Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: wNFDdnVwEAYySFEXf6Ov06YirD5ftYN+R3uQg4MOjH4=
Subject key identifier: 93:2E:BC:D1:AD:97:A5:00:15:B7:60:43:BD:21:CF:72:40:67:24:1C
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 019D38D32DBF5FEDB65C817CC7FBC0CD1007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 08CC
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: rhdJptinqZMQlXG0JMGLtOryJ7uEXjsLjuUAclCIk5I=)
2: NWc7mOdqZ8fGWkhVkiDNa4c4NnE.roa (hash: aspcKV2w4XRZmv8Xg1QmYjjgR0mYMF80LK5f3kp14g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2d:bf:5f:ed:b6:5c:81:7c:c7:fb:c0:cd:10:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=932ebcd1ad97a50015b76043bd21cf724067241c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:11:c5:62:d9:78:ab:db:7b:e8:2d:a6:69:
11:b8:94:a3:9e:98:05:5e:f8:2d:15:05:ca:91:2a:
f5:70:4b:6e:6c:8c:df:dd:b4:e6:f9:72:c5:e5:6c:
da:4a:94:9c:f6:e9:9e:13:96:3a:13:83:5c:eb:32:
3b:c0:fd:41:a0:29:42:41:00:5c:bb:b0:a2:f7:7a:
ab:c9:b4:f0:fc:01:94:d3:c7:0d:57:c6:72:87:9b:
77:1b:08:79:a3:b3:2f:a2:15:c7:2d:1f:2f:79:cc:
72:46:2a:8e:00:ac:c2:1f:22:0e:55:0f:1e:be:28:
f3:fc:c3:8e:c7:9b:ca:89:fe:fb:85:d5:25:f9:15:
af:aa:64:7f:fe:b5:3f:13:16:67:d1:ec:b9:4a:c2:
68:d6:ea:1d:7d:37:e5:4c:a2:39:54:5b:ec:26:d0:
81:22:64:7c:92:7a:23:4d:48:2b:19:60:d2:90:0d:
97:07:b8:7c:82:fd:f9:a4:8c:1d:d3:75:5f:45:7a:
90:86:69:31:0e:e8:9c:9e:b5:ba:64:82:50:0a:80:
cf:2f:b9:b4:37:97:79:1d:cc:88:a8:ea:56:6d:b0:
06:65:78:19:69:6e:40:aa:bf:7b:73:8e:cb:eb:9e:
b3:d2:17:16:59:fc:4f:5f:98:ef:a7:b0:63:be:64:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2E:BC:D1:AD:97:A5:00:15:B7:60:43:BD:21:CF:72:40:67:24:1C
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:08:76:c7:1b:7b:a5:0d:8b:75:be:56:f8:44:90:dc:2b:0f:
8d:74:7d:02:8f:cb:9f:e7:cc:f8:33:b5:ab:9f:5b:0c:2c:6e:
73:7f:7a:b6:06:4d:67:2b:a6:4b:ff:c4:9d:8e:16:e8:9b:af:
5d:67:99:29:03:cc:8e:46:2b:56:47:16:b0:39:29:5f:74:a4:
9c:67:a1:ff:09:27:11:8c:02:f6:c3:54:ec:e7:0f:89:30:78:
d2:03:b3:ae:64:91:a7:bd:a2:c3:6a:87:cc:c9:91:25:dd:52:
05:74:ad:51:84:1e:81:f3:b4:86:41:da:45:05:0d:28:22:f2:
75:69:9a:99:90:4d:50:44:2c:19:3d:c2:b8:33:c5:06:1b:3e:
f2:11:b8:7d:d0:88:fe:eb:e1:61:28:73:9f:d3:3c:39:0c:72:
31:b7:8e:d4:f7:c9:86:d1:72:6a:3c:07:35:d7:1a:f8:17:2c:
41:07:b5:5f:00:95:5b:8d:ff:41:35:b0:f4:30:c0:f0:20:6e:
c6:3f:1e:9f:cd:69:fa:1b:9a:dd:af:ee:62:a7:ac:d8:52:5b:
07:64:05:58:be:a6:42:81:e2:3b:e0:ab:a9:6d:cc:98:8c:99:
f9:31:0a:97:7e:1b:39:06:3b:df:d9:ae:f4:f9:76:b1:8d:b3:
3c:3c:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:49 2026 by rpki-client