Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: 20bDCvlHwuu17e9M0h1KXh8nf3nVJl/Gigd7oXiZKdA=
Subject key identifier: 9A:40:73:19:32:D4:35:3D:B5:CE:F7:5D:C5:0D:9F:07:53:37:DC:9F
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 019D3909FE9966DF58CC255B5342DF0BBA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:49 +0000
Manifest this update: Sun 29 Mar 2026 10:00:49 +0000
Manifest next update: Mon 30 Mar 2026 10:00:49 +0000
Files and hashes: 1: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: na5gR+6/96ah0tspyEIeI4faaCNDK0Q6Q/PVQIKu+Ig=)
2: zKzb524TG9Tb_yZBVp0kQkUxmSk.roa (hash: cnf66+cFIoDpuzcLy7f9twjeNJ6EZMaeYTno/sX1Zz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:fe:99:66:df:58:cc:25:5b:53:42:df:0b:ba:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Mar 29 10:00:49 2026 GMT
Not After : Mar 30 10:00:49 2026 GMT
Subject: CN=9a40731932d4353db5cef75dc50d9f075337dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:34:6c:c2:f1:3f:6f:52:d9:e3:49:46:4e:35:
5a:b0:db:b8:38:e9:84:d5:8f:9d:3c:c8:aa:53:08:
7c:40:e2:75:ab:6b:ea:75:eb:d3:fb:e9:a9:8f:72:
71:9d:69:2e:59:f8:be:12:6b:b6:ee:e2:73:c2:cb:
21:a4:e7:8f:a2:35:bb:0a:16:5c:d4:af:17:40:11:
4a:63:04:be:a4:21:89:d7:53:18:aa:dc:ab:30:1c:
d3:df:ce:50:16:1f:a9:ec:5e:78:22:8e:54:47:4f:
6a:eb:61:d0:f8:a4:fa:84:c6:56:d0:3b:e6:24:1d:
81:fe:13:04:58:2e:0f:11:ff:ab:88:8e:79:55:4a:
76:51:91:66:bc:76:58:cf:fd:b3:a5:6e:74:f1:8b:
fc:78:1e:9c:e1:f7:50:7d:54:4d:b9:3e:83:dd:15:
ea:31:17:f9:c1:ac:44:ed:85:2e:5e:57:d9:4d:91:
64:38:ab:9b:90:70:87:01:e6:64:de:0a:a7:b2:c8:
25:ab:93:0a:02:a1:13:1a:b0:2e:92:5c:32:1f:55:
10:78:d7:ea:f0:92:e6:94:22:5c:b1:93:eb:29:da:
ae:53:ab:ea:c0:d8:75:3e:fe:71:57:9a:a2:f8:a7:
e7:2d:f5:63:5f:4b:4a:a2:07:91:07:5a:f2:61:af:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:73:19:32:D4:35:3D:B5:CE:F7:5D:C5:0D:9F:07:53:37:DC:9F
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1f:f9:a3:59:d6:5c:85:df:f8:98:98:49:80:76:c0:27:a1:
e5:e4:dc:23:4f:b5:6e:e3:71:d0:97:3a:cc:a1:64:4c:30:11:
26:7c:36:bf:de:42:fd:f6:b1:1e:09:a9:e9:d5:b2:14:58:7d:
86:9b:1c:39:84:4d:d7:a3:ab:41:af:03:a9:f5:6f:d6:c8:7c:
51:b1:7f:90:11:80:05:a3:f3:ae:b2:48:a2:4f:a6:1d:4b:6c:
2e:f9:e0:7c:d3:c1:3e:a5:2e:5e:3c:fa:e9:6c:4c:e4:25:bc:
71:e9:51:53:4e:53:7c:b4:40:e2:73:cc:36:6a:75:23:4d:3d:
11:e8:ed:c0:1b:05:9a:6c:d4:cf:9c:f1:37:a5:11:86:77:3e:
a1:a3:6f:35:58:01:29:f6:bb:2c:3a:fc:e8:2d:25:c3:a8:4a:
98:19:d1:8d:a3:62:96:ad:3f:7f:3d:7e:90:cc:d6:d8:29:9f:
a3:b0:c0:59:d1:0a:9f:07:62:f6:d4:68:8b:d1:d1:51:d8:a9:
20:c2:2d:69:7d:d0:c5:4b:87:b2:1a:4e:93:28:bd:a7:f4:8c:
67:f3:4d:5a:d4:14:3d:98:9a:07:7f:ee:9a:c6:36:81:49:10:
b3:04:6e:c7:a1:28:29:15:f7:06:80:44:8b:e7:52:9b:0b:a1:
19:6d:15:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:51 2026 by rpki-client