Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: tJd79FZet7gJUXnuNfH/6JehbBcjgakhk/K93L+uJFI=
Subject key identifier: DB:D0:F6:88:E5:A1:B2:E1:FA:7F:97:53:1B:27:F8:5A:37:BD:01:3C
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 019D3752559063912A623EDC6AA08EB63186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 15B1
Signing time: Sun 29 Mar 2026 02:00:35 +0000
Manifest this update: Sun 29 Mar 2026 02:00:35 +0000
Manifest next update: Mon 30 Mar 2026 02:00:35 +0000
Files and hashes: 1: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: y7+5kVG7gvA+KNYmKfATTIwGUZNlf7exHvkEU8FUMwc=)
2: sR4ns811nFIbjvjg3wltUzH6BEI.roa (hash: ZbJugbRHpIt2Y4hqLk7H0rTD6BGfncHuX2f1Y5HnqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:55:90:63:91:2a:62:3e:dc:6a:a0:8e:b6:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Mar 29 02:00:35 2026 GMT
Not After : Mar 30 02:00:35 2026 GMT
Subject: CN=dbd0f688e5a1b2e1fa7f97531b27f85a37bd013c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:aa:cf:ed:19:67:4a:10:9a:a4:63:23:c0:
f1:cd:95:10:b8:6e:b4:a5:cc:31:ca:31:5d:0b:e0:
32:6c:6a:26:62:c6:bd:d4:5e:21:76:2c:b8:2a:7a:
f3:1e:d8:c6:5d:ba:b0:7e:41:0d:30:e9:3a:d0:c2:
3e:d5:a6:ce:9f:63:cd:8c:ef:8d:f6:ac:2e:44:bb:
0e:0c:b9:26:44:c3:91:d4:20:fb:34:a3:4b:58:66:
ec:5a:46:38:67:67:b6:d7:77:4d:18:50:01:50:11:
2e:37:b1:50:fd:1f:8a:ab:97:b5:12:45:b4:da:02:
5a:61:64:a5:9e:4b:cc:f6:4e:1a:82:e2:3a:e1:3e:
b9:94:d8:e5:75:7a:6a:91:50:ad:56:e6:cf:41:1c:
2f:ef:b1:98:9f:22:81:48:f0:9b:67:19:38:b0:93:
50:73:7d:10:e7:a3:1c:a9:9d:d3:fa:8d:69:de:03:
23:36:12:68:d4:76:6e:a9:f5:2d:08:7c:f7:70:ee:
9e:42:50:02:e0:55:24:7d:61:1a:a9:fd:9a:75:40:
b5:1c:5d:76:24:67:32:c4:ce:24:ed:bc:bb:aa:71:
89:12:db:cb:ef:25:20:e1:44:f3:e7:f8:68:c5:7e:
90:27:8e:2e:d2:48:73:94:75:28:cd:40:4f:86:67:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:F6:88:E5:A1:B2:E1:FA:7F:97:53:1B:27:F8:5A:37:BD:01:3C
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:93:96:ca:7b:a6:b3:1a:5b:53:69:49:ce:ad:2f:63:6a:76:
f7:c7:56:22:db:4e:ce:60:2e:8f:6b:db:5d:ea:7a:8e:c5:9e:
bf:f8:84:63:de:5f:d3:42:17:3f:c7:d6:2c:58:9f:88:e2:d8:
3f:8d:05:ae:55:b0:34:ed:03:71:96:09:25:78:c4:ed:59:f7:
c0:e9:68:fb:61:cb:43:89:07:49:ab:f3:1d:3b:82:75:38:aa:
5a:c8:85:40:a2:25:a1:a3:b5:2b:28:2c:e5:a8:6a:12:09:b3:
ab:c4:7a:cc:39:29:e4:ba:97:88:be:14:ad:40:2f:32:da:20:
8b:16:8f:ab:89:03:a0:c3:7e:49:18:16:87:d9:f5:a8:8c:f2:
ef:f9:a9:eb:dc:16:07:89:05:42:00:01:a2:c5:0c:18:34:7a:
9b:f6:fd:fe:01:69:f2:78:af:af:f4:9b:f3:4e:d8:1d:f7:42:
76:02:da:63:27:87:67:43:f8:31:ee:7d:34:d3:68:21:f9:05:
e7:84:da:ff:ce:b4:29:8e:ed:eb:e0:79:b5:7a:3d:05:30:62:
3e:32:61:08:29:bf:10:63:cf:94:75:c9:e6:11:ba:31:5d:ac:
b2:7f:b3:1f:8a:29:1d:37:d9:66:e3:40:e4:56:88:89:b8:b6:
19:c1:fc:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UlWQY5EqYj7caqCOtjGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4OThkYjhjYjg2MWJiYmRkMWZiNzU2MmRlZjRkNzdkODY0
MmMzMjQwHhcNMjYwMzI5MDIwMDM1WhcNMjYwMzMwMDIwMDM1WjAzMTEwLwYDVQQD
EyhkYmQwZjY4OGU1YTFiMmUxZmE3Zjk3NTMxYjI3Zjg1YTM3YmQwMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Fqqz+0ZZ0oQmqRjI8DxzZUQuG60
pcwxyjFdC+AybGomYsa91F4hdiy4KnrzHtjGXbqwfkENMOk60MI+1abOn2PNjO+N
9qwuRLsODLkmRMOR1CD7NKNLWGbsWkY4Z2e213dNGFABUBEuN7FQ/R+Kq5e1EkW0
2gJaYWSlnkvM9k4aguI64T65lNjldXpqkVCtVubPQRwv77GYnyKBSPCbZxk4sJNQ
c30Q56McqZ3T+o1p3gMjNhJo1HZuqfUtCHz3cO6eQlAC4FUkfWEaqf2adUC1HF12
JGcyxM4k7by7qnGJEtvL7yUg4UTz5/hoxX6QJ44u0khzlHUozUBPhmcOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvQ9ojlobLh+n+XUxsn+Fo3vQE8MB8GA1UdIwQY
MBaAFIiY24y4Ybu90ft1Yt70132GQsMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYt
MTYwYzI0YzY2NjMwLzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YTZjZjUtMTM0Mi00YzNiLTg3YWYtMTYwYzI0YzY2NjMw
LzEvaUpqYmpMaGh1NzNSLTNWaTN2VFhmWVpDd3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvpOWynum
sxpbU2lJzq0vY2p298dWIttOzmAuj2vbXep6jsWev/iEY95f00IXP8fWLFifiOLY
P40FrlWwNO0DcZYJJXjE7Vn3wOlo+2HLQ4kHSavzHTuCdTiqWsiFQKIloaO1Kygs
5ahqEgmzq8R6zDkp5LqXiL4UrUAvMtogixaPq4kDoMN+SRgWh9n1qIzy7/mp69wW
B4kFQgABosUMGDR6m/b9/gFp8nivr/Sb807YHfdCdgLaYyeHZ0P4Me59NNNoIfkF
54Ta/860KY7t6+B5tXo9BTBiPjJhCCm/EGPPlHXJ5hG6MV2ssn+zH4opHTfZZuNA
5FaIibi2GcH8TA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:05 2026 by rpki-client