Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: RqCiC6bqNrEfeN7MHpzre6ndY++PUfpsmdHaezxokDs=
Subject key identifier: 18:D4:64:FF:2F:9D:14:CD:BE:E3:FC:7C:B8:5A:E4:4F:E8:AE:9A:38
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019D38D3611A5066ADC0E5FF4FEADE97FC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: WQDgaFhbLuCg+sjiUbyfLbSdN5RA3HJpWbY7ALZAE+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:61:1a:50:66:ad:c0:e5:ff:4f:ea:de:97:fc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=18d464ff2f9d14cdbee3fc7cb85ae44fe8ae9a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:cf:32:a2:23:25:83:93:9d:bc:39:83:fa:
4a:a3:fa:d9:34:23:00:05:55:6a:72:e4:a9:ac:01:
c3:3c:f3:27:5d:ec:5d:11:b1:f9:e0:7c:bc:7e:e5:
59:0b:1c:5d:0b:f3:03:b8:61:52:16:31:ff:58:66:
46:b0:45:9d:bf:ba:1f:70:72:68:4e:e7:d8:03:65:
54:35:24:bb:0d:1a:5d:c1:3f:42:ac:c5:f2:3b:3a:
51:d4:1a:ec:2d:a0:b0:9b:95:85:fc:2e:5d:10:e5:
45:04:2c:5c:43:55:30:e5:bd:71:b4:6d:9f:be:9d:
68:a0:5f:93:c5:52:33:52:30:fd:30:15:9f:25:df:
c4:20:a6:3b:20:f1:6b:40:4c:eb:85:0f:0a:57:6f:
a5:c0:e2:e5:28:9e:c3:f6:58:26:12:a5:55:01:d0:
45:f9:fe:85:f8:56:32:3f:bd:4c:36:09:8a:65:98:
cd:9a:05:09:27:9f:e8:a0:e1:37:3f:bb:92:5d:26:
0e:70:13:e4:fc:75:1a:98:84:a2:d7:9a:66:66:76:
27:7a:ac:b1:b0:fe:4a:6b:82:f1:9d:8a:c3:5f:ac:
0c:68:e3:91:57:bc:3f:31:13:de:42:75:ab:c0:cb:
a6:38:99:be:48:08:18:4d:b1:6b:7b:1a:48:62:48:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:64:FF:2F:9D:14:CD:BE:E3:FC:7C:B8:5A:E4:4F:E8:AE:9A:38
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f9:ee:4c:ff:16:4c:c4:00:3c:3b:7d:f0:76:45:1a:e5:58:
c6:71:d0:9f:fe:ca:6b:7d:c6:b7:67:eb:7c:91:95:8c:30:f8:
ac:12:25:56:36:b0:e7:94:fd:8b:75:51:7d:fd:98:5f:e3:9e:
1a:fd:55:11:b9:b0:1d:f5:8d:cf:61:7c:74:38:ae:94:19:07:
7c:96:3e:84:bc:2a:4d:54:e5:ce:36:a4:5d:88:52:d3:1a:0e:
db:30:2d:d2:37:1f:5f:0b:2a:9d:d8:11:ac:03:c5:a0:e9:4b:
c0:2b:f3:b7:9e:23:7f:64:60:f8:2a:56:6b:91:5f:9f:1e:96:
9b:9f:f4:3a:0f:e6:1d:80:8f:0f:b4:5f:a9:e7:33:bd:36:a5:
5f:03:50:4d:f9:3d:56:3d:67:9a:85:09:11:6e:44:0f:27:bc:
0b:c8:8a:3e:37:0a:cc:04:c0:a0:c8:e3:9c:ec:f8:68:94:1f:
e1:09:bd:de:f2:91:a5:e9:91:17:28:07:4e:f2:71:ef:57:0e:
8f:05:93:0c:3a:dd:49:90:39:aa:a4:f0:56:d7:22:d8:83:5a:
35:d7:4d:1d:f4:5e:c2:32:f3:45:ba:85:8c:be:dc:5e:eb:61:
eb:c9:08:0e:ef:19:00:72:00:37:a2:0d:d8:ca:e6:0f:ef:27:
d2:f9:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:29 2026 by rpki-client