Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: /VZ8jKMp9auTQggLFORt1HsRi2sM5NOcuZVVkKGYvO8=
Subject key identifier: CC:DE:D1:DE:5B:B0:7C:E9:73:32:D0:54:79:31:CA:CF:EF:FE:E2:C1
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019D389BD63CB62F1087A2B1AB06BD8F5632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:00:30 +0000
Manifest this update: Sun 29 Mar 2026 08:00:30 +0000
Manifest next update: Mon 30 Mar 2026 08:00:30 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: 0HIfrVgrcSZus6k+0u0O0uArOz5tUEth/kE/nSY9oDQ=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d6:3c:b6:2f:10:87:a2:b1:ab:06:bd:8f:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Mar 29 08:00:30 2026 GMT
Not After : Mar 30 08:00:30 2026 GMT
Subject: CN=ccded1de5bb07ce97332d0547931cacfeffee2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:41:3e:48:3e:38:0d:73:e0:aa:f1:71:be:
b4:e7:71:52:f3:d6:41:e0:59:49:d7:55:6e:37:1e:
1f:62:e6:f5:4b:91:c2:34:53:88:ea:9b:fa:61:4f:
6c:74:52:4a:99:3d:3e:be:f9:dd:ae:07:65:26:98:
6f:09:c2:2b:d0:b8:84:e7:cb:43:d7:67:1c:8b:40:
96:2f:36:f7:62:7c:09:b5:89:2b:f0:cb:d5:3b:c3:
38:1a:a4:ed:4d:06:2e:08:cf:dd:cb:3a:d8:5a:c6:
b3:20:e4:0d:ac:f6:c6:10:50:bc:ca:a2:62:1d:89:
fa:c2:6f:7f:8b:1a:0a:5b:3b:3f:e7:27:67:1c:02:
12:02:45:8f:ac:e1:75:ee:5b:8e:3f:3d:12:a4:dc:
c1:90:5d:13:89:a5:15:e6:3d:2a:d1:52:9b:04:ae:
a3:2d:18:86:25:6e:66:30:80:0e:b4:bf:4e:4e:16:
4d:99:84:78:d3:b7:c0:82:46:91:45:c8:0d:b7:c4:
41:bc:84:f8:fd:76:63:76:47:72:ca:e5:d4:13:b1:
b7:10:52:32:4d:51:ed:4d:9f:e8:90:8e:7d:27:72:
50:52:34:b8:5a:84:1e:f3:63:11:69:5a:5a:12:d4:
fe:43:c6:bb:c1:09:11:a3:f4:ed:03:3d:2b:7c:12:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:D1:DE:5B:B0:7C:E9:73:32:D0:54:79:31:CA:CF:EF:FE:E2:C1
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b8:bc:9c:dc:7d:6c:36:6b:61:fa:5e:ad:a6:51:62:df:06:
bc:ea:96:b9:66:af:b3:fc:ff:11:f9:41:bd:7f:10:53:a6:23:
86:5a:a3:fe:5b:c0:09:fa:cb:c4:76:dc:80:55:93:33:e4:61:
8f:fd:fc:93:94:01:41:c6:ad:b4:14:31:24:51:b5:bb:cf:cd:
d4:84:df:4e:da:73:e6:b6:6a:d0:b8:64:39:52:be:f2:53:8f:
98:70:9e:89:ab:73:5e:27:07:48:e1:9a:d9:a3:c0:7c:13:7d:
8d:30:59:59:41:75:f3:34:0d:8f:86:4e:a4:fa:fe:27:3b:ee:
51:62:8c:cc:1f:7b:47:8d:ed:56:49:36:71:92:8a:08:4b:91:
4f:91:6a:1a:e1:11:c0:99:61:85:33:04:f2:78:d9:55:44:ff:
e5:8c:42:f6:bf:48:28:84:8e:34:be:e0:f7:ec:0f:5a:2c:0b:
cc:d3:13:1c:08:19:a1:84:fc:f5:96:eb:73:06:48:e6:f2:63:
ab:bb:58:2a:c1:12:16:2d:4a:d3:f6:c9:76:8a:08:5e:5a:e7:
24:ff:36:9b:18:83:89:5d:28:d5:17:25:6b:b6:15:19:31:23:
11:52:44:24:f3:a1:7e:6e:93:06:e0:a9:f0:fc:31:30:fb:78:
76:f3:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:06 2026 by rpki-client