Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: foYSCOPpOrE9YHAZsLANSjHII2oFxex8hHREF76v85k=
Subject key identifier: CA:28:49:A9:3E:59:77:A6:9B:A5:51:A2:42:EF:C6:84:E0:A0:7F:A1
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 019D389BC383CDDD3D09BA583D88631919AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:25 +0000
Manifest this update: Sun 29 Mar 2026 08:00:25 +0000
Manifest next update: Mon 30 Mar 2026 08:00:25 +0000
Files and hashes: 1: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: Qg/6fpV2TqS5//+G4Srkamjm5jJawmE4Or0/jV5H6vw=)
2: unrdcZbrdHFGkYI2NvQ0Uuo8iuQ.roa (hash: CvLqQM5rLi1faTdwSBeTlBwQCQBbSATUvwP2tHqg/FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:c3:83:cd:dd:3d:09:ba:58:3d:88:63:19:19:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Mar 29 08:00:25 2026 GMT
Not After : Mar 30 08:00:25 2026 GMT
Subject: CN=ca2849a93e5977a69ba551a242efc684e0a07fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3c:8a:ce:f0:75:b5:ba:3c:a8:92:9b:df:a8:
7c:05:bb:3c:b7:98:5e:38:29:70:30:aa:79:b2:15:
ef:a1:ec:d5:43:4c:d3:fa:5f:d8:84:8d:e3:6a:94:
20:c2:96:98:42:49:07:f7:42:f8:38:bc:fa:3c:31:
24:93:45:f6:94:b8:a8:8b:2c:16:39:fc:09:11:08:
b1:42:c2:44:e9:f8:99:b2:0f:61:55:62:1b:b1:0d:
94:6c:8a:0a:e3:ac:9e:e8:31:2f:5d:fa:b7:45:06:
e0:95:bf:32:b4:62:56:32:4a:fc:e9:e4:60:ac:58:
5d:bf:5c:10:61:c4:ac:7f:b6:8d:d5:2c:ae:08:ca:
35:0d:72:0c:8e:e1:b4:1b:5b:e6:0f:f3:90:41:a0:
ae:19:e1:84:06:6a:df:f2:e9:aa:21:c7:61:5a:5d:
79:eb:38:36:ee:f9:50:6b:e1:be:26:3d:5f:21:5c:
07:0d:b3:fe:87:2f:76:5d:b7:37:d1:80:15:a3:3d:
e4:38:7c:36:c0:cc:e6:01:f9:32:61:2c:7f:f2:7d:
45:6d:30:c9:16:a8:c9:87:47:59:12:49:18:99:23:
87:3d:e6:dc:f6:62:b1:59:83:75:ab:07:59:41:b0:
68:63:f1:a0:90:55:05:2d:a3:15:e5:ae:6b:79:b1:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:28:49:A9:3E:59:77:A6:9B:A5:51:A2:42:EF:C6:84:E0:A0:7F:A1
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:81:04:f7:ad:8a:cb:94:11:37:8c:98:41:30:5c:a9:6c:
62:10:32:ed:a9:be:9b:5f:51:f4:92:27:59:46:c8:bb:99:9b:
0f:15:27:71:77:f5:53:ad:07:b4:31:1b:0d:86:cb:04:41:bd:
e3:a1:3f:f2:ac:f5:51:53:dd:c2:09:81:b4:05:45:75:c1:0b:
48:b0:76:80:82:58:ae:46:4f:d0:e2:d4:23:37:b6:8d:82:6e:
f7:79:0c:0e:f2:f2:bf:59:61:2c:21:6d:73:a8:e2:82:a6:cc:
8c:ed:8f:dd:04:f2:cd:14:3f:63:0f:47:69:98:26:4a:f6:01:
34:ce:71:14:2f:52:dd:d1:7a:d2:a9:55:f7:a1:25:f2:be:5a:
ca:4c:03:ad:d6:bb:73:09:2e:61:45:f4:97:b2:81:e2:c6:db:
da:04:ce:f2:89:d7:94:59:dc:f3:1b:a8:78:a4:2b:0e:ea:54:
e5:5f:16:af:a8:01:38:58:db:d9:9c:5f:49:3f:31:8b:9d:3c:
bc:09:b9:f8:9a:cd:63:00:eb:52:5d:29:0f:9a:3b:44:a0:0e:
f4:7b:3f:f0:84:f3:66:0b:dd:43:d9:3f:11:11:ab:18:2d:30:
f8:e9:35:58:7b:78:57:be:e8:1a:3e:88:f1:6a:ea:e5:2b:92:
5c:ec:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:39 2026 by rpki-client