Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
File: iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft (raw, json)
Hash identifier: koUTk4qa5+yk10jEQMR6TQweZhhOWiJn0/ByYs1rZFo=
Subject key identifier: 9E:AB:4D:6F:18:03:84:29:4A:76:98:1E:84:D9:B1:8C:2F:E3:57:A0
Authority key identifier: 88:7A:38:68:65:EF:9F:87:CE:B7:97:E6:67:46:47:49:63:85:96:21
Certificate issuer: /CN=887a386865ef9f87ceb797e66746474963859621
Certificate serial: 019D397784608C24E843232F1CA812C95E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
Manifest number: 33
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: DlCDvPsLyfCovsVIAJGyN69ajpE.roa (hash: r0hFqETAQa/pmuDs8mHeKOi2RSGD3PLOmZh2GwV/DTE=)
2: iHo4aGXvn4fOt5fmZ0ZHSWOFliE.crl (hash: 6YI7fDFixpiDmw58P5WMBuuRW7bsBptAJmP3AI7BYx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:84:60:8c:24:e8:43:23:2f:1c:a8:12:c9:5e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a386865ef9f87ceb797e66746474963859621
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=9eab4d6f180384294a76981e84d9b18c2fe357a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:76:11:9b:06:3e:d1:91:44:5d:e7:2f:fe:
44:42:f9:e7:2c:94:c5:52:2b:4b:f2:ed:ea:b4:a7:
24:cd:87:44:8a:6a:cf:54:aa:55:82:6b:22:5a:74:
8a:cf:23:c5:44:d2:ba:a1:5b:a7:72:f9:1b:74:11:
41:1e:b2:20:00:f2:b2:31:40:58:66:01:97:39:cc:
e6:04:e1:29:c6:3c:c9:e9:15:bc:36:6c:cc:86:aa:
97:3c:3e:4a:5a:3a:0d:87:27:68:3e:e9:b9:a4:55:
9e:0f:f1:4a:27:62:d5:4c:1f:ab:be:e5:ff:39:ac:
cf:e6:16:12:96:57:11:8e:c4:f5:0b:dd:81:b3:4b:
1f:6e:df:41:d1:de:a4:ad:cb:c0:4c:87:de:22:bf:
f4:ad:a3:f9:c3:64:37:ad:88:3e:82:51:8d:fd:9a:
b2:52:a4:3c:62:a8:e2:2f:77:8f:c1:42:d4:52:0e:
5c:f6:06:29:72:7a:0e:4b:44:2e:74:82:9d:38:81:
e7:09:d3:56:19:1f:e4:12:64:52:54:8b:64:f6:95:
cc:d0:f3:85:a2:bf:e2:22:b1:ec:eb:ab:5b:d1:2d:
dd:f7:06:cc:0b:2b:bc:6b:41:25:ec:2b:fd:77:55:
8f:ed:04:1c:0f:e9:7c:1f:d5:a4:a1:9a:df:5d:7a:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AB:4D:6F:18:03:84:29:4A:76:98:1E:84:D9:B1:8C:2F:E3:57:A0
X509v3 Authority Key Identifier:
keyid:88:7A:38:68:65:EF:9F:87:CE:B7:97:E6:67:46:47:49:63:85:96:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d06961-d6c3-4a19-a692-7fd39539e146/1/iHo4aGXvn4fOt5fmZ0ZHSWOFliE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:55:7d:8b:29:23:3a:14:32:c2:bb:d8:92:83:ff:60:04:
a3:f6:32:6c:0e:3f:95:be:14:60:a7:ea:53:aa:27:3b:87:aa:
11:e2:93:80:b4:b5:95:95:ee:60:d7:13:67:8c:39:a8:23:4a:
3d:6a:2f:e1:2c:1a:21:95:89:53:da:94:9e:23:d7:fa:64:90:
12:f7:f2:8b:15:7a:42:58:c2:a2:f6:48:86:2a:0d:bd:27:26:
0a:fc:36:90:5e:22:34:08:e8:3a:db:7f:3a:3d:09:56:3e:32:
17:86:0b:bb:0e:5b:99:88:2c:7b:5d:7f:86:8c:1f:21:aa:ff:
12:48:dd:0b:48:e8:14:da:e2:78:ed:df:6d:57:2b:58:4d:c1:
a7:b8:ca:31:0a:87:44:c0:ab:0c:0c:bf:54:89:75:52:e6:74:
13:62:c2:da:5b:c2:c9:55:4c:21:c2:7f:43:67:a6:3a:ca:3f:
86:a9:38:5b:49:a4:a9:e2:ae:ca:af:7a:60:0f:c2:1e:66:c1:
34:f1:c0:90:4c:8b:d7:e9:ac:e5:ab:19:fa:04:3e:01:df:0c:
d4:e0:0f:2c:ce:cf:14:c5:82:cc:2f:bf:54:34:8f:b3:2c:11:
38:df:4b:b4:dd:9b:be:35:b8:44:67:27:9d:9b:ab:71:91:2d:
2a:63:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client