Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: AxOc2JsaEEsXRuQRfsVsKt6BPDLaJHgp0wLIqmuYbnQ=
Subject key identifier: 8A:76:5C:16:76:63:76:E5:13:3F:A8:5D:F1:4B:6B:5D:7C:4B:AD:D4
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019D3866700D689A1BC9840FF9A47848A3FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0C9D
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: N08gX0rBlpOIRQrDxiJzV-0xqPE.roa (hash: a6M35q6nyj43xguydpClcKSfRGhKfnGhjLVr56fUpSE=)
2: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: qKdZqLnGpiqqlMfiGp3Fg2lMfaK55k26mRASObk5icU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:70:0d:68:9a:1b:c9:84:0f:f9:a4:78:48:a3:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=8a765c16766376e5133fa85df14b6b5d7c4badd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:09:c3:9e:08:96:2e:a7:7a:02:d9:62:b0:
62:fe:1c:da:2f:63:da:8b:53:b8:b5:ec:3d:4c:7f:
8e:b3:31:0d:60:b1:e2:db:a2:7f:5b:2d:ee:98:4d:
2a:3b:fa:ad:04:75:35:16:02:bb:9a:d4:7f:b8:17:
dc:34:d1:19:77:9d:91:cb:93:d0:30:30:08:3f:c9:
03:14:99:21:6f:4a:9c:c2:aa:51:7b:e7:22:b8:a2:
cf:a9:ec:65:5e:03:cb:ee:c7:a0:f9:08:23:cb:70:
26:51:7d:f8:b1:33:63:1f:38:80:21:cb:e5:dc:f3:
6a:d2:e2:b1:02:e8:c4:03:40:5d:d1:0c:aa:73:97:
3c:cb:30:cf:6c:b8:f9:34:e6:f7:fd:41:70:fb:2e:
5a:f0:1f:dc:ed:60:14:ee:13:92:c1:72:13:07:a3:
b6:7f:f9:11:2f:1f:c7:15:10:b5:9d:ae:70:6d:c2:
04:2b:9e:f1:0f:e9:63:a9:2f:cc:1a:da:28:24:84:
ac:39:14:7b:92:78:dd:e9:8a:7c:54:4f:78:b1:60:
ca:d0:87:ea:60:ac:72:8b:d8:ae:84:14:64:70:df:
f7:62:4d:63:06:7a:d5:77:a4:eb:3a:60:1d:a7:eb:
0f:be:10:90:da:f1:3b:52:23:48:3c:df:62:1c:ac:
74:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:5C:16:76:63:76:E5:13:3F:A8:5D:F1:4B:6B:5D:7C:4B:AD:D4
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:13:17:0d:a4:26:9a:7f:ad:62:dd:79:6e:18:f7:9a:4c:0e:
8f:29:c6:74:8b:13:26:7b:42:0e:20:3d:d7:94:78:6f:34:f4:
38:ce:f9:ca:5a:c0:55:57:d7:8b:87:ac:6d:e2:4c:c9:31:d8:
82:22:ea:65:55:22:19:12:fa:34:d9:b2:1f:fb:cb:5d:c2:15:
29:9d:58:33:ae:b9:b4:61:9e:24:42:33:e2:2f:39:1d:36:59:
cf:62:72:9e:a4:15:5a:8b:78:09:e1:8d:85:68:30:54:d9:9e:
cd:5b:40:2a:8e:3f:bd:59:23:74:62:bd:e0:bb:58:65:ee:88:
32:f0:ce:9a:c3:31:f9:5a:55:d0:45:f5:f0:ec:49:c0:8f:06:
3a:0e:4d:07:ca:d0:3f:78:5f:37:15:1e:63:46:96:fc:22:15:
dd:53:e6:a8:d4:f0:b2:e7:30:0b:10:56:91:96:96:20:04:31:
dc:fb:b4:11:bf:6a:c8:10:10:a4:2d:d1:6e:5a:eb:2b:ec:cb:
7c:4d:c5:ef:25:f7:3f:97:10:aa:e2:a8:10:a1:b5:87:f0:87:
0b:24:12:fd:e7:ca:47:95:ee:97:b9:59:4b:85:9a:1d:fd:34:
46:33:a4:50:f0:0d:8f:0b:54:94:9d:af:88:cc:0e:e7:2a:80:
43:11:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:29 2026 by rpki-client