Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: pIDRAbUkj2ZFI1yzEhQKNrqr9RW9e/BR1QLJPh40ZHQ=
Subject key identifier: A1:FF:17:51:C6:AD:D1:5E:DE:F0:87:79:6C:82:7B:A7:13:E8:54:04
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 019D37C0CA17C6DB0374076FDBA686C3355E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:14 +0000
Manifest this update: Sun 29 Mar 2026 04:01:14 +0000
Manifest next update: Mon 30 Mar 2026 04:01:14 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: dolL7HUj4I16mMxrVqWQ6/XhN/Fp5rXvNKxch2OTXcE=)
2: vlgEFLVkNwRtCEx7sTNLVkmYtlg.roa (hash: +zusmP86eI1NBAkkNvI1Gm9fd+tKP132pkvvT3BYBhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:ca:17:c6:db:03:74:07:6f:db:a6:86:c3:35:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Mar 29 04:01:14 2026 GMT
Not After : Mar 30 04:01:14 2026 GMT
Subject: CN=a1ff1751c6add15edef087796c827ba713e85404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:23:4b:0a:25:3e:f7:a4:1d:64:ea:76:9a:
c6:5a:4e:21:2b:46:b7:86:ca:28:7f:4e:f7:6a:75:
36:18:58:a6:45:44:78:f3:69:67:7a:24:5a:a4:bb:
24:97:09:a6:30:aa:2d:58:b8:e2:19:b8:b8:de:be:
21:aa:c4:46:5b:4e:40:e9:83:52:d4:53:b7:4a:de:
31:98:78:b4:a4:0c:b8:38:31:ac:3a:58:20:13:f8:
44:13:ba:8f:01:78:c9:ba:38:c9:72:be:3f:fc:05:
54:04:11:1d:b6:89:22:30:f7:29:ea:77:ca:83:3d:
ce:c9:ea:24:4e:21:0d:c1:39:e7:ef:db:09:ee:71:
e4:be:0c:7c:fe:51:35:0e:0f:f4:00:e4:a4:65:70:
67:0b:55:3b:5f:08:49:b5:f9:bd:39:0f:6e:ff:36:
32:54:d9:31:bb:b3:13:9c:52:83:53:98:63:64:8a:
59:5c:45:da:af:bf:b5:e7:9b:4c:89:56:b5:92:db:
83:16:bc:2f:f2:26:06:1f:13:0e:7a:59:78:01:56:
60:c5:bc:80:0e:ac:31:c9:a6:5d:a1:d0:6f:d1:6f:
63:f3:95:c9:8c:aa:25:76:76:f1:2b:14:04:7e:fd:
b9:90:18:d6:9f:58:9b:3f:55:44:49:38:a7:d6:05:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FF:17:51:C6:AD:D1:5E:DE:F0:87:79:6C:82:7B:A7:13:E8:54:04
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:64:d5:13:a5:5f:9b:12:c3:81:5f:68:84:34:ee:c1:5c:
a4:35:d3:67:b0:ed:73:2d:2b:cd:8d:b0:69:c7:c6:38:84:a7:
a9:fb:ad:e5:c5:81:2a:b0:a7:5e:8f:a0:13:31:fe:a3:80:36:
8f:5c:b4:cf:74:23:6e:b3:07:b8:50:5e:72:09:a4:da:41:c3:
ad:b8:05:06:0f:4c:0f:ae:5f:4b:4f:b2:c4:d0:d9:a8:f1:c2:
1a:ce:51:a1:41:04:a1:ac:5c:ab:af:77:d1:d4:74:ed:22:e6:
dd:33:6e:d5:cb:b1:1b:2b:e4:72:41:fc:65:7d:4d:04:75:25:
d5:5f:ee:79:b4:09:32:7e:71:c6:f1:5a:85:47:04:f6:67:5a:
5d:5b:3d:0c:0c:c2:8e:07:1a:bb:f3:1a:6b:a3:1e:fc:3a:42:
86:b4:33:db:99:4a:0f:b2:bd:81:66:dd:21:6a:bc:a5:95:dc:
0a:6e:b1:06:8e:2b:b2:cc:4f:de:ff:09:0c:fe:3d:53:8a:e6:
4b:9e:16:be:2b:a7:c2:d2:dd:53:84:8b:92:8f:4e:4a:10:f4:
e6:fa:db:61:e5:20:b6:b3:96:05:86:f8:de:8f:7d:5d:fc:82:
17:be:69:44:22:ee:c2:b4:9a:d2:e5:57:9b:a6:16:c0:ad:c4:
25:fd:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:38 2026 by rpki-client