Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
File: ijSno_66-8hACr4dwS8ixsHopb4.mft (raw, json)
Hash identifier: ooxn5+vNbgrbnu+wiQbQ+QuNfg0CNgNsD1p7nHxe55A=
Subject key identifier: D7:14:B7:59:4C:84:10:06:3A:61:57:D2:2D:C8:AC:9A:18:E5:6B:E9
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Certificate issuer: /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial: 019D394145BE0F1E82B737CF3495E4FFBD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
Manifest number: 0902
Signing time: Sun 29 Mar 2026 11:01:12 +0000
Manifest this update: Sun 29 Mar 2026 11:01:12 +0000
Manifest next update: Mon 30 Mar 2026 11:01:12 +0000
Files and hashes: 1: DrNj16KdHBydg-pgyLTL6B45LSk.roa (hash: aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=)
2: ijSno_66-8hACr4dwS8ixsHopb4.crl (hash: 9w5nBMW73DochqsnRiZz45BFNx0ZoZt2Zm+TmHEobWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:45:be:0f:1e:82:b7:37:cf:34:95:e4:ff:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Validity
Not Before: Mar 29 11:01:12 2026 GMT
Not After : Mar 30 11:01:12 2026 GMT
Subject: CN=d714b7594c8410063a6157d22dc8ac9a18e56be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:94:bf:40:46:e8:37:fb:13:f5:f7:97:cd:
a3:b5:d6:80:d2:a5:2b:c1:6d:19:c3:b7:a2:04:ab:
39:11:19:1a:18:8b:06:06:de:c1:af:d6:b4:9c:95:
cb:97:df:65:1a:ae:d8:96:9a:52:70:f4:d5:08:fc:
ea:72:93:9e:63:58:f5:5c:24:00:82:d5:f3:02:d3:
2c:1d:f7:5d:c4:2f:14:f4:12:96:a7:0c:e9:dc:6f:
8a:3a:91:6e:c3:cb:4d:89:f1:1e:29:2a:11:40:c3:
5d:b9:54:e9:a5:24:1f:17:9f:fe:f1:8c:35:70:87:
ad:24:95:fa:4a:0e:15:02:ec:7d:9b:53:e5:59:b2:
0d:70:6c:3a:b1:65:26:4d:ed:58:5c:77:c1:86:b6:
39:cd:df:9d:77:65:f9:a6:0d:59:00:eb:4f:ce:79:
71:a9:b4:8c:b8:9d:ae:fe:e1:f5:75:4f:b8:10:d8:
34:6c:d3:ca:7f:59:ae:ad:0e:c8:c3:87:ef:9c:3d:
fe:9c:ab:27:ee:53:b4:69:32:e1:c4:9c:17:19:e9:
39:5d:8d:7f:bf:a9:55:9e:16:51:49:81:ad:db:1c:
af:34:dc:9e:df:92:31:2c:06:a7:b1:76:88:95:6c:
58:3e:b9:ef:9e:eb:13:ed:3b:a7:45:62:c2:8c:b5:
7a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:B7:59:4C:84:10:06:3A:61:57:D2:2D:C8:AC:9A:18:E5:6B:E9
X509v3 Authority Key Identifier:
keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8a:84:88:88:ce:da:46:02:d5:f5:03:98:dd:db:ca:19:5b:
98:1a:d0:1b:cc:35:65:c8:fa:dd:98:f8:7c:7c:90:fb:f2:59:
27:41:73:66:3c:6f:9c:c6:49:0a:08:c6:9c:6c:1e:8d:94:0b:
a0:67:b0:0f:4d:4d:5b:bf:e2:c9:b9:47:11:bd:e4:93:14:4b:
50:7f:d6:2e:12:bc:f5:f4:ca:ed:3d:02:b4:09:a2:cd:9a:25:
77:9e:37:ba:3b:8e:55:cc:61:6f:4b:2c:e7:30:c9:1a:a4:ca:
aa:d0:3e:1a:9e:75:1c:5b:06:fd:77:91:e4:a7:e8:68:5b:be:
d3:3d:49:88:15:46:21:78:38:6a:6d:22:57:27:1e:e4:62:b6:
a2:30:04:8e:f7:df:05:1d:38:22:93:26:92:7a:48:e7:52:48:
f4:b2:7f:02:d8:b7:7d:54:52:33:10:2d:f9:3b:b3:fa:35:1c:
d5:98:88:46:6a:ee:2a:1b:67:5e:65:21:d0:65:c1:55:71:e9:
f1:8c:c4:0e:f8:21:69:83:b4:7f:2e:0e:9a:63:2b:71:84:28:
90:f3:01:72:f8:a6:27:64:b7:9d:af:a1:ef:a6:ce:91:07:06:
26:e2:4c:3b:6b:bd:e6:38:73:75:05:24:fd:27:40:68:e5:3f:
e9:68:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:43 2026 by rpki-client