Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: vpbYulzlGo/A6uixsSiYLejFRcFlcjvraqKRt00lZDI=
Subject key identifier: 19:0C:43:FD:18:02:4E:88:7B:1D:E1:60:8A:2D:60:83:7C:BF:A3:1E
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019D389BF1B08760CC6050F60ECA407AEB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 10AC
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: tcqM0ihFmtRooMtt+us5FwVT7E6pBBRcbmNHnb8O41w=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f1:b0:87:60:cc:60:50:f6:0e:ca:40:7a:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=190c43fd18024e887b1de1608a2d60837cbfa31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:f9:e1:94:7b:cc:fd:d5:c8:4c:a0:f5:62:
db:27:93:53:26:a3:71:19:17:7a:af:a7:16:10:ba:
0c:31:68:ac:9f:1b:1a:39:9c:5f:1f:1c:f5:6d:4b:
cb:54:e0:c5:24:4f:82:d5:b9:7f:15:0b:67:fa:c0:
30:fd:a7:fb:f1:ff:7b:3c:c0:77:56:7e:73:ad:b2:
2b:3f:77:68:b6:69:97:9f:cb:21:1b:b1:49:bd:36:
d1:0f:40:f1:f0:ad:f8:99:60:09:0d:53:40:42:e3:
10:35:8e:7e:c0:d5:2a:39:be:22:6b:2d:33:58:70:
c9:9d:d1:e1:3e:1c:57:62:0f:e4:fa:ca:01:7c:48:
bb:80:e4:a8:7a:5d:bf:18:21:75:d5:d3:93:b9:a8:
41:8c:b5:54:84:97:33:a7:cc:67:38:0c:c9:8d:be:
2a:80:40:ff:b8:29:f3:cd:23:9c:83:39:80:70:af:
1b:85:58:d5:ef:d6:e4:c5:76:a4:0d:21:c0:83:ee:
d7:b8:0e:67:a5:6a:6b:50:a8:89:28:6c:52:8f:3c:
fa:ae:b0:2d:e1:a0:3d:1e:9f:78:83:af:49:43:d8:
05:8e:2d:71:63:f5:e4:19:8c:c2:37:b4:ad:31:1d:
2f:3c:23:fd:5d:e4:a9:71:bb:7c:2a:87:13:8f:b1:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0C:43:FD:18:02:4E:88:7B:1D:E1:60:8A:2D:60:83:7C:BF:A3:1E
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:7e:af:5b:81:35:38:9c:05:df:a0:22:8d:99:06:b3:79:
b8:db:c4:2b:59:0f:17:b7:a5:6c:04:7c:db:ef:55:59:0c:6b:
c8:f5:57:25:89:5f:ae:fc:dc:de:bd:12:c0:3e:6e:a3:91:99:
85:25:ca:47:79:6f:33:7c:da:ed:84:a9:27:86:d7:bd:01:b5:
45:af:af:7d:3b:20:32:40:2c:c2:08:13:6b:4a:20:08:b9:5e:
57:83:6b:2b:37:65:7c:1e:fc:0f:7a:9d:d0:87:73:b4:8d:56:
a2:55:d3:59:8d:03:b2:12:60:36:77:bb:87:24:9d:ed:c6:4b:
98:6e:30:1a:8c:29:00:12:62:5d:69:08:29:4b:10:6d:43:25:
f9:5d:7a:06:3b:5f:17:c1:95:13:58:2a:ff:5f:d9:4f:d1:ad:
e2:01:af:17:7f:59:d1:d5:1e:22:f2:14:93:48:71:dd:85:6c:
9d:c6:08:ee:f1:31:e3:8a:73:8e:72:83:97:ff:75:de:a0:7f:
71:d8:35:74:2f:5a:f2:a9:b3:ad:e2:2b:6e:87:cf:e2:80:bb:
0a:07:e2:48:02:02:b9:33:39:09:8e:99:10:ce:8f:e4:45:16:
a7:cd:ee:96:6c:1e:42:bf:10:35:9a:b7:dd:49:90:5d:9b:53:
98:15:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:46 2026 by rpki-client