Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 5mQ47XgEdby+VAvzcCluwQ44lk5JasjtwmnwAP4nzJ0=
Subject key identifier: B3:2B:21:F9:9F:15:A8:97:4C:97:5B:8F:5B:C4:C0:34:FE:8D:29:A7
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 019D36E458404EED66CED9E985E02C3E611F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 00:00:27 +0000
Manifest this update: Sun 29 Mar 2026 00:00:27 +0000
Manifest next update: Mon 30 Mar 2026 00:00:27 +0000
Files and hashes: 1: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: FFeik7i6+W73/CuZCyyAy0ZuIy4Ft5w8qcwhdyWxe00=)
2: j5SNiWDExW4Fzdr91OyzIh3q2cA.roa (hash: f3l9/B3pjG4wxZ77vCWHe+oV14ybxAso+7Z2L/8x8tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:58:40:4e:ed:66:ce:d9:e9:85:e0:2c:3e:61:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Mar 29 00:00:27 2026 GMT
Not After : Mar 30 00:00:27 2026 GMT
Subject: CN=b32b21f99f15a8974c975b8f5bc4c034fe8d29a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:b6:bd:4b:e8:0c:5e:68:6b:03:71:36:fc:
a7:83:74:7e:e5:a1:90:a2:f6:e8:a7:4e:0d:dd:28:
72:7a:4a:7d:97:b1:94:be:61:4e:03:1c:c6:df:98:
95:90:4c:e1:78:41:d8:d4:b8:91:10:58:1b:31:9a:
5c:56:e3:6e:0c:3b:4a:a7:68:32:19:82:6e:66:d1:
8b:63:aa:43:c3:26:ef:a8:10:6b:b3:38:fc:e4:80:
9f:8f:9c:a7:5f:0f:9c:a4:42:f3:de:34:6e:24:cc:
f6:2e:72:b1:c5:f8:09:eb:81:9d:5c:bf:7e:44:4f:
3f:db:9f:f9:4e:61:85:00:2e:36:12:1c:c9:3c:aa:
44:26:74:99:84:23:08:9c:67:48:61:a1:6c:2d:f2:
da:bb:17:71:b3:38:e6:83:91:d6:2f:e2:e6:1f:3b:
f7:01:84:90:65:14:2a:17:ce:5d:bc:e5:c4:07:f8:
48:24:d6:cb:de:df:99:30:48:b5:52:28:ca:eb:2c:
fc:fa:fe:10:c0:e3:d7:30:74:06:0d:a8:01:16:c7:
0f:09:78:c4:ab:6d:b7:44:f6:14:7d:5e:1e:f8:59:
0e:33:da:68:25:03:18:32:78:0b:ff:3e:09:14:87:
b7:39:16:c6:a8:9d:3b:f0:a1:da:6b:02:97:41:70:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:21:F9:9F:15:A8:97:4C:97:5B:8F:5B:C4:C0:34:FE:8D:29:A7
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d2:80:43:2f:b7:6f:64:cf:4e:7a:53:ad:19:7e:50:34:a4:
ee:26:eb:a0:d1:ea:75:59:8e:b5:6b:43:f3:34:1c:99:89:2b:
d0:02:77:bc:ed:9a:45:65:41:72:9f:f0:44:f4:0c:ab:72:e5:
fe:27:c9:85:fc:87:83:dd:47:7b:5c:f1:5d:c1:35:7f:38:02:
b7:2f:a9:d6:5a:f9:12:58:b6:d7:fe:11:7e:1d:c7:66:59:2a:
7b:2b:f6:1e:a2:10:09:ec:f4:8a:bd:13:3d:e7:7b:17:fc:1b:
d8:ee:f1:a7:0b:13:10:d5:8d:c9:85:6f:e6:bd:a8:eb:f4:8d:
c3:43:20:16:2b:6c:1a:9f:1c:f1:d3:1c:1b:a7:9a:22:f1:c7:
58:40:0d:b3:a0:e8:25:53:f2:f2:9f:01:08:3b:5e:c9:f8:f6:
41:42:e1:6a:fe:01:79:3c:2d:4d:63:84:da:a5:a1:7d:62:6b:
e3:0d:86:a1:dc:f1:18:20:c8:9e:2d:5d:04:f2:06:bb:cc:3b:
cc:9c:09:03:73:27:b4:41:d7:86:16:ee:8a:b5:6f:2d:b4:75:
1a:b1:19:2c:b0:03:93:0b:5c:f6:a1:54:e2:bc:3b:dd:a8:e1:
ef:8b:68:6c:4f:db:75:4a:6c:d4:ed:03:6b:70:5f:df:1f:93:
89:66:ea:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:45 2026 by rpki-client