Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: gD2bY+u0NxDmy23gZDxqJNYTWocCvpUSd2QjRVA7nZ4=
Subject key identifier: 11:FD:97:3F:31:96:E4:65:91:CD:C9:13:85:A9:3C:F9:79:17:E5:12
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 019D37C0FCC0AE410C664F87F601E6F5C7D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: FzaSctWTm436xTaHu7cLIoR3zuI.roa (hash: ZWQNCmBRzSOXikzbY8uxPHONXN2ergkv72vrvK6pGEg=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: DCzQlc08KclvISpMZXpPL0exLbHrBvGZigLPQAUBtho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fc:c0:ae:41:0c:66:4f:87:f6:01:e6:f5:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=11fd973f3196e46591cdc91385a93cf97917e512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:69:1a:a5:c6:25:cb:95:c0:58:4f:db:03:
1e:c7:15:0a:ed:9c:6a:35:55:7c:e6:cb:2e:de:82:
e1:12:e4:d2:6b:48:34:c6:aa:18:cf:87:ad:44:90:
b5:73:a9:5b:c0:d1:12:a8:85:f0:a6:84:68:63:41:
90:f9:05:46:da:3b:ef:ef:2e:e3:fc:41:97:87:7d:
cf:91:66:82:b7:09:ab:19:41:3d:1f:29:64:26:76:
27:b7:59:6a:d8:3c:e0:11:e6:89:2b:49:d5:32:78:
ca:8d:ab:6f:30:88:56:f8:06:04:55:a7:e3:f4:93:
ca:5f:3a:cd:da:f6:89:c5:80:42:1e:ba:af:d8:ce:
89:56:e4:9b:6d:1b:4e:68:2f:ef:cb:b8:cf:ca:9b:
58:b7:ca:a7:c0:54:0f:ef:86:2b:5b:ca:44:f5:db:
8d:01:a5:61:11:a9:e4:58:7f:a4:ba:3f:81:2e:02:
c8:d6:49:2d:ce:23:bd:a1:a4:b0:03:2a:56:2d:bd:
9e:cd:b1:e2:6e:cf:5e:f9:49:20:12:86:aa:60:80:
1f:76:39:e6:65:3d:b1:4d:2b:61:42:71:0b:e7:13:
d1:bd:f4:86:0e:22:6f:38:a4:a9:d0:f4:dc:12:a2:
34:7a:08:f5:03:e2:9b:37:4a:4d:8e:21:e4:6e:be:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:97:3F:31:96:E4:65:91:CD:C9:13:85:A9:3C:F9:79:17:E5:12
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4a:58:9a:a8:af:8a:ed:38:b3:5e:b0:b2:d7:c8:79:b7:b8:
50:73:8b:77:ac:9f:5f:28:bd:6e:8a:b3:5a:fc:8b:97:03:93:
98:42:f6:95:a9:eb:25:36:af:eb:e9:e4:17:5b:42:a2:c7:8d:
1a:5f:40:a3:24:f7:d7:3d:1e:47:f4:85:a9:93:22:ac:44:e6:
a8:b4:3d:38:98:ff:2b:09:17:79:1e:53:d1:35:fd:e9:7d:7b:
70:fc:57:f7:f9:f9:81:47:2d:22:b3:f1:e2:36:5a:2c:f6:f4:
2e:fc:f4:5b:94:3e:9a:64:cd:04:bb:55:4e:82:b3:e2:41:60:
ce:2b:31:c0:1f:a2:11:a6:9d:9d:f3:4f:18:4c:06:a6:0b:04:
b1:4f:c3:d9:e8:e3:a3:f1:14:ff:ad:6d:d1:9a:cd:3b:e5:1b:
49:0a:53:f0:ab:78:72:e9:75:c3:da:7e:d2:6d:4e:d2:90:f4:
4a:86:fd:44:48:40:80:8a:51:c4:10:93:ac:7d:54:32:83:0b:
4e:e4:64:73:12:d4:06:24:33:7f:18:36:c7:4a:0e:f9:d8:88:
da:68:12:34:fb:e7:36:8d:ea:08:4c:24:ad:25:0c:90:57:1f:
fa:85:70:b3:b1:4f:6b:06:ee:4c:44:62:23:d7:fb:7e:ff:a4:
7c:0f:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client