Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: 5/Ywhy+1gx85D8oz9aVIWydA0vM1vN/Cfx0xfjrKNNQ=
Subject key identifier: 27:02:47:D2:88:1B:A4:BC:D7:3C:CA:27:BC:88:47:FE:3F:0C:3E:17
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 019D38D2B5A19B8B2EB0E0FD6DA015A3CECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:00:26 +0000
Manifest this update: Sun 29 Mar 2026 09:00:26 +0000
Manifest next update: Mon 30 Mar 2026 09:00:26 +0000
Files and hashes: 1: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: WP5+eOoxhWsDS0dQ1vy0kUm5J9w/sQFZQhTeiBdgiuo=)
2: n90xmr_CM6O4WDRtYmfgJfxxrvA.roa (hash: lPtn9C/LBef80I4Gcyice5R+gf5Md1ot7qq45wVZu/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b5:a1:9b:8b:2e:b0:e0:fd:6d:a0:15:a3:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Mar 29 09:00:26 2026 GMT
Not After : Mar 30 09:00:26 2026 GMT
Subject: CN=270247d2881ba4bcd73cca27bc8847fe3f0c3e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:88:ae:e1:42:b7:57:d7:5d:41:60:ee:7c:
55:73:82:94:17:d2:e5:83:4e:48:56:30:43:e5:52:
2a:ad:a7:25:36:36:98:1b:db:aa:43:aa:d0:34:01:
89:8d:9c:7b:90:36:71:40:e3:82:3f:35:5a:5c:b7:
e0:bf:e3:fd:01:16:d8:a6:63:a8:fb:cd:a4:60:0e:
72:de:cc:d1:03:7d:f2:10:8e:95:17:dc:21:ee:1e:
7a:d5:f8:13:f3:b2:44:2e:20:64:65:c1:66:ac:70:
3b:47:90:06:db:3d:26:e7:a3:e9:04:bc:02:41:fe:
20:21:30:51:d8:56:1e:e9:35:55:6f:c3:5c:1b:45:
83:a5:50:18:1f:83:05:94:72:5d:34:71:0b:4f:22:
72:40:81:89:63:7d:a4:42:8b:e1:a7:be:24:34:25:
62:d3:05:1e:13:5b:d7:21:3c:2e:84:a0:b7:bc:f4:
6b:89:84:9c:23:bf:8d:bb:a2:02:37:08:07:c9:64:
51:2b:9f:a4:c0:a2:b5:48:88:6f:36:e4:4d:fe:77:
ff:38:b4:f0:d3:61:35:37:2a:b2:09:31:49:e0:9b:
2a:74:76:c3:47:f8:ab:74:b6:aa:de:2e:ff:e8:7a:
39:12:33:41:48:b1:09:9d:1e:7c:0e:57:40:c5:9b:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:47:D2:88:1B:A4:BC:D7:3C:CA:27:BC:88:47:FE:3F:0C:3E:17
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4b:a2:ed:ce:d5:9f:a1:e0:ca:bb:d3:1a:78:87:56:b6:e9:
2e:b2:fb:75:45:f0:9c:22:82:a3:73:86:05:c7:d8:25:5c:0c:
70:78:db:99:99:36:c4:b3:fb:1e:2b:e7:5f:39:10:58:aa:4d:
53:92:b8:80:1b:04:9a:de:de:a7:cc:61:77:4e:3a:dc:5a:fe:
46:9c:b2:1a:a8:2c:91:93:26:92:a3:43:9f:8e:c3:22:4d:57:
c7:f2:cb:54:18:41:59:ad:d4:43:75:02:b6:50:cc:4a:de:20:
8a:d8:3f:2c:48:c2:04:55:1d:9b:22:92:f4:34:53:39:68:fc:
14:92:d7:a4:8e:39:93:1f:5c:71:e9:f6:8f:b7:fa:49:69:b0:
e1:d0:e1:03:7b:e4:36:65:03:b1:74:35:be:12:b7:3b:16:4b:
e6:71:da:fc:89:84:e7:3a:0d:17:e5:b2:28:46:a8:cd:7d:5c:
9b:f8:c8:3d:c2:29:03:7d:21:66:67:17:27:cb:9f:49:0a:5e:
d0:8d:45:e8:be:1b:6e:fb:77:0c:f8:0e:db:5a:ab:e1:c4:c1:
af:c5:6a:85:ee:66:fb:c5:07:12:9d:63:b5:51:4a:d2:3f:22:
ff:cb:16:4c:c9:73:42:fa:ca:be:0c:29:1c:bd:c9:48:49:e8:
13:83:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:32 2026 by rpki-client