Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
File: iBDn48kXXrmP94FdMHb7Aplqc0o.mft (raw, json)
Hash identifier: /3SyuSJZTLm1R4wAHbFcpNlnZmDhzIHy0G64s7F9Usg=
Subject key identifier: A5:65:AF:C5:E0:CB:AC:8B:D0:91:E4:20:43:99:B9:E0:4D:B1:BE:08
Authority key identifier: 88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
Certificate issuer: /CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Certificate serial: 019D39AE4DB2465D32245B1C56420A5D9CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
Manifest number: 049E
Signing time: Sun 29 Mar 2026 13:00:17 +0000
Manifest this update: Sun 29 Mar 2026 13:00:17 +0000
Manifest next update: Mon 30 Mar 2026 13:00:17 +0000
Files and hashes: 1: iBDn48kXXrmP94FdMHb7Aplqc0o.crl (hash: /UXvqFhyHuw4+hz8IpeeWyeQFjRMVr4lVxYX5yhFF2Y=)
2: x3cjJVpLnZG-uty2qSffRSOuoQE.roa (hash: Tj4Pb94uCkpkUlh6u2jzVddtm53J1LKyupR5P1TGR+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:4d:b2:46:5d:32:24:5b:1c:56:42:0a:5d:9c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810e7e3c9175eb98ff7815d3076fb02996a734a
Validity
Not Before: Mar 29 13:00:17 2026 GMT
Not After : Mar 30 13:00:17 2026 GMT
Subject: CN=a565afc5e0cbac8bd091e4204399b9e04db1be08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:68:2b:3d:a6:9a:f3:39:74:4b:5d:27:05:
f9:23:d3:80:82:db:e8:c8:c0:1f:46:af:86:b8:95:
49:ab:d2:d2:07:5f:95:8f:12:a7:9b:a0:c5:9e:31:
31:dc:bc:0f:1c:2b:d5:88:f9:5c:72:9e:89:61:9b:
a7:2e:90:ee:3b:e2:5d:7a:a3:d8:30:fc:39:5c:1d:
3d:ff:97:4b:19:4c:b6:db:ab:f6:6c:4b:92:d0:65:
99:75:cd:22:56:27:5c:3a:4d:27:a5:ff:98:c8:0d:
47:5e:b2:a8:e9:e4:26:6d:08:29:f8:6b:6e:eb:10:
b6:d3:b2:be:3f:99:4e:2e:76:80:1b:ff:26:4c:7a:
21:89:f9:05:41:3a:0a:90:27:32:33:97:12:ba:33:
fb:94:a9:ae:fd:11:c4:09:d0:5a:d1:60:13:3c:d6:
df:21:c9:3d:dc:0d:48:f8:b2:c9:47:12:f2:8f:e4:
38:4a:67:c1:c4:1d:b3:52:1e:51:91:69:03:ed:bb:
2b:ef:04:d8:51:c0:78:bb:e7:55:6f:d5:fa:ca:38:
b4:1e:09:8f:7e:8f:46:d4:24:8a:56:2a:94:9f:a2:
62:12:91:8d:35:ba:67:d5:24:5f:9b:81:4b:5b:cf:
f0:07:91:3f:bc:86:cb:86:3a:0c:f3:c5:74:61:3b:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:65:AF:C5:E0:CB:AC:8B:D0:91:E4:20:43:99:B9:E0:4D:B1:BE:08
X509v3 Authority Key Identifier:
keyid:88:10:E7:E3:C9:17:5E:B9:8F:F7:81:5D:30:76:FB:02:99:6A:73:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBDn48kXXrmP94FdMHb7Aplqc0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6ce0b1-c776-4eff-81ac-2eedace4aac9/1/iBDn48kXXrmP94FdMHb7Aplqc0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2d:e2:7f:0f:08:70:5c:07:6d:69:32:68:fa:df:9f:c8:b6:
c9:4e:2a:5a:4b:d1:b2:af:46:b4:b3:81:82:84:6c:6d:9e:ec:
05:b2:ef:b8:3d:8b:c3:2c:61:ac:96:d7:f5:e4:47:47:ac:2f:
c4:6f:a2:6e:7a:f0:d8:f6:97:1c:17:c2:02:ca:2c:b3:54:41:
09:90:59:c4:f3:09:ce:23:81:25:ba:0b:f8:85:3d:b5:75:5e:
51:ed:ec:9a:88:d9:17:9f:48:bf:17:29:4e:7a:65:38:4c:dc:
05:ad:5f:0c:50:bd:1e:29:23:26:85:39:57:15:16:36:9b:68:
fa:27:22:18:43:25:5e:9b:91:04:75:df:04:a2:73:36:ae:03:
3e:47:0b:cf:79:e0:d4:16:3b:4c:7e:2c:81:b4:25:8e:8e:4e:
57:e4:55:24:f4:ca:3e:2f:a0:15:33:95:1d:96:b7:87:3e:b1:
0f:63:ca:20:d9:34:83:ef:03:f2:61:ba:df:1f:f4:45:fa:e5:
11:31:f2:06:39:79:a3:c4:2f:bb:2c:28:17:87:3a:c5:2c:f9:
39:0e:49:64:69:ef:e2:46:1a:9f:bc:d2:4e:b1:d4:a1:d2:d3:
52:84:48:ad:89:f1:32:68:41:ea:16:41:3f:5d:57:34:0b:85:
7d:c3:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:42 2026 by rpki-client