Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: 28hZmv4WZL4LNkxpN84lCVTFw0qJ8If7KiHeMc0XtAE=
Subject key identifier: 00:38:74:B6:05:84:32:DD:EB:5D:6A:58:A3:75:03:F2:94:6E:E2:61
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 019D386615373FBF25459B317A611A227B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 093B
Signing time: Sun 29 Mar 2026 07:01:47 +0000
Manifest this update: Sun 29 Mar 2026 07:01:47 +0000
Manifest next update: Mon 30 Mar 2026 07:01:47 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: U5o49HRFQJluB43onLd6SuvzzjXtIe/cd9FsJWlvn08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:15:37:3f:bf:25:45:9b:31:7a:61:1a:22:7b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Mar 29 07:01:47 2026 GMT
Not After : Mar 30 07:01:47 2026 GMT
Subject: CN=003874b6058432ddeb5d6a58a37503f2946ee261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:ee:65:61:f7:89:f7:6b:53:19:bf:0e:85:
7f:44:99:7d:64:36:45:5c:db:fd:70:ec:73:8c:b6:
14:35:21:b5:9a:d3:49:d2:02:2c:58:91:05:da:80:
8b:77:5d:40:45:71:11:72:a7:13:d8:44:b3:c8:e9:
4e:40:37:d6:cb:a0:78:f0:cf:cc:e8:90:10:55:6b:
70:49:db:3e:3f:21:73:8c:1c:8e:11:46:fe:b0:a2:
f3:89:71:3e:ad:b6:57:fb:12:e1:85:88:91:5a:a0:
71:c9:90:71:b1:ae:56:0d:e7:72:37:c4:8b:59:b7:
dc:ac:cd:09:24:38:bd:e6:cc:90:4d:73:7a:8b:50:
ee:33:51:b9:26:7d:4d:36:9b:43:a9:21:00:e5:c6:
fc:4c:85:ef:98:2d:b1:da:a3:19:a5:bf:c1:2b:c9:
53:4b:c4:41:fd:1e:5e:78:2d:cb:ed:6f:2b:da:3d:
f2:c1:16:d5:5e:72:a0:cc:6b:c4:17:09:b0:8c:53:
04:4e:e7:b1:ce:c5:20:a8:1b:5d:7a:b8:3d:16:24:
72:94:f2:8d:3a:9d:57:5d:4a:62:0f:17:e3:61:59:
03:3a:01:1b:ce:3c:b9:cd:10:5d:c8:7b:f2:a3:8f:
42:91:a0:a4:89:c3:e4:4c:ce:81:0b:bc:b8:9f:42:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:74:B6:05:84:32:DD:EB:5D:6A:58:A3:75:03:F2:94:6E:E2:61
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e5:a8:c6:f2:2f:e7:fc:94:25:96:ad:80:d2:d0:7c:a5:fd:
d4:76:64:a2:2e:6b:73:49:f5:38:f3:24:2f:4e:da:71:71:15:
2b:91:0d:de:59:22:87:84:dc:d9:d6:02:ff:47:76:a1:9c:e6:
78:f8:93:df:60:82:af:55:83:06:6d:5e:77:84:1c:f3:e7:b2:
05:dd:6f:f0:c0:fa:18:f4:a8:64:00:f8:f8:1d:d3:56:65:fe:
b7:1d:96:c0:a1:09:a6:90:60:31:98:98:69:a0:c0:86:ab:84:
b6:97:6d:5e:86:7a:5f:71:68:07:af:09:63:df:b2:c8:6b:24:
e2:08:d5:61:93:86:75:e8:95:d6:60:bc:41:da:d8:01:00:07:
82:2b:21:e9:35:a0:10:66:0e:2f:31:cd:eb:c3:81:c2:8b:65:
b8:f2:32:fd:55:e4:b6:ff:78:c6:15:2e:9c:5a:c0:aa:89:46:
9c:08:e1:2b:cb:bb:4f:c3:8c:44:e8:86:1d:57:3e:fc:99:42:
cf:84:d7:01:a6:e3:34:04:62:bb:7b:79:1a:50:d6:53:7e:da:
13:3b:a8:9f:c9:ea:6c:c1:dc:a3:59:8d:9b:cc:fc:74:0d:35:
76:b1:18:9e:38:5c:75:65:b8:98:b2:ff:74:e6:bc:e6:4c:ee:
99:06:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:48 2026 by rpki-client