Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json)
Hash identifier: W2SejRNDTvMWfSnNwfdDeyiB2Br0NaV628s82EgXIAc=
Subject key identifier: 82:C9:9C:D2:FF:AB:16:57:96:0B:83:25:19:A4:AE:78:B2:1A:FA:7D
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial: 019D29CDECFFCAF4AA3660DC0237945B904B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:00:54 +0000
Manifest this update: Thu 26 Mar 2026 11:00:54 +0000
Manifest next update: Fri 27 Mar 2026 11:00:54 +0000
Files and hashes: 1: XfmMZ0oDUAwJDxSQEiuis-Gr-vc.roa (hash: kULJfAR/H2C5tYjK8edBq2EIZUqAdDfvi749QUzxPA8=)
2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: c6hI5uHaf3vVgA4BSy9q64x6y6j8pszcgo/KAwHT0bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:ec:ff:ca:f4:aa:36:60:dc:02:37:94:5b:90:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Validity
Not Before: Mar 26 11:00:54 2026 GMT
Not After : Mar 27 11:00:54 2026 GMT
Subject: CN=82c99cd2ffab1657960b832519a4ae78b21afa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:b2:52:c3:30:09:6d:7d:07:a9:bc:99:1e:
cf:ea:53:11:31:ac:6a:c6:9a:45:19:d3:14:34:54:
4f:8b:7e:18:d4:bb:b8:16:2c:06:18:0c:a6:65:35:
f9:b9:a0:5a:13:d6:5a:3c:c5:35:07:4f:b2:92:85:
70:ee:d8:2b:2b:ea:66:45:0b:44:8e:cd:42:f4:f7:
e0:85:0c:15:ab:18:80:51:8e:02:ad:c2:48:9c:6c:
44:3b:d4:94:74:11:6d:89:e7:88:e9:4e:23:08:77:
ec:e8:5d:9a:79:15:a9:6b:e6:b0:fb:25:e7:d9:42:
af:a4:17:e8:e0:ed:e5:cf:67:16:92:87:f4:ff:1c:
8d:69:5e:76:3e:2e:59:ad:47:83:43:cb:6d:1b:e6:
c7:0c:c2:33:4f:b0:2a:fc:3a:7c:4a:49:cf:fd:42:
04:3a:3a:2f:fd:a0:ac:7f:96:90:b2:59:5d:ca:cd:
70:2a:19:98:4f:db:29:96:b7:75:3b:81:ae:e9:65:
89:f3:c1:26:b9:67:84:a4:c0:72:85:20:f9:39:1f:
2f:82:47:88:2c:4b:49:2d:6e:f2:75:7c:b4:32:85:
53:82:7b:95:71:3d:a8:85:2c:35:8c:2c:4d:df:28:
38:2a:fc:c5:b8:06:89:e2:cb:87:88:af:cc:4f:e4:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:9C:D2:FF:AB:16:57:96:0B:83:25:19:A4:AE:78:B2:1A:FA:7D
X509v3 Authority Key Identifier:
keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c1:ae:82:fd:e3:93:e8:f4:22:44:ca:06:60:be:97:82:e0:
ac:54:db:25:d1:56:91:a6:55:59:48:df:fb:cb:bc:34:d8:71:
fd:d2:40:ef:0a:57:33:28:dd:ae:47:60:97:31:b3:b2:fd:df:
24:ae:27:fb:78:67:a6:78:84:b8:51:90:40:3c:e1:7c:6e:09:
35:75:ff:2d:ad:63:06:ca:fa:d2:7e:30:1e:9d:26:78:42:1f:
2b:2b:bc:23:1c:72:67:f4:af:3f:e4:c3:ed:c1:90:e6:86:18:
b4:41:15:5d:84:8b:35:37:55:81:81:e4:6c:68:c8:41:e6:e1:
0e:02:4b:96:ae:c9:40:aa:b2:8f:20:ab:2d:58:e6:98:8b:4e:
26:6c:3a:79:66:32:41:38:53:12:aa:22:9c:86:e5:02:13:e5:
56:9e:26:94:e6:67:b2:9a:09:8c:b9:34:97:3b:75:ce:7e:01:
6f:92:48:43:ff:6a:c9:c6:cb:f1:79:a2:e2:13:f2:3f:7e:3a:
af:db:c7:89:c3:23:96:fb:63:60:4a:0e:d2:3d:64:18:93:ea:
3a:0c:70:7a:35:1a:fd:db:57:96:70:b0:22:28:68:d1:c4:5c:
8a:29:92:44:d0:84:3a:7d:41:8c:1b:a7:f2:23:ad:10:c8:d3:
bd:a4:eb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:55 2026 by rpki-client