Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File: ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier: wK3MZCMS5XgDTqDZ7xp0SyShJQTFVPMidVSyi7tzyt8=
Subject key identifier: B1:3D:FB:8A:A7:B4:C9:4C:0A:28:01:E3:A2:6B:56:EF:25:A7:A9:1C
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer: /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial: 019D390A2BF6217FA17196DC09FDA284073F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number: 07DF
Signing time: Sun 29 Mar 2026 10:01:01 +0000
Manifest this update: Sun 29 Mar 2026 10:01:01 +0000
Manifest next update: Mon 30 Mar 2026 10:01:01 +0000
Files and hashes: 1: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: iEsekhxzXV2naSf7dn7MBAmv+MYE8L6dGDVLuopcnAQ=)
2: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (hash: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2b:f6:21:7f:a1:71:96:dc:09:fd:a2:84:07:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Validity
Not Before: Mar 29 10:01:01 2026 GMT
Not After : Mar 30 10:01:01 2026 GMT
Subject: CN=b13dfb8aa7b4c94c0a2801e3a26b56ef25a7a91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:be:a0:5b:70:81:06:83:ac:51:d4:a7:45:
56:78:a7:95:0b:b0:26:2b:44:0c:f7:2a:1a:32:3f:
36:52:d5:ae:98:87:70:8c:2c:19:d0:ad:96:d4:3c:
d8:9d:24:d1:be:04:32:97:1b:ff:7c:f8:fe:d4:1d:
08:5e:20:db:f6:f9:08:58:b7:71:0d:1b:db:38:c6:
a6:26:59:e0:4b:b3:24:bc:9e:85:80:16:72:68:f7:
b1:74:2f:fb:59:39:79:06:bd:ca:ff:01:49:3d:da:
41:6c:e6:c0:49:16:c3:7d:43:9b:32:ba:c9:c3:41:
af:dc:20:43:29:ed:9d:94:69:af:e9:ea:89:94:af:
81:75:cc:9a:05:b3:4c:66:60:d3:05:1d:34:c7:86:
b7:76:95:12:25:17:a7:65:a5:4e:4c:a3:52:d2:19:
af:d3:6a:ef:14:28:bf:90:57:5a:c2:8e:99:3b:8d:
83:f3:d6:42:32:6f:50:e6:dc:4b:d7:5b:2f:32:47:
60:26:07:10:4e:91:b5:28:9d:c3:74:9e:af:27:e3:
6f:a9:e9:b9:80:11:55:2f:29:77:fb:1a:a8:0b:dc:
15:3f:35:27:f4:63:d4:77:0f:33:4a:28:85:42:06:
4b:c7:3f:8f:24:7e:0e:5e:d3:f7:f8:8c:05:07:c4:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3D:FB:8A:A7:B4:C9:4C:0A:28:01:E3:A2:6B:56:EF:25:A7:A9:1C
X509v3 Authority Key Identifier:
keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:58:8d:77:d9:db:a6:80:09:b3:af:b6:d7:83:8f:f6:13:c4:
4d:52:9c:f0:2c:72:11:df:4d:27:1d:24:59:5e:fe:2b:4a:a9:
47:28:65:5c:30:30:87:8e:d1:16:76:1d:54:66:68:8b:fa:8c:
3c:0c:49:4c:2b:4f:a6:26:a2:25:57:6c:96:d9:ef:69:52:1f:
fc:08:a5:ea:4b:b3:6c:73:d4:0f:0c:a6:5c:d7:9c:26:a6:df:
5d:8d:47:c3:3a:b8:33:52:e7:72:be:69:0a:a4:9a:98:26:bf:
d3:a1:6d:64:a6:1d:80:39:ba:e2:8b:c6:12:23:b9:bd:00:ae:
3a:27:28:db:98:55:22:6e:36:b6:b4:21:c0:bd:70:75:4a:26:
36:3f:97:1d:88:19:f6:18:ac:f7:ef:e3:a8:e8:96:90:b5:e7:
06:f2:0f:5f:fe:80:0b:16:09:29:28:61:9c:b3:ce:71:fd:8f:
0d:9e:c1:6b:40:55:a7:69:c3:ca:30:17:99:40:99:52:34:3f:
2b:e9:24:b2:43:fb:22:b0:e9:35:a7:fb:9f:e9:33:4a:ed:68:
11:a8:76:98:b2:65:7d:0d:b3:83:47:f1:db:b5:d1:a6:9a:32:
f6:cc:d0:68:3b:b5:8f:45:d5:ba:38:0a:28:eb:b9:d8:22:93:
b9:4c:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:38 2026 by rpki-client