Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: vcx8qk+tzVXih6tg/TQmWIlXoAK8hb8vY0yFQt8fbaQ=
Subject key identifier: 23:08:98:B2:C6:B5:85:CD:B6:7A:9D:E2:C8:DC:46:63:42:EF:F3:88
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019D39AE8C37CEDC37ED61BFE7E736C119D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 1691
Signing time: Sun 29 Mar 2026 13:00:33 +0000
Manifest this update: Sun 29 Mar 2026 13:00:33 +0000
Manifest next update: Mon 30 Mar 2026 13:00:33 +0000
Files and hashes: 1: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: 9VF7jiNWqqUwMSMrYf8OVAbRGNTpOSDpP6JrtSZe5UY=)
2: KGVSyU1wIj7N4iY-yGjJQ4nk1wo.roa (hash: JwvzeqlxWkg3az+woqZ5+VwCzs4K2YIxQ2yc7nZEKzM=)
3: _1spXT-fNgBWQ52DMUTuvrFr3B8.roa (hash: 0BaKLx6BfvTvlAXkJodDBjYBD7kri1g1ufdyiNOpYl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:8c:37:ce:dc:37:ed:61:bf:e7:e7:36:c1:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Mar 29 13:00:33 2026 GMT
Not After : Mar 30 13:00:33 2026 GMT
Subject: CN=230898b2c6b585cdb67a9de2c8dc466342eff388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:5a:b3:59:b0:40:36:39:17:b4:3e:b9:40:
20:99:87:9f:f6:ce:6b:0c:fd:72:53:9a:0f:2a:e4:
ed:da:aa:65:01:7b:f1:ab:35:ab:aa:d3:9d:07:92:
7c:5e:04:1c:0b:34:15:99:62:26:ab:97:51:5c:92:
1b:78:29:29:e3:79:9f:99:54:e0:10:cf:27:13:e5:
23:18:2d:f1:cd:bd:29:50:aa:c4:48:06:75:fa:42:
fb:75:e2:d1:4e:82:1e:ed:13:3c:fa:81:69:c4:05:
42:12:8d:bc:1d:d1:20:8a:65:ac:1f:2e:46:66:db:
4b:52:7f:c6:c4:94:86:47:c4:e7:dd:54:24:47:97:
1d:96:fa:d9:8e:1e:2e:48:1b:82:1f:19:be:bc:9f:
58:81:72:86:7e:86:49:76:99:87:79:69:b4:86:81:
3b:7e:08:d7:c5:ab:08:d8:ba:d6:ba:d4:3d:9e:60:
cf:b3:25:ce:51:da:e4:56:29:5d:a0:d9:fe:fd:8a:
f4:79:68:4d:d6:3e:eb:04:23:48:08:72:79:01:d8:
d7:ba:79:82:42:80:d5:3a:19:09:b7:fe:b0:bc:dc:
95:49:94:98:d5:e1:e4:ee:16:a2:2c:1d:f2:b2:fe:
84:38:11:48:8e:84:ae:79:a2:e8:e7:43:47:57:35:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:08:98:B2:C6:B5:85:CD:B6:7A:9D:E2:C8:DC:46:63:42:EF:F3:88
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:e2:a6:cc:a8:c7:1c:cc:90:53:d8:4a:40:ed:a4:81:08:b1:
2e:2f:0d:47:62:97:37:09:bf:8c:d4:a9:97:53:8a:f2:8f:2b:
ab:2f:4a:62:80:86:a9:89:59:77:0f:8b:4f:a1:5e:75:c4:07:
36:a5:0d:9c:09:6d:40:a6:36:1a:db:f0:91:d9:8f:ae:ee:93:
8d:65:7e:c4:c7:3b:b3:a5:0a:e8:25:0f:97:af:b0:1c:4f:49:
e9:51:7e:5b:1b:54:f4:b9:e7:b1:ba:9e:d6:f8:fb:19:1f:00:
89:16:ba:e0:45:e9:8c:85:8c:70:19:ad:c8:25:62:d9:5c:5a:
ea:57:2b:cb:02:0e:a9:79:18:2f:b8:24:0c:fd:58:54:d7:cc:
4a:0f:69:9b:df:17:7e:c7:2a:ba:88:4f:63:52:18:c8:e5:3c:
18:e9:44:72:11:d1:58:02:d8:9a:d5:9b:1a:f7:aa:67:28:4c:
57:65:86:0c:14:2c:62:f3:63:e4:69:af:3c:9f:f1:94:c9:4c:
92:c9:13:9c:f7:16:76:02:d8:d3:d6:7f:e1:8f:12:b9:ce:97:
d2:49:fe:60:73:d1:a2:bd:79:58:cb:ef:32:34:4d:7a:31:ce:
09:91:a4:60:ee:76:16:10:9a:1e:d2:dd:68:85:e3:3d:1c:17:
8a:d1:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:42 2026 by rpki-client