Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: YsV+Xmx2lSDKUhvQy6+2ymfRmgD37O/YHfYJso+nqP8=
Subject key identifier: 82:78:A9:DD:33:52:FD:E3:F5:93:8C:2E:5A:4B:73:12:18:40:06:73
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019D265FAA16734DA3E478D88E4DEF0A97E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 15F7
Signing time: Wed 25 Mar 2026 19:01:36 +0000
Manifest this update: Wed 25 Mar 2026 19:01:36 +0000
Manifest next update: Thu 26 Mar 2026 19:01:36 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: cyra4rNCoDTv7Q9+gZWwdl3CxiQ61K2dgNvCdjDls3I=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:aa:16:73:4d:a3:e4:78:d8:8e:4d:ef:0a:97:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Mar 25 19:01:36 2026 GMT
Not After : Mar 26 19:01:36 2026 GMT
Subject: CN=8278a9dd3352fde3f5938c2e5a4b731218400673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:84:a8:c3:eb:69:b4:d1:2c:f4:17:21:33:
9b:90:f9:39:09:ee:b1:73:98:f8:2d:2f:2e:1e:c1:
10:46:7f:f6:ed:f1:e3:4e:29:50:8d:d9:f8:5f:bb:
15:95:9c:87:a6:0b:06:fb:b4:c3:f6:d5:e2:4e:99:
11:8e:23:1f:d7:67:5f:0f:d9:1a:83:b3:8d:93:e5:
d3:f3:18:c2:92:89:82:1c:ad:f3:9c:b1:b5:d1:47:
a1:0b:87:f2:ca:e1:4c:60:0f:a4:bf:6f:07:75:ee:
79:17:c8:59:7e:9d:69:0e:b1:33:e8:14:e8:0a:33:
68:b7:48:af:27:4e:99:90:76:f5:cf:70:11:f6:56:
00:6d:d2:7f:33:76:a2:65:02:88:67:bc:1a:37:00:
02:25:ee:c1:28:f6:64:25:35:4a:dc:05:13:cb:69:
93:93:97:5a:65:e5:55:8a:d2:ad:17:2d:09:b6:92:
16:2e:38:2c:1c:b3:40:4d:09:4e:85:69:48:8a:0e:
3a:08:3c:75:37:98:81:67:e7:a5:67:b3:c2:29:c1:
1f:48:8b:7b:76:e0:01:10:74:a0:ad:0e:4d:82:d1:
2b:42:38:64:70:3e:db:5a:47:21:0e:c9:ec:87:fd:
91:3c:8c:b7:30:ec:40:75:18:d3:e2:c7:95:bb:c8:
c8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:A9:DD:33:52:FD:E3:F5:93:8C:2E:5A:4B:73:12:18:40:06:73
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:3e:e6:c8:a0:cd:57:bb:b1:65:ab:fa:65:a7:dc:a2:58:
b0:d1:4e:f1:1f:38:c2:3e:93:d1:7c:cb:87:d0:11:49:db:23:
8c:9c:9f:11:5e:5f:d0:91:16:ed:63:5a:98:de:02:41:57:db:
25:96:48:2f:2b:67:ed:c2:87:73:b6:b5:fd:cb:88:10:2c:a3:
1a:af:ab:da:a9:71:89:44:88:b2:1e:5d:d0:8a:8b:ef:bf:07:
0c:43:d8:f2:88:3d:f9:78:a8:8c:97:62:a3:57:94:d1:64:d7:
7b:7d:27:39:a1:e3:3c:0c:a8:d4:59:dc:bf:b5:10:fe:ce:8a:
ca:12:d4:ae:13:57:f3:08:79:cd:d8:82:75:80:88:cc:12:73:
8f:f9:a1:a9:45:fd:72:77:8c:d2:38:7f:fb:15:e9:88:11:75:
dd:11:38:a7:db:73:cd:e6:78:71:0c:e3:a9:99:b4:4a:2a:ea:
5b:24:af:6c:ba:fc:a0:0b:ec:22:6c:24:5e:cc:cb:c6:fa:05:
d1:0a:d6:fe:a4:7c:e1:82:4d:5f:17:9a:da:ba:a1:ca:9c:2e:
0f:01:87:84:d4:c4:50:5c:b6:09:e9:e0:ed:ac:9f:5f:93:6a:
1f:3b:f4:65:ba:f9:44:fd:e7:3d:e0:87:af:a1:59:ac:e7:e5:
5d:86:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:35:28 2026 by rpki-client