Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
File: IxNmmEaTAQHlodA48EtTTaCLonY.mft (raw, json)
Hash identifier: 8uNpjA45wVrGukrfFzaQ64Mn9UFZVLb7tB21TrexF2A=
Subject key identifier: 41:DD:B5:34:62:99:C1:23:8B:9C:F9:AE:8E:54:03:7A:3B:DD:77:F6
Authority key identifier: 23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
Certificate issuer: /CN=2313669846930101e5a1d038f04b534da08ba276
Certificate serial: 019D39AEB3165120F38381D20F00A7B2D033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
Manifest number: 025F
Signing time: Sun 29 Mar 2026 13:00:43 +0000
Manifest this update: Sun 29 Mar 2026 13:00:43 +0000
Manifest next update: Mon 30 Mar 2026 13:00:43 +0000
Files and hashes: 1: IxNmmEaTAQHlodA48EtTTaCLonY.crl (hash: qClRgYCwLawsPx6Yr+08Y/OSRoNJQf++CrePtBCuEyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b3:16:51:20:f3:83:81:d2:0f:00:a7:b2:d0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313669846930101e5a1d038f04b534da08ba276
Validity
Not Before: Mar 29 13:00:43 2026 GMT
Not After : Mar 30 13:00:43 2026 GMT
Subject: CN=41ddb5346299c1238b9cf9ae8e54037a3bdd77f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:ef:62:3e:96:ab:21:fd:b1:5d:c4:4f:c0:
5a:89:4c:00:e1:46:b7:a2:b5:07:bf:75:6a:fc:17:
5b:ff:31:60:e5:af:ff:fb:5b:18:11:77:8b:75:69:
b7:be:5a:54:75:90:16:6f:ba:71:37:a0:3b:d7:15:
58:33:c8:7f:9f:7d:5b:97:25:9e:c4:aa:da:3a:02:
a2:f5:3d:87:c5:14:1d:8b:95:e2:e6:16:3c:1d:f2:
76:17:70:05:24:66:2f:74:d7:04:e4:58:bf:07:9c:
d4:70:ad:7e:55:04:1c:71:19:ca:70:d2:b1:19:1d:
3a:91:a4:77:70:4c:60:cf:5b:ff:59:03:af:a2:6f:
0e:0c:e8:f7:94:05:36:63:04:7f:6c:20:9d:9d:f4:
d3:2a:86:88:93:17:b3:22:b3:f7:f2:59:27:fd:fc:
0c:03:71:37:0b:bc:41:f4:ec:88:12:29:eb:04:d5:
66:78:2a:8f:fa:65:05:ac:c1:da:22:4d:01:1e:73:
39:fa:5a:08:cd:5d:4e:d6:3e:fd:70:a3:03:79:04:
15:28:12:48:da:15:cd:6a:3f:00:1b:81:0a:c3:78:
58:03:b6:60:8b:0a:f6:ea:09:8d:85:08:5e:68:90:
39:c7:f4:49:78:1d:83:bb:3a:5b:b0:74:e9:99:da:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:B5:34:62:99:C1:23:8B:9C:F9:AE:8E:54:03:7A:3B:DD:77:F6
X509v3 Authority Key Identifier:
keyid:23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:a8:6f:56:0f:6c:d1:d0:34:57:bd:d5:50:66:4d:0b:11:
e1:f3:15:53:28:74:3f:df:2c:91:57:7b:e3:dc:ac:ec:61:bd:
c1:2b:66:27:4e:e6:47:8f:ef:a0:59:26:d9:4f:a7:73:18:8a:
de:06:08:f1:54:95:b0:65:39:04:79:d8:9d:b3:68:89:34:fb:
04:52:5e:97:b0:b8:52:72:2c:95:fc:20:b8:5d:67:8c:7d:6d:
db:d2:a8:a7:b4:dc:31:4f:bd:4f:ee:c5:d6:70:d9:b0:cb:95:
14:f2:ad:01:3d:00:40:5b:b0:26:1c:1d:31:36:4f:80:e0:ca:
ef:c3:74:3d:48:d8:8c:dc:25:b1:5a:00:32:5d:c8:2b:4a:3c:
e6:46:f1:14:fa:45:54:c0:14:9b:5f:96:d2:58:28:63:f5:2e:
9e:75:6e:66:3a:15:a3:33:49:89:49:36:a7:1b:14:6b:8f:f1:
ba:a3:3d:d9:6a:4c:8f:65:14:48:80:a4:77:bf:e7:e9:19:c7:
d1:f5:66:ef:83:4a:65:5f:27:f7:76:7c:b7:50:b7:ea:83:a0:
e3:14:18:42:41:16:03:52:bb:b1:8a:0e:38:ce:05:2f:57:dd:
2d:ba:a2:8c:05:56:8a:fa:d3:d9:e1:55:22:68:e8:2a:9e:ca:
d4:5c:6a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:36 2026 by rpki-client