
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: af6Q3MzGGAXP9gB/n8GkEwc/CKN5W0rrf3Qg/4zcC6A=
Subject key identifier: 53:35:0A:9A:4E:0A:11:22:93:D3:35:30:A4:2F:81:5F:23:12:57:C1
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 019D31875E87EBEC41C19A1B820F51A70C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 188C
Signing time: Fri 27 Mar 2026 23:00:48 +0000
Manifest this update: Fri 27 Mar 2026 23:00:48 +0000
Manifest next update: Sat 28 Mar 2026 23:00:48 +0000
Files and hashes: 1: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: POFk9zyOc+TbRGcQgRz5xCBNWgxFkmjvpBTz8ANv3c8=)
2: eMGDdbWRH5Z7Ggcz_C-UuWgytSA.roa (hash: yeQz6KJsUVMwbssIQpUY/HsteXeV6YTAPt+B2xHK1j8=)
3: jgrgGJ7rf2LX0XINO9c30QdaUWA.roa (hash: A76RxsC50O0v/gwBJ9yUpgGn/DjKbkzrJUvq58cmXPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:87:5e:87:eb:ec:41:c1:9a:1b:82:0f:51:a7:0c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Mar 27 23:00:48 2026 GMT
Not After : Mar 28 23:00:48 2026 GMT
Subject: CN=53350a9a4e0a112293d33530a42f815f231257c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:55:bd:e4:8b:91:eb:0d:74:a3:81:46:9f:
7d:6d:15:0d:76:fb:e0:fe:d3:77:74:96:b6:dc:ca:
cc:ca:de:bb:3e:31:b3:38:75:1f:3e:9b:4b:38:b3:
c7:62:9f:c7:be:4f:26:7a:1d:20:98:93:32:8b:38:
6a:7f:c3:5a:64:d2:be:67:ff:bc:55:f3:8d:53:d3:
4a:7f:ed:f7:50:b4:9f:3f:b2:ee:77:d8:5d:20:71:
0b:91:c2:31:46:c0:0d:ac:7a:3d:d4:d4:34:32:43:
77:41:36:2c:64:b3:c8:d0:38:8c:62:c8:ee:e1:5a:
c8:d0:08:56:2b:de:c0:b6:2c:c8:1e:8a:61:b5:c9:
94:0b:21:39:a4:ab:28:a7:5a:b8:ac:17:e7:05:b8:
d6:81:36:21:d1:db:53:7e:f6:de:14:6e:0b:f3:3c:
2d:7b:c3:30:59:26:5a:02:d7:eb:c9:1f:e3:6a:35:
e8:e2:9f:88:65:7c:b6:f9:2a:cc:d7:3d:3e:54:67:
bc:d9:73:e7:29:76:5d:2c:f4:30:c5:bf:77:e2:f1:
fd:d7:3e:54:47:7f:e6:fe:4a:d0:ae:e2:12:56:b9:
93:86:22:1c:f8:62:4a:cb:96:fc:4f:b6:55:11:04:
0c:fc:af:f1:ec:d6:a0:df:81:b7:c3:39:62:2f:63:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:0A:9A:4E:0A:11:22:93:D3:35:30:A4:2F:81:5F:23:12:57:C1
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d5:93:6d:6a:0d:40:db:e6:23:20:80:6e:0e:f6:4e:39:b0:
36:6a:bb:8d:f3:70:24:d8:50:34:3c:85:9a:8e:44:e3:3c:72:
1f:ed:0a:41:79:36:4b:6c:29:87:1e:a1:36:bf:61:7d:e2:bb:
79:fd:bd:2a:db:60:3d:37:e3:a6:af:eb:d3:11:1c:3a:d0:0a:
25:a2:7e:f5:c3:6e:72:2e:a1:26:07:90:b6:ed:ba:34:cb:fc:
a2:67:8e:df:2d:c2:11:b3:9b:be:80:c0:09:3c:62:4c:a4:7d:
f1:1f:75:81:80:1d:a6:75:52:5d:09:7b:0d:fe:ae:3e:61:a4:
d4:90:61:7d:db:68:3b:14:62:2c:cc:b2:ce:a6:f2:8a:47:b4:
d2:35:4e:a7:38:17:9a:47:ca:8b:37:14:2a:d8:58:46:ef:78:
fb:6b:c6:f4:79:fb:be:ac:f0:97:05:56:9a:63:b1:cd:00:6f:
ee:9c:5b:59:dc:a8:d2:e8:3f:d1:97:eb:c9:19:1f:b2:34:c8:
63:f0:80:ab:6f:f2:e5:3a:13:00:9a:96:85:dc:14:5f:37:2c:
ef:20:0f:f3:e3:36:a6:d0:75:4e:e6:1e:c2:f3:01:b4:db:ec:
24:91:56:41:2c:bf:15:50:3d:f0:52:ce:b9:b7:38:58:af:36:
34:cb:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:32:10 2026 by rpki-client