Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
File: Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft (raw, json)
Hash identifier: AbdrxxftdfK5U85/if5UY4lGsiGWjjEUQwaxHkuiexM=
Subject key identifier: 49:F2:BE:1C:92:D0:21:5D:2D:D3:57:8B:3B:21:AF:46:B1:0B:5F:A2
Authority key identifier: 22:37:F6:25:70:E5:0A:20:23:62:CB:60:99:F9:35:1C:F1:66:08:05
Certificate issuer: /CN=2237f62570e50a202362cb6099f9351cf1660805
Certificate serial: 019D3909E64497127C70D827B214E6DA8EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijf2JXDlCiAjYstgmfk1HPFmCAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
Manifest number: 1B
Signing time: Sun 29 Mar 2026 10:00:43 +0000
Manifest this update: Sun 29 Mar 2026 10:00:43 +0000
Manifest next update: Mon 30 Mar 2026 10:00:43 +0000
Files and hashes: 1: Ijf2JXDlCiAjYstgmfk1HPFmCAU.crl (hash: Kt4b/u2B8JM66zAfX3ZDpcLl1CL8TY34E0RghGCuEQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijf2JXDlCiAjYstgmfk1HPFmCAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e6:44:97:12:7c:70:d8:27:b2:14:e6:da:8e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237f62570e50a202362cb6099f9351cf1660805
Validity
Not Before: Mar 29 10:00:43 2026 GMT
Not After : Mar 30 10:00:43 2026 GMT
Subject: CN=49f2be1c92d0215d2dd3578b3b21af46b10b5fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:19:e9:ef:03:c7:b7:42:c0:5a:ef:a8:b3:cf:
77:6d:36:fe:9c:d6:99:28:e2:f8:dd:60:91:5c:9a:
c8:22:bb:50:c8:d8:d5:ff:60:d1:75:25:ac:6d:35:
cc:53:fd:0d:c6:4b:ad:d9:ba:37:e2:18:91:10:fd:
f7:13:a4:50:69:7c:0d:df:2f:17:66:70:1e:46:a2:
d5:ab:ac:71:2d:1e:a2:f4:d3:60:00:52:c9:a8:68:
61:97:d1:3e:b0:95:1c:69:34:61:01:a4:e1:1d:37:
d9:d1:a7:ac:b9:34:f8:96:e5:e8:2f:e4:1a:90:90:
47:92:5e:f2:15:e0:18:bf:ba:0a:46:8a:9a:16:21:
af:4b:0c:f7:1b:98:fe:0a:50:be:6f:bf:a0:2b:9f:
fa:f8:56:26:0b:a9:52:1a:a9:fc:ce:4a:ab:13:da:
bc:59:72:8e:f4:37:6a:6d:26:5a:89:a1:cc:14:f9:
83:db:52:d7:73:db:23:dc:1b:55:cc:e0:92:e5:51:
f4:ae:da:91:15:80:fe:e5:c2:cc:cd:cc:1a:be:9e:
c0:95:5f:a9:aa:fc:ba:99:98:6a:91:71:2c:91:49:
54:99:32:70:ac:1b:15:8e:c5:e2:73:93:ec:c7:62:
0f:89:95:bf:e9:15:aa:9a:01:47:c7:c2:3f:70:c3:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F2:BE:1C:92:D0:21:5D:2D:D3:57:8B:3B:21:AF:46:B1:0B:5F:A2
X509v3 Authority Key Identifier:
keyid:22:37:F6:25:70:E5:0A:20:23:62:CB:60:99:F9:35:1C:F1:66:08:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijf2JXDlCiAjYstgmfk1HPFmCAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/45301e-8f63-460b-b31a-15662aaff0d3/1/Ijf2JXDlCiAjYstgmfk1HPFmCAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:35:37:73:68:24:5e:39:b9:d1:17:75:16:c2:22:49:fd:
78:78:67:81:a1:9a:1d:2c:9f:3c:5f:89:39:e6:84:58:ce:6f:
16:c3:41:77:2c:0e:57:90:be:28:f0:ff:11:00:8c:c3:57:01:
2c:38:95:d6:a9:d3:c8:cc:33:a2:d8:c9:44:a9:58:e1:32:b0:
18:1e:c1:aa:39:7e:3e:7c:1e:a7:e9:44:87:cc:6c:02:14:21:
2b:f3:db:4f:2e:8c:e4:d6:7c:2d:c6:37:7e:4e:b8:02:44:f7:
8f:bb:3e:17:54:4d:52:f4:c1:16:2a:9e:bc:b9:a8:fd:3b:8a:
7e:12:1b:3d:61:5f:ca:6e:bc:97:44:97:32:18:58:49:9c:d8:
d1:b9:21:c0:cf:bf:56:a4:ce:fb:20:7f:20:58:7e:99:51:c4:
0e:ab:68:7b:e3:fd:9f:13:f6:3b:69:ec:4f:7c:e8:51:71:31:
2a:93:0a:d2:ab:19:f4:e7:f2:61:e3:c9:65:b7:fd:41:51:b7:
90:2e:48:27:9a:29:06:ee:03:82:3f:39:03:f8:e2:e7:93:18:
e8:2b:bb:39:47:7a:62:77:9b:4c:20:e4:b0:87:14:1e:34:89:
a1:9a:7d:46:37:c2:d7:ae:45:7d:38:88:f3:ca:91:5c:fd:2d:
e9:fe:a8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:12 2026 by rpki-client