Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: wNu/kWLGrNBpXmyBjhnZnhTLnP2lOyqvJ8AtMBaEWfY=
Subject key identifier: 40:28:16:DF:89:FF:FD:79:24:D2:9B:DB:80:E7:BF:FB:36:72:40:93
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 019D371BB12D9D69F7D697B30A2CF09CD1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 06D8
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: X2cAXljhEeeaUqrEAiL5O0Omog8t91sY/cNl11no8Uc=)
2: uLD67uNvCc4ky2TYfWAY_NstWnE.roa (hash: J64Q9GWUgcn8Guex3fYi7oSiRMd56hoswqyttiC77H4=)
3: yQugqDhsoFCyt4EOU-Yd8LiriqA.roa (hash: RbGDZvWEo1F7e5KTPgIMqC+hpQ10KuDrmfUdpa03+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b1:2d:9d:69:f7:d6:97:b3:0a:2c:f0:9c:d1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=402816df89fffd7924d29bdb80e7bffb36724093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:2c:44:38:b0:79:06:43:3e:52:a3:47:38:
87:6e:0c:cf:4c:d3:2b:a2:54:3b:26:79:08:33:b6:
55:76:83:85:f7:55:6c:c2:36:8a:9d:ef:6c:47:25:
af:a7:23:2c:47:93:74:f4:c0:c1:77:90:33:c1:7f:
f0:35:f0:64:a7:03:c4:40:25:52:ae:dc:58:b3:80:
35:31:59:0b:78:8b:4e:f8:eb:55:92:b5:bf:71:ef:
86:cd:b3:ae:8f:95:02:3a:37:ce:82:83:c8:70:e2:
0a:21:6c:6c:d2:b3:0a:0c:e2:d4:73:37:1b:fe:60:
8a:d2:c3:77:c9:ae:8f:ea:fe:43:c5:8d:66:90:57:
29:51:7a:c7:da:08:62:73:9b:0d:5a:a1:ab:75:e6:
43:cb:45:0d:60:c5:1b:3d:1e:d5:4e:01:c8:1c:c6:
29:5a:cb:81:2d:dc:91:30:1f:a3:3a:69:79:8d:55:
33:db:95:3f:ea:9c:82:f1:68:b3:e5:e1:22:ba:30:
6c:85:83:7f:d7:79:a2:2c:20:12:fb:72:1b:f8:b6:
8c:22:43:84:f6:c1:fd:2c:ca:42:fb:29:59:42:10:
23:7a:ad:d9:ac:22:ab:a4:6b:90:69:b2:69:d2:89:
59:ca:f1:40:02:68:b0:0a:17:1d:84:fa:dd:f5:d0:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:16:DF:89:FF:FD:79:24:D2:9B:DB:80:E7:BF:FB:36:72:40:93
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:22:15:3a:2c:03:33:70:0a:58:66:31:d4:84:89:36:1b:ef:
fe:1f:9b:d9:39:81:f3:f5:bb:e5:b8:86:c2:e6:2b:54:d0:ea:
1e:43:42:37:b7:df:b3:0f:4e:36:76:d6:f9:26:81:f5:b2:04:
f4:91:18:9c:53:e2:94:c4:b8:95:ae:28:b8:8e:cc:16:8e:da:
6e:a2:30:a2:02:d2:c6:75:f2:d4:54:c1:17:94:c0:d4:2b:cf:
56:9c:53:55:0d:f7:4a:bc:9e:ca:22:8f:ed:bc:05:98:9d:95:
bc:7c:9b:b2:7a:c6:0c:c4:86:db:17:8e:b4:87:a6:f2:60:a0:
05:b4:ad:3f:62:b8:72:11:b1:bf:a4:05:68:74:0f:d7:90:ea:
2d:ff:62:40:c8:88:09:78:e7:72:96:f5:d1:d0:3f:a1:c6:43:
92:72:6c:dc:9f:1f:fd:d0:56:a9:52:4b:d2:91:d2:81:38:6d:
99:21:5f:66:12:b3:8c:15:72:e2:41:46:2c:f6:a6:f1:ed:6d:
d4:0e:83:38:25:42:87:19:91:20:c4:2f:ab:7f:af:3d:fc:02:
fe:61:33:a6:ee:51:33:bb:11:fb:77:6d:86:b3:f1:a3:bf:85:
c9:6b:bc:35:1d:1c:a3:33:b4:b7:83:63:43:5f:e4:21:3b:75:
cb:f8:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client