Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: nBJmKWGQPgSCbGG19nMPfy8rGduW+vJAis8X/WneTVw=
Subject key identifier: 6F:8D:95:E4:3E:B8:F3:53:08:52:73:DE:03:60:59:2C:A4:C4:1A:A2
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 019D2A728210F53B7947625CDC92C2A09B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 14:00:40 +0000
Manifest this update: Thu 26 Mar 2026 14:00:40 +0000
Manifest next update: Fri 27 Mar 2026 14:00:40 +0000
Files and hashes: 1: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: 2V9iOFw3074vwZExd3Av2vpqsaEa2+dDlTdLHkmdc6I=)
2: UhcVOrWI94PD7J8NZ396e7oTXmQ.roa (hash: le2/ey5cYL9OHx+rHl459Ml2HcRFUdgLBFJPfGYggHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:82:10:f5:3b:79:47:62:5c:dc:92:c2:a0:9b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Mar 26 14:00:40 2026 GMT
Not After : Mar 27 14:00:40 2026 GMT
Subject: CN=6f8d95e43eb8f353085273de0360592ca4c41aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:4c:3a:e0:76:8e:9d:f3:05:6e:38:8b:88:
66:92:1e:13:1d:c5:92:31:c1:8a:08:8f:16:bc:cc:
d1:73:27:db:84:20:fc:84:58:81:72:3b:6a:62:9d:
a3:da:e5:70:96:c8:b8:76:6f:6f:38:f0:61:95:4b:
61:6d:83:bd:52:31:ce:95:7c:4c:5a:d8:d0:d4:59:
4e:e3:44:94:a3:4e:5f:86:72:b0:8b:d0:66:06:bd:
6b:e4:2c:45:cf:90:5b:5a:59:1a:52:e4:01:ff:ed:
7e:28:84:53:5d:f0:c8:cb:7e:d7:dd:8c:e9:19:33:
f7:af:5d:3d:2c:62:83:f5:4b:d9:6c:13:74:6c:05:
ff:5a:86:d4:53:a2:92:ac:6a:70:ca:a0:e1:31:a0:
0e:85:8e:71:bf:b4:3e:a2:14:47:9f:85:82:83:eb:
36:24:b5:d1:1b:a5:3e:bd:04:c9:ea:78:a8:38:88:
f9:c1:0e:1a:12:9d:d5:2c:d5:0f:33:fe:64:6f:36:
85:e1:ad:31:ac:42:2c:ea:25:ce:d6:ee:f3:ef:93:
03:79:60:2b:53:98:ba:5c:bb:0a:dd:8d:6b:f3:09:
c6:1e:16:0e:e6:8f:78:54:fe:a0:32:84:39:fd:fe:
97:89:a2:79:94:a1:6f:9a:7b:83:6f:37:db:8e:21:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:95:E4:3E:B8:F3:53:08:52:73:DE:03:60:59:2C:A4:C4:1A:A2
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a3:2b:1f:0e:7f:7b:2e:f6:7e:2c:06:92:c9:08:ca:93:b0:
c2:df:b9:c2:e3:b3:4d:55:e1:a7:42:86:12:08:e2:51:8e:43:
a0:ef:4b:f0:a2:5b:a4:f0:56:26:dd:37:08:f7:8a:42:30:fd:
7f:1b:82:72:a7:4a:72:30:e4:7e:dd:2c:69:7a:d7:0a:bc:4e:
7d:7a:14:8c:e9:86:4f:79:b0:a2:32:40:88:4a:1f:34:37:38:
1f:5b:a2:0e:5a:fc:d9:a9:0a:03:69:f8:67:f2:17:77:95:34:
d7:e1:fc:39:04:aa:8f:89:16:08:70:da:b4:db:85:5e:9f:29:
e9:24:82:ea:9e:d5:85:e4:f4:ba:e7:57:b5:35:35:ca:5f:12:
b6:d5:59:32:ca:2e:0e:fc:fc:12:bf:17:d2:a3:29:97:61:e6:
10:06:7d:db:f8:1e:3b:66:52:36:a0:23:f2:ff:8f:8c:d8:7a:
fa:ff:60:48:90:44:f2:a0:99:1b:9b:63:20:e9:d9:26:3f:89:
84:2d:46:13:1b:87:08:bd:7a:96:51:60:bc:e7:83:92:f2:73:
d6:19:1e:75:c7:41:db:46:f4:f1:9a:10:36:36:9e:c4:ea:cc:
bc:ae:fb:b7:cd:58:b7:84:92:5c:72:8d:5c:af:41:3c:07:36:
52:93:1d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:00 2026 by rpki-client