Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: Vboh79QIZKKYqeu+kQnjbdZWOzRf33rTnVv6D9MjzyU=
Subject key identifier: 8D:73:3B:46:6C:B8:3B:CD:A9:4B:73:66:55:25:E7:63:95:14:D7:EA
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 019D3865711C445ED5A313296FE36BA093CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:05 +0000
Manifest this update: Sun 29 Mar 2026 07:01:05 +0000
Manifest next update: Mon 30 Mar 2026 07:01:05 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: H1aAejoj08WSNtvF3xg9QlLt9dyKpHmc7l5z/ZD1BIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:71:1c:44:5e:d5:a3:13:29:6f:e3:6b:a0:93:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Mar 29 07:01:05 2026 GMT
Not After : Mar 30 07:01:05 2026 GMT
Subject: CN=8d733b466cb83bcda94b73665525e7639514d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:45:1c:ab:ba:2a:79:9c:22:1e:e6:13:3d:
82:62:83:21:6b:8c:65:d7:7d:dd:5b:dd:fb:7d:47:
c8:db:cf:19:6d:c5:03:6e:16:da:2e:88:45:59:a1:
b9:d4:48:11:61:d5:0d:cb:90:21:de:45:82:0c:17:
34:6f:b5:73:1b:75:a4:18:de:62:b1:24:3e:21:a5:
fb:26:48:2e:60:4d:66:80:bf:cd:2a:a4:55:d9:30:
e8:88:f4:bb:75:f9:79:98:94:18:3b:11:3d:14:38:
d4:c3:c4:b3:33:93:dc:94:82:25:e9:be:dc:54:47:
73:d7:8b:ba:26:81:88:db:cb:92:64:17:44:6b:d4:
9f:81:60:dc:19:51:1f:ff:b0:b9:a4:db:3f:a0:0f:
31:3d:6e:9d:53:99:b4:04:a5:9c:e8:e1:f5:d0:12:
d3:65:d4:10:3c:33:2d:36:b1:33:d6:68:72:42:b9:
41:5e:3e:d7:00:51:78:d3:7f:d7:12:94:fb:cb:d8:
88:8b:ab:aa:47:95:c1:90:cd:52:f5:3d:31:c2:8a:
36:55:1b:f9:bc:f3:53:15:a9:65:18:4c:e0:a1:a7:
07:b9:58:2a:b0:0d:74:31:51:69:3b:6f:01:78:e0:
cd:50:c5:8d:34:d1:b4:d2:4a:54:c6:db:6f:37:27:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:73:3B:46:6C:B8:3B:CD:A9:4B:73:66:55:25:E7:63:95:14:D7:EA
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:1b:77:b9:8c:bc:54:69:fb:a0:ed:10:38:d4:a8:25:32:
1f:34:ee:7e:9c:05:5f:05:0e:17:87:8d:40:c4:83:2d:20:0a:
3d:7f:9e:f2:d6:fc:ba:f0:58:94:df:52:b6:70:89:f3:c9:7d:
cb:fc:be:22:4d:b6:e3:62:cd:06:fa:55:bb:10:36:7d:b4:23:
80:e7:e4:e2:d7:0a:c9:cd:87:b1:a0:56:f7:f6:2d:a4:71:d9:
68:f0:54:27:f8:c6:7a:82:6c:22:b6:71:3b:ad:41:24:af:49:
13:8f:ce:53:c7:36:9d:85:57:41:16:ab:4e:d6:39:00:b7:70:
aa:2f:c7:de:a2:9c:db:f2:16:1e:6b:0b:dc:dc:9c:63:7f:93:
a3:91:0d:41:62:71:b1:22:25:65:4b:db:21:63:56:5b:fc:9c:
07:32:8d:37:2b:6b:9a:1f:3f:71:d8:2a:11:df:ec:82:1e:b2:
87:d5:2c:56:88:6b:25:49:9c:15:47:4d:71:ca:d3:f3:16:38:
c4:d9:36:2e:7d:59:a9:63:65:89:1b:a7:5b:8a:cf:9e:b5:73:
3b:40:d8:16:00:f4:b0:9d:c4:3a:8c:1f:c1:b8:25:cc:2f:00:
a4:44:64:10:e8:8f:f3:50:af:be:35:dd:2c:9e:0a:46:4d:6f:
7e:6c:7c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZXEcRF7VoxMpb+NroJPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGIzYWQ4NzVmNzYyNWM2MzkyMzY1OWYxNDI5NThkYjc4
NzhhMzIwHhcNMjYwMzI5MDcwMTA1WhcNMjYwMzMwMDcwMTA1WjAzMTEwLwYDVQQD
Eyg4ZDczM2I0NjZjYjgzYmNkYTk0YjczNjY1NTI1ZTc2Mzk1MTRkN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIRFHKu6KnmcIh7mEz2CYoMha4xl
133dW937fUfI288ZbcUDbhbaLohFWaG51EgRYdUNy5Ah3kWCDBc0b7VzG3WkGN5i
sSQ+IaX7JkguYE1mgL/NKqRV2TDoiPS7dfl5mJQYOxE9FDjUw8SzM5PclIIl6b7c
VEdz14u6JoGI28uSZBdEa9SfgWDcGVEf/7C5pNs/oA8xPW6dU5m0BKWc6OH10BLT
ZdQQPDMtNrEz1mhyQrlBXj7XAFF403/XEpT7y9iIi6uqR5XBkM1S9T0xwoo2VRv5
vPNTFallGEzgoacHuVgqsA10MVFpO28BeODNUMWNNNG00kpUxttvNyf9zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1zO0ZsuDvNqUtzZlUl52OVFNfqMB8GA1UdIwQY
MBaAFIrbOth192JcY5I2WfFClY23h4oyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUt
ODg1YmM1NGRjZTYyLzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUtODg1YmM1NGRjZTYy
LzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbYbd7mM
vFRp+6DtEDjUqCUyHzTufpwFXwUOF4eNQMSDLSAKPX+e8tb8uvBYlN9StnCJ88l9
y/y+Ik2242LNBvpVuxA2fbQjgOfk4tcKyc2HsaBW9/YtpHHZaPBUJ/jGeoJsIrZx
O61BJK9JE4/OU8c2nYVXQRarTtY5ALdwqi/H3qKc2/IWHmsL3NycY3+To5ENQWJx
sSIlZUvbIWNWW/ycBzKNNytrmh8/cdgqEd/sgh6yh9UsVohrJUmcFUdNccrT8xY4
xNk2Ln1ZqWNliRunW4rPnrVzO0DYFgD0sJ3EOowfwbglzC8ApERkEOiP81CvvjXd
LJ4KRk1vfmx8YQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:16 2026 by rpki-client