Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: WmzGMsnKFzYpwmtAATRoXh4iUFp2eKCYu+4t7or6d3o=
Subject key identifier: E1:80:D2:FD:8B:52:AD:7F:A5:46:3E:98:43:D5:20:DE:31:07:17:12
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019D37C002403FD18FC1DFCE9BB97B250C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 1524
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: Y+qd8jRbMVa1GI4gjz4OGyBIoZQQG9yoBChuq8p9g4I=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:02:40:3f:d1:8f:c1:df:ce:9b:b9:7b:25:0c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=e180d2fd8b52ad7fa5463e9843d520de31071712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:b0:2d:5d:81:74:37:5d:86:02:29:00:13:
4c:3a:e7:41:4e:fb:a9:5a:39:99:9d:fa:65:43:ff:
37:bf:02:4f:15:47:66:ac:b5:79:92:41:b3:82:ee:
f7:d6:e1:78:74:ea:b7:c2:06:cb:4c:ee:5b:1b:18:
14:11:73:f8:64:47:45:93:1f:58:f4:a1:d1:78:c8:
e1:6b:d7:3c:db:e1:54:0e:a3:3f:e4:99:33:82:ec:
a9:e4:48:03:74:f4:47:67:62:4f:a4:60:ee:5c:d2:
25:19:8b:4d:83:fc:4e:3d:dd:32:bb:a3:b5:61:fb:
78:77:b0:4d:2b:07:12:df:67:ef:13:6c:af:3d:94:
9f:15:88:6a:ac:61:ac:de:f1:5b:c8:23:ee:c3:93:
d0:31:85:98:28:8b:66:73:f4:b3:2f:a3:e4:68:9a:
10:f8:42:8e:39:69:29:75:03:15:04:c5:6a:cf:49:
e3:3d:be:a3:fd:ee:bf:5a:cc:34:58:d6:ff:74:f8:
37:b0:df:89:d5:30:dd:98:8b:9d:5a:7e:c5:b9:1e:
b2:1c:da:08:10:b8:f2:6a:57:be:82:98:4f:1d:10:
ff:de:59:df:d8:cf:92:00:95:40:be:97:bb:46:09:
c4:bc:3c:d7:66:c4:0e:17:37:3f:ad:ca:9c:1a:f3:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:80:D2:FD:8B:52:AD:7F:A5:46:3E:98:43:D5:20:DE:31:07:17:12
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:0b:06:8a:62:87:2d:a2:3a:1e:18:0c:db:07:da:c5:ea:91:
50:32:ac:b0:a7:80:71:1c:4e:1a:6f:59:a0:e3:45:be:36:22:
0b:b6:2d:30:10:ff:10:23:93:12:81:37:b5:85:57:45:9c:0a:
fc:1a:59:b0:7d:59:f9:4a:26:4a:27:23:d3:df:84:49:ac:89:
fa:dc:a1:37:cb:c6:ca:84:c3:4a:9d:ce:59:1d:40:59:e2:d2:
8e:22:7a:f3:db:6c:94:c9:e6:30:c1:88:91:4d:24:f3:00:d8:
16:73:29:06:a8:ee:4f:a2:c0:80:6e:c7:1d:bc:f7:b8:92:24:
93:e1:2c:71:45:0e:4a:ae:9c:d5:3a:7c:32:1c:3f:0c:f0:9c:
0f:64:65:b9:46:2f:3d:10:65:ad:74:12:6d:42:d8:3e:80:2c:
2d:56:53:9b:30:83:72:d9:1f:f7:c4:26:74:30:a2:73:d9:85:
ac:2e:c5:e9:00:a3:f4:c8:77:e7:06:31:da:b8:b9:68:a4:1a:
38:3f:00:2d:30:e6:fd:50:30:3c:2f:f7:b4:25:b3:74:0a:cd:
8c:db:bb:1c:48:19:66:51:f7:b7:2c:6b:e4:aa:c3:b4:ee:8b:
a7:b8:50:98:70:02:0d:a2:4a:82:1f:c3:bc:1a:4d:ed:03:4b:
54:8d:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:08 2026 by rpki-client