Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: fpzf+4ORU62cPT8Yk4cAQuVRAV+ylv07r8ZXsUU5gHA=
Subject key identifier: AB:69:FB:7E:88:1D:7E:AD:5F:89:DE:FA:87:65:06:3A:57:30:1D:83
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 019D39AF0F8DBE84486B195CADCE4881D042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:01:07 +0000
Manifest this update: Sun 29 Mar 2026 13:01:07 +0000
Manifest next update: Mon 30 Mar 2026 13:01:07 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: B8C16U7YGeJeJaZys46syl5iPvIu0gePFmgd+Xh/PcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:0f:8d:be:84:48:6b:19:5c:ad:ce:48:81:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Mar 29 13:01:07 2026 GMT
Not After : Mar 30 13:01:07 2026 GMT
Subject: CN=ab69fb7e881d7ead5f89defa8765063a57301d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:3f:e5:5a:61:c1:ae:94:ac:ad:c1:99:0e:
8d:c0:04:bd:53:d5:c7:89:90:86:03:83:a7:12:83:
ac:78:1e:0f:e2:1d:11:ee:9b:bd:a4:55:9a:ab:62:
5c:37:18:c6:69:06:e4:4e:3a:73:c0:3a:cb:4e:6a:
17:f7:6d:a8:1e:5b:06:c3:b9:b8:bb:ae:70:9f:d8:
41:48:cf:c0:7e:2d:23:c6:e9:47:d9:b8:de:22:f5:
b5:44:9d:96:4d:f0:62:f1:0c:98:22:b3:d3:9f:ce:
1f:da:cf:d6:ac:57:00:ef:a6:16:32:cc:b4:76:71:
f6:61:02:3a:e8:46:0c:8f:0b:7b:5f:84:33:ec:14:
09:e4:2e:b3:89:63:73:44:9f:2c:cf:3f:c0:7e:3e:
15:f9:b7:54:ed:ff:e7:b8:d4:f5:67:dc:eb:7e:e5:
27:13:1c:49:e3:7d:8a:09:fc:93:e1:c7:ed:c8:5d:
a0:2c:d2:bd:5d:58:8a:06:2c:e2:0e:d3:c4:5a:c2:
50:e0:1a:f0:a0:06:6e:7c:04:bd:49:82:14:ec:f1:
38:b4:f2:61:03:ad:10:07:59:1e:24:d7:81:cf:a0:
08:ec:7a:1a:ff:f7:e4:59:46:80:ce:a9:85:70:02:
66:b3:cc:6e:3d:48:0b:81:08:a6:b4:00:d2:d6:b3:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:69:FB:7E:88:1D:7E:AD:5F:89:DE:FA:87:65:06:3A:57:30:1D:83
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:b7:30:12:17:14:6f:42:83:dd:e7:a1:ca:dd:6b:6d:20:
64:aa:d0:34:ed:aa:71:75:c8:c2:24:2c:1a:14:03:33:44:d0:
5d:9e:a6:0e:47:9a:78:49:29:86:90:2e:17:a9:5f:b7:07:fb:
e3:71:0d:4d:e2:70:fd:58:cf:7e:fc:64:e9:27:17:6d:9c:3a:
ac:95:71:46:36:c8:07:d4:cd:29:d6:2a:57:09:4d:34:a9:57:
05:65:8f:75:9e:a4:fb:85:9b:42:d3:cf:23:0c:48:43:e5:1e:
e3:2b:6c:00:39:38:fe:9d:92:2b:ac:45:f3:13:7c:56:db:06:
a9:47:5f:ee:84:53:ba:03:1e:79:ad:37:71:35:11:82:9c:1f:
a9:a0:a2:ac:30:6d:40:74:34:42:8a:6b:f4:0e:e3:3f:2c:d3:
15:b8:92:1e:30:3e:5f:40:8a:e4:5a:e8:0d:9a:15:ff:09:e9:
c1:fb:76:bd:48:3c:a8:7e:1b:5b:df:e6:76:56:36:2d:00:46:
ea:7e:49:7a:2b:d7:dc:78:f4:b3:0b:8d:a8:c0:6a:d4:dc:c8:
3f:11:25:05:df:cf:85:89:d3:af:69:b3:8a:86:83:96:61:ba:
b2:01:68:40:c9:d7:f3:c5:3f:79:4e:00:2d:10:e0:6c:44:ee:
05:bb:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:50 2026 by rpki-client