Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: JM/rTF7zFN1mqXXe1D1d4CIL6l8P3sjwodU+Fy2GAko=
Subject key identifier: BD:BC:13:70:11:3B:77:24:1F:91:28:28:BA:3A:3D:35:23:C9:28:2A
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 019D2704BC444AA8AC0F16580CD1712AF794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: fXGM516NzPUrg7T02zQWanbEKtG21uzREX2N/50DQzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bc:44:4a:a8:ac:0f:16:58:0c:d1:71:2a:f7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=bdbc1370113b77241f912828ba3a3d3523c9282a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:ff:b8:0f:49:89:4b:a0:9c:9d:8c:d6:ae:
08:22:ac:b4:87:78:25:ea:e7:b7:15:3b:c7:65:c7:
18:f1:1c:b2:e2:74:1f:7e:50:ab:ff:21:4a:69:68:
e8:6d:5b:9a:27:64:24:80:56:de:63:01:35:af:fd:
d1:44:33:90:e8:01:ea:d4:6a:79:b2:8b:f2:b3:c6:
97:2e:f9:45:1c:cd:10:c6:c7:3f:ff:2c:90:0a:99:
e9:d3:72:61:86:66:75:95:71:b8:94:af:e4:55:41:
74:fa:c1:5a:e7:c0:33:0c:18:92:56:8f:7e:cd:ab:
4f:f2:92:23:0f:c9:43:cf:b1:1e:16:9b:f4:c6:e9:
7c:d4:40:0f:51:f2:8a:28:2b:d4:16:52:85:d6:9f:
2c:9e:41:6d:60:6a:fd:02:40:06:15:0f:29:17:4c:
b3:73:e1:02:12:62:3c:e2:13:7a:fa:05:9d:7a:fe:
9d:e5:99:ea:97:da:fd:16:82:79:c4:d7:aa:c7:1a:
9c:89:20:c2:b1:22:09:61:64:96:b8:8c:49:ec:e0:
3d:1d:9b:78:68:ad:51:19:5d:ce:d4:f9:6a:1e:8a:
9e:2c:5f:e3:23:90:c2:79:6e:ed:1c:86:db:b7:d8:
6b:9d:a2:4a:72:70:e4:fa:89:81:ee:9e:a5:f3:85:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:13:70:11:3B:77:24:1F:91:28:28:BA:3A:3D:35:23:C9:28:2A
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d4:be:fe:5a:57:41:a8:fe:64:48:e7:a5:09:2a:51:fa:d1:
ca:ab:e4:5f:eb:06:46:fc:43:a7:77:60:c4:15:f9:dd:96:cc:
ae:9d:99:87:7a:24:cc:99:44:2f:e1:f6:7a:eb:ce:1e:ad:ab:
87:0f:66:9f:96:9f:db:aa:d0:9c:7f:38:39:7b:af:4a:b8:10:
61:16:67:24:4c:6b:07:7d:fc:71:ea:e7:66:e4:4e:4c:8e:2e:
cf:89:a7:68:01:bf:dd:bf:61:47:0f:d9:b4:9f:29:94:23:74:
7c:97:b3:32:14:e8:53:ae:06:49:81:1e:1f:4b:89:bc:fe:3e:
da:c6:b4:28:9d:77:f0:2b:e6:de:b1:27:f8:26:46:6e:09:a3:
eb:ea:62:85:0b:ec:40:98:94:ec:8f:ea:e2:b6:0f:25:75:17:
2e:9c:ce:4e:7d:3c:2b:25:0c:6b:83:f6:54:19:2a:ee:29:e1:
c3:67:5f:07:91:eb:99:3b:8c:59:f1:bc:4c:bb:25:02:25:e6:
c2:ed:a1:3a:20:34:dc:c3:3c:1d:43:b3:b0:07:20:cf:92:ee:
6c:7d:c5:aa:e3:f3:d8:be:81:31:b3:c0:49:db:b0:fd:a1:c1:
f2:65:50:bd:4d:f3:0a:fd:2f:1d:53:d7:96:ef:f4:25:0e:7a:
e7:71:5e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:40 2026 by rpki-client