Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: aSGfnEPeGdldEh5gFcWsHu+6WG7D93QLNQvSku6S6hM=
Subject key identifier: FF:EF:6D:A3:66:D3:D9:7B:92:6D:92:51:A4:2F:7A:CA:B1:18:3C:D1
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019D375289FDD4A2B836050500A040FE87EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 02:00:49 +0000
Manifest this update: Sun 29 Mar 2026 02:00:49 +0000
Manifest next update: Mon 30 Mar 2026 02:00:49 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: ox88defQusXLY2GvXAed6yRCLx8urvAIMc5NdnG/hrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:89:fd:d4:a2:b8:36:05:05:00:a0:40:fe:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Mar 29 02:00:49 2026 GMT
Not After : Mar 30 02:00:49 2026 GMT
Subject: CN=ffef6da366d3d97b926d9251a42f7acab1183cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:0a:9a:66:98:b0:cc:01:77:f8:ab:4d:5f:
05:d6:04:1c:34:2f:20:7f:5f:d0:59:07:5e:06:26:
4d:82:9a:63:90:55:2b:62:07:4f:69:0b:cc:2b:2d:
cc:3a:7a:74:60:97:68:0f:08:7d:16:ed:39:77:8b:
5b:72:aa:65:d8:1c:87:6a:cc:c1:e8:f2:b8:3f:14:
86:31:11:6d:be:3e:e1:f5:33:67:df:cc:66:99:ec:
e5:f4:de:7a:7e:e0:e6:36:84:50:cb:b0:23:f2:21:
53:08:05:a7:68:52:87:38:85:6e:a2:2a:28:06:dc:
7a:2e:cb:8c:8c:24:67:4b:1f:33:55:9a:63:67:19:
f3:a6:18:7a:08:01:87:b8:de:81:c5:82:dc:50:a9:
60:8d:71:e1:8c:92:bd:5e:d1:7c:d1:6a:ad:12:56:
45:49:7c:69:8a:32:e2:31:9a:3e:76:86:ad:a0:aa:
6a:68:f8:6b:69:de:a6:99:46:97:9a:7b:31:c4:02:
25:93:18:27:02:bd:9d:fd:eb:65:fe:af:7d:b4:9c:
42:24:98:87:5d:e9:c4:40:83:12:87:a3:a2:3c:f7:
3e:85:a1:00:8f:71:cf:e4:cb:65:dd:25:bc:81:30:
19:71:40:c2:10:d6:fd:da:7e:56:e6:bf:25:93:06:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EF:6D:A3:66:D3:D9:7B:92:6D:92:51:A4:2F:7A:CA:B1:18:3C:D1
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:50:00:ef:27:0d:b4:19:78:5c:9e:86:bc:3e:b8:59:53:fe:
dc:5b:1d:30:d7:c1:47:4f:aa:dc:6b:0d:fc:d5:01:31:8c:20:
2b:c4:a3:cc:bd:cd:09:1b:22:46:8b:1d:e1:c4:83:24:70:1b:
8b:c4:40:9e:fe:7a:e3:a5:19:8c:3d:20:91:57:43:7f:34:d1:
37:5c:9e:4c:47:c8:2e:04:ed:57:20:9c:1a:f5:c0:99:8e:37:
a2:e3:a7:d3:c2:80:9e:24:27:1a:de:ad:e5:cc:9b:13:99:20:
ae:ad:07:8a:b6:2d:38:56:59:f7:f3:ad:e5:80:69:4c:9b:aa:
eb:d2:67:52:b0:8f:c1:b7:4b:99:59:f2:6b:74:d1:84:94:b6:
fe:4b:65:78:27:02:95:b5:1a:87:ad:1c:ea:bf:c6:ee:27:cc:
62:be:26:8f:01:fb:81:ae:34:9a:b3:2f:85:c0:d2:f1:24:ba:
c5:32:68:0d:05:8c:81:ff:1c:45:88:22:95:95:e8:9c:b8:dd:
bb:6c:35:29:a4:f4:d6:fa:e7:16:ad:3f:20:71:39:f6:ee:7a:
1a:2c:17:5b:ba:fe:28:1e:8e:99:57:89:96:1e:6e:02:23:c6:
1c:80:82:a3:b8:a1:a6:98:01:89:fa:6d:19:45:18:f2:9a:72:
cf:97:a0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:27 2026 by rpki-client