a:
b6:90:5d:e8:25:38:d4:04:8f:cd:ed:56:df:99:0e:
69:93:4e:d3:27:08:41:e0:e8:c9:32:d8:5a:c4:13:
96:2a:76:18:ba:93:7c:76:76:5f:4c:66:47:d1:0e:
5d:63:46:57:42:0a:98:e8:e1:d2:d9:0a:0e:09:52:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:0D:F2:88:D5:EB:73:4B:2A:4C:49:C3:B9:FA:4B:5C:25:EE:0F
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f6:43:3f:9e:c3:c7:fe:d8:b2:d6:98:cb:6e:3f:ab:51:2f:
78:31:39:f2:a4:15:7b:8f:5c:86:55:d1:99:6d:71:d5:e9:28:
3b:59:80:0b:52:5b:77:06:76:d7:3f:45:96:89:c9:54:59:4e:
cf:25:9d:48:45:f3:89:b7:44:e6:87:06:ae:7d:c2:47:0c:65:
73:79:59:f2:6f:da:bc:fa:a4:4a:8b:33:69:55:0b:b1:02:81:
3e:94:5a:ad:8a:b3:01:a9:9f:cd:6b:9f:e1:14:c7:ef:aa:f0:
47:ce:cc:11:73:b9:c4:5a:3f:18:9e:72:d0:75:b0:02:72:10:
5f:aa:2e:31:54:cd:31:cb:1b:2a:e7:ff:09:9a:66:7f:57:62:
d9:cf:01:6e:0c:aa:46:31:fa:1c:d9:fb:44:4d:9d:fd:18:ec:
17:24:8a:72:ea:82:ff:70:c1:e9:48:aa:ac:18:cf:15:30:67:
64:40:ab:10:bd:e2:83:3a:ba:46:83:5c:2b:a1:f7:66:0c:70:
67:7a:6b:a8:f4:84:14:58:46:5c:2a:18:ae:31:c3:1f:7c:25:
d9:50:ef:24:12:51:83:f5:cc:bc:6c:32:76:c9:8e:23:2a:a7:
91:b4:d9:7b:d9:a0:e5:8d:72:aa:df:d0:ba:e1:1c:4b:fe:5b:
92:69:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:49:27 2026 by rpki-client