Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: EUh88tGAupni2ZzgtvuglyO6sDakreEkXDme/tlarlI=
Subject key identifier: A3:65:55:B6:BA:78:B8:18:EC:62:6A:4B:5E:C0:A0:2A:71:10:45:9F
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 019D38D3A1822A0B62FDE6EA55ECD9C5A60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 082B
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: C/Ey6UtD7HDxldf3W02CZkOiW1nzcbCvBstxokdmMHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a1:82:2a:0b:62:fd:e6:ea:55:ec:d9:c5:a6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=a36555b6ba78b818ec626a4b5ec0a02a7110459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:da:bd:44:e6:c7:93:e4:21:7d:1e:83:8b:dd:
58:4b:4b:2f:b8:83:ac:76:d3:46:62:9a:31:b2:a4:
f8:db:7d:52:2e:31:85:71:5c:09:cb:21:0c:43:b0:
bf:88:54:6d:36:a4:da:6e:4c:6f:ac:50:fb:39:98:
9f:c2:02:60:e3:f3:bc:e6:e8:9c:71:99:07:ba:89:
1d:d4:64:0a:f3:0e:6c:18:cd:16:9a:52:ef:b8:6b:
e9:a7:3c:0b:41:0b:25:d0:85:00:6d:88:81:fb:65:
ff:d9:92:41:72:2a:29:42:3d:32:d0:f1:64:e9:a5:
19:22:28:db:a0:b3:bd:a6:b3:7a:96:2d:b1:97:38:
78:49:24:11:03:95:6e:45:83:14:48:c2:ee:16:a5:
ff:57:f8:bf:cd:42:a8:1f:61:10:c5:70:f8:fe:6c:
ef:df:5c:7f:5b:6b:d1:cd:e5:ba:ee:e0:88:7f:7c:
f7:c3:a9:0b:59:96:4b:c1:da:94:d3:21:85:fe:6a:
84:c8:e5:6f:92:75:e4:a6:25:81:e5:de:55:91:9e:
c3:75:09:c5:56:40:2d:83:73:0c:ad:ce:61:c8:61:
08:40:bc:2b:18:bb:a4:0b:bb:4f:28:c0:82:49:1b:
ba:86:0b:d6:97:3f:50:14:b4:3e:0a:1a:ed:c8:9a:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:65:55:B6:BA:78:B8:18:EC:62:6A:4B:5E:C0:A0:2A:71:10:45:9F
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:94:d3:3b:f5:9a:73:aa:45:f4:04:5c:a3:18:91:f9:6e:
95:25:9e:25:ff:a8:3e:c8:2f:bc:73:a8:eb:72:21:ad:c9:eb:
ac:a0:d5:af:b9:f8:f4:01:ea:81:d6:ef:7b:23:51:1e:ea:73:
a7:4d:ba:80:72:bc:e2:40:4c:db:68:2a:56:ea:92:0a:73:e5:
51:b7:ac:38:a3:a7:b9:14:5d:ca:dd:2c:ab:76:7c:af:59:1c:
da:50:07:07:7b:f5:ac:8e:02:33:86:f0:33:59:1a:d1:d3:fa:
3b:ff:71:93:30:1a:90:24:c8:f7:ae:89:a9:46:f5:e3:bd:e3:
43:47:9c:7c:63:d4:e4:1c:35:3e:71:e0:74:8c:76:5e:8f:e8:
d6:97:4d:ba:11:ee:bf:f1:d3:22:af:79:db:5a:30:85:f8:da:
69:22:87:48:89:0e:52:fa:b3:e6:d7:bf:bc:26:e3:6e:d9:42:
c9:47:81:9a:f2:cb:a3:c5:ed:4a:d2:49:22:50:0b:ac:25:71:
ab:9f:7f:41:76:be:21:67:bb:b1:ed:b2:47:a7:e4:bb:8b:b4:
be:f7:43:e2:11:ad:1b:97:9e:fc:ea:29:de:ef:a7:47:bb:e9:
bd:7d:ae:1f:00:b3:a5:7d:db:b8:1d:63:75:9d:5d:6c:b0:16:
0c:96:e3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:19 2026 by rpki-client