Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: JNYdXZ7lYUZ/SQ/D+JFumwNSFYpp3U32GwLOmgtHPRI=
Subject key identifier: 9A:F2:81:EE:DD:54:1D:4E:78:4A:08:31:47:50:9F:B1:C5:32:97:11
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019D389C214E8C8100BDB79303B956AE7024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: 0wgf23tvdSjDuy36oum4E_5sBcQ.roa (hash: DMJE3y5rVfgLLy+PLJs0X0RhRoSjVQhQBLKFeetfmGY=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: ZqLpf8zETHPj5npAbNwBVXQWeJ1+YhxesgNhcaGM1kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:21:4e:8c:81:00:bd:b7:93:03:b9:56:ae:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=9af281eedd541d4e784a083147509fb1c5329711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:5e:61:1b:0c:bc:70:98:17:f1:a0:fe:7f:
38:bb:88:99:8d:af:e1:f1:d9:a3:9d:3f:ed:5b:63:
81:f8:91:fe:93:a3:29:52:52:f0:64:cd:e5:35:9a:
3c:b9:79:0d:b0:2b:ac:9d:db:d5:cf:16:11:73:1a:
cd:bb:2f:4e:bc:70:36:d9:3a:11:19:99:45:34:c7:
01:b0:7f:4b:87:77:15:00:91:3a:b2:42:f0:40:c2:
ce:e3:ca:24:13:22:c2:c8:fe:5f:c3:13:4e:52:a7:
ed:29:27:32:da:c9:29:83:87:ef:83:8b:2d:a3:a9:
93:ae:b6:6f:d0:7e:7b:9c:98:9e:0d:57:e2:eb:c5:
90:94:fa:77:cd:a1:85:99:08:7a:4e:26:2b:3d:b4:
f5:6d:e6:28:c7:af:b7:8d:1d:3f:7f:20:7d:63:1d:
b3:60:7d:3c:08:5c:6f:64:f3:37:ae:ac:da:18:f0:
58:67:0d:ad:2f:8a:15:74:ea:04:a2:ea:bd:c4:eb:
df:d4:15:05:32:48:33:e8:70:10:af:cd:db:a5:6c:
71:0c:d7:4d:34:75:a6:e3:b0:89:11:9a:a2:75:6e:
aa:fc:b7:ed:08:7a:aa:88:46:cf:84:a3:6d:44:e4:
a4:95:79:e5:b9:5a:f8:5a:41:42:6a:b9:aa:47:c4:
38:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:81:EE:DD:54:1D:4E:78:4A:08:31:47:50:9F:B1:C5:32:97:11
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:44:ab:c4:a6:b6:ec:2b:5b:34:d6:17:50:54:7c:4a:36:f8:
c0:c4:44:81:e3:a4:de:78:63:0a:4f:86:39:de:8e:1b:cb:ed:
c1:03:cf:c9:37:c3:76:c3:e1:a6:df:db:6a:50:74:15:f9:c0:
5b:3d:79:b9:95:f9:2b:79:82:fe:08:2a:5e:ea:1e:69:3e:13:
94:13:25:0b:b8:fb:55:6a:27:20:cb:e9:ba:55:89:71:b3:2c:
d8:d4:ff:f3:d3:cf:50:fd:81:29:cf:bb:6e:06:40:16:78:5b:
38:1c:fe:bd:87:a2:f7:48:c1:43:b2:c0:e5:9b:aa:f2:08:71:
d1:c5:ab:36:ca:4e:00:c8:37:25:40:44:b5:0d:a9:8d:8c:13:
cf:9b:b3:b3:e6:4b:90:db:c2:f3:16:14:5f:32:23:ea:05:39:
0d:a5:97:15:43:6c:c8:11:59:b7:e6:4a:33:39:10:cc:c3:b5:
e2:f9:55:17:6f:e4:00:45:0d:4f:43:56:96:66:e7:61:8b:6b:
1e:a7:ae:37:18:d7:f0:e3:36:b1:35:61:e7:8a:54:21:ba:72:
d4:89:15:68:17:06:97:35:9b:08:e2:56:19:3e:e3:59:fe:55:
05:55:c3:fd:4b:96:ff:ff:58:1e:bc:22:ff:58:48:ca:11:94:
f0:e8:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:04 2026 by rpki-client