Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: eN6uF0ubqoAy7UANOx6/FhecDmXnqxX1p4Lm8BV6SaM=
Subject key identifier: 67:1B:8F:F3:69:93:81:7D:A1:C0:AA:2F:38:84:5F:DE:C3:B1:F4:C1
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019CE523A2E7AEB9CAACC877A1F7409C05D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 183B
Signing time: Fri 13 Mar 2026 03:00:43 +0000
Manifest this update: Fri 13 Mar 2026 03:00:43 +0000
Manifest next update: Sat 14 Mar 2026 03:00:43 +0000
Files and hashes: 1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: vST3Bn+Wvhp/SOiZYos2T0yDmykOBrdNCxsR+OLiSyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:a2:e7:ae:b9:ca:ac:c8:77:a1:f7:40:9c:05:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Mar 13 03:00:43 2026 GMT
Not After : Mar 14 03:00:43 2026 GMT
Subject: CN=671b8ff36993817da1c0aa2f38845fdec3b1f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:0c:7a:16:36:bf:a6:96:94:0f:6f:9a:d6:
97:2e:42:a0:9e:fa:13:50:49:3e:94:80:e2:50:10:
ed:b4:de:dd:a2:8b:b6:da:e0:89:0f:c7:a0:d8:1a:
ee:12:a7:5a:59:31:64:59:65:c0:7d:fe:d5:da:3e:
06:8e:8b:fd:dc:39:e6:d3:df:97:fb:11:41:d3:3b:
cf:d5:0f:48:35:63:da:2f:4e:20:b8:77:77:35:7c:
c3:48:0e:61:16:70:c1:66:2f:aa:7b:dc:3a:33:dc:
31:19:d8:be:d1:fc:7f:ec:f0:2a:0c:99:8e:37:ee:
41:ce:71:6f:e1:f3:76:29:ff:26:78:a8:4f:46:2f:
08:d0:04:79:87:6c:2f:7c:e8:83:30:7d:fe:1f:72:
9d:68:0b:60:f6:1b:79:e5:78:8b:1f:65:55:50:c1:
b8:23:6f:2f:f1:6a:cc:1c:6d:cf:29:ce:2a:5c:8b:
c8:a3:7e:c0:a6:ec:58:a9:0a:ec:d3:76:c7:c7:a0:
31:38:64:03:2d:59:16:bf:74:79:c7:d3:96:34:46:
a0:44:85:5a:af:96:9b:db:14:17:f0:a1:b6:34:b8:
8e:65:6d:bd:37:d8:c3:8c:b9:b6:f2:45:6a:bf:25:
e4:c5:e1:53:af:87:14:1e:87:12:0e:0b:0c:72:99:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:8F:F3:69:93:81:7D:A1:C0:AA:2F:38:84:5F:DE:C3:B1:F4:C1
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cd:90:64:2f:fa:8c:16:bb:70:96:05:f9:ce:06:d6:a7:8c:
da:86:a4:6c:3b:b7:d3:09:aa:5c:a4:1c:48:40:60:68:42:48:
d6:32:68:b8:7b:9b:be:19:1b:5a:dd:9f:10:71:6b:1a:8e:c7:
ee:69:46:39:a4:ff:c1:76:6c:a7:3a:b9:0b:66:2a:03:e6:a1:
e0:58:db:fc:5f:fb:5e:0f:e4:3d:ed:7c:c8:35:5c:08:dd:a6:
17:4b:a1:3d:87:bb:13:8e:16:b4:d6:20:31:0e:c9:35:83:b0:
bd:ec:b5:36:5f:45:86:ed:38:1f:22:62:82:f6:e9:f5:3b:99:
73:b5:e6:09:69:5d:dc:f8:17:8c:a9:ad:bd:af:f0:d3:4d:1d:
e8:30:e4:fa:48:75:2a:a3:8a:25:29:8a:69:87:7f:19:5a:5f:
80:18:4e:f7:4b:cf:99:74:e4:6a:20:f6:c4:30:be:a0:69:1e:
02:54:f2:10:d6:ba:f0:e6:73:20:a2:c5:50:3c:52:c4:13:0d:
30:ac:38:82:a6:0d:0c:48:95:bb:a8:72:6f:7c:8c:43:f9:e7:
67:e2:0f:2e:e5:d3:6b:51:4a:19:0c:ca:f2:b6:c0:9b:59:85:
b0:93:c8:b0:59:51:0a:9d:14:fc:f4:6d:f8:e5:8c:c3:34:87:
60:80:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:46:49 2026 by rpki-client