Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: BhUMpAhERlrRAGKT7SeMRSjnXzRxr62GB21skeumG6g=
Subject key identifier: 64:6C:C3:78:F4:29:11:C3:3E:DA:31:6B:15:F8:03:80:58:EF:4F:FB
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 019D284DC36CE8C2C70B4D80E4F64D0594E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: 1-1E1uif61o8C4HWLXAligJFDeqQ.roa (hash: D5F7YAusAftPV7C9tS7ICY1e2xvUA57jsFdWv4x/B44=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: gShXANSQv53fQo+vLttWZb5/JzBlJ4DzhgxKAh1mJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c3:6c:e8:c2:c7:0b:4d:80:e4:f6:4d:05:94:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=646cc378f42911c33eda316b15f8038058ef4ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:55:42:c1:70:bd:71:18:61:ec:95:21:fd:
82:a3:86:9d:ca:46:ad:44:ad:4a:2d:a8:0f:74:32:
be:27:99:d2:16:80:aa:aa:61:58:8c:ca:f8:c9:0d:
73:3e:47:39:67:0a:31:ac:2e:f9:02:b6:1c:9f:86:
0f:97:01:88:ed:d1:d9:36:66:45:b3:3c:33:db:ba:
ee:d8:a1:d6:fd:17:d3:b0:7f:73:f1:a6:4c:fd:c0:
ca:a2:a4:ae:6e:68:50:34:dc:7c:35:07:43:e5:82:
ac:ed:68:3d:69:de:44:5b:50:c7:6d:bd:64:fa:53:
9f:48:46:2f:43:83:44:5a:89:76:b5:79:f5:9e:73:
9b:6a:09:d1:88:ee:40:8e:5b:76:70:34:93:63:67:
72:e4:a6:48:06:0c:85:8c:f9:5c:fd:56:03:aa:4d:
5b:ec:48:26:23:03:32:1a:a2:f3:be:b2:e3:91:0b:
54:b2:a7:08:0f:95:34:1f:59:de:7b:8e:1c:56:3d:
2a:75:2f:3d:78:b8:68:d0:75:45:ab:c7:e3:aa:84:
32:71:d1:2a:d2:02:bd:4b:6a:41:98:87:d0:e3:14:
14:a1:92:6b:98:76:ee:25:ad:ed:7f:94:06:1e:22:
e0:d6:6b:eb:60:34:0a:4e:9e:0d:ae:8e:ce:63:19:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:C3:78:F4:29:11:C3:3E:DA:31:6B:15:F8:03:80:58:EF:4F:FB
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ce:8f:88:6f:bb:09:32:d3:a8:1b:b8:8c:f1:59:7c:b5:53:
b7:67:2f:db:52:a8:32:64:99:d1:81:b2:c5:e9:9b:c5:12:4f:
0b:19:2c:49:9d:c5:a1:ed:15:23:5f:8d:89:a4:e6:eb:68:17:
94:f7:69:19:61:37:e9:0c:c3:dc:74:13:68:f6:cc:b2:5b:7d:
32:f5:0f:b0:c7:8f:df:99:90:1f:aa:3b:04:df:ff:eb:6d:b8:
a7:0e:10:ea:82:65:ff:6a:b9:85:d3:f3:a7:3e:40:2e:d1:e3:
57:0c:d3:e0:97:3d:cb:de:4a:84:2e:03:24:7b:68:2d:5e:4b:
58:7f:24:62:80:2d:6b:81:e8:24:15:95:34:82:f6:6f:2b:65:
43:54:50:37:33:e7:3f:db:3c:cf:a5:22:39:e6:0c:f9:a4:c0:
43:6e:2a:1a:99:b5:7a:32:2b:f1:dd:5e:c4:aa:9b:67:1d:94:
5f:9a:e6:c1:5c:71:26:ed:92:e0:47:1d:e5:60:5e:fd:b8:26:
08:0f:7e:23:bf:1a:cc:05:36:bf:67:84:50:64:79:a8:55:f9:
ec:bd:e4:d3:f9:93:90:bf:9f:6f:5a:76:8f:c4:ad:c5:1b:83:
07:22:1b:9f:82:3a:be:c4:c3:eb:b1:34:da:68:6f:a1:27:93:
f1:6e:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:35 2026 by rpki-client