Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: IW0H0AUu1Oendby/nntYtjsRGNggv0uK3jgX3FrYpyg=
Subject key identifier: 88:12:B3:98:F8:F9:0C:4D:18:43:B3:8A:86:55:45:B4:D5:ED:9F:C7
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 019D38D38AF6C026B507B139E148C5459EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:20 +0000
Manifest this update: Sun 29 Mar 2026 09:01:20 +0000
Manifest next update: Mon 30 Mar 2026 09:01:20 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: NBF0rBUwAypcBdl8A3k14dIms7Yk78gnoO0NOy23q4g=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:8a:f6:c0:26:b5:07:b1:39:e1:48:c5:45:9e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Mar 29 09:01:20 2026 GMT
Not After : Mar 30 09:01:20 2026 GMT
Subject: CN=8812b398f8f90c4d1843b38a865545b4d5ed9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:c8:97:5e:bb:61:b8:e6:7a:94:1e:e6:7d:
f5:f5:98:34:be:7d:65:10:74:b5:ba:a5:e4:63:c2:
83:67:c6:3b:47:ec:11:9e:57:19:11:75:e0:56:18:
c2:6b:82:e8:30:4c:7b:e9:ae:dc:a7:e9:1e:30:39:
f5:28:55:16:14:ac:58:06:19:75:59:90:a2:b9:9e:
6d:c5:c2:af:14:dd:ef:f5:fe:9c:5a:f3:8d:71:38:
e9:28:cb:61:ba:7d:1e:bc:b5:c8:f0:27:cb:6f:6e:
8f:df:dc:19:19:31:77:47:4d:76:fd:a0:6a:7b:b1:
bb:3a:76:33:8d:63:c6:2d:4e:c9:ca:e3:e4:99:16:
1e:9e:84:6a:91:b7:4a:f6:e0:33:1c:65:38:5b:22:
74:32:0e:5f:53:65:db:a6:e2:a5:14:14:de:dd:d1:
52:37:07:4a:7c:eb:cf:fd:f7:7f:55:ef:dd:c5:f9:
50:dd:2d:75:b6:da:ea:6b:f1:e4:d4:e3:f6:ed:4e:
a3:46:18:93:e2:27:a2:9b:f4:b3:0d:b6:da:e1:21:
56:7a:e5:1c:54:10:ca:44:cc:ad:0f:a5:96:b3:1d:
76:97:67:9f:ed:1b:4b:8b:3e:11:f0:cc:d8:a8:c4:
00:e5:d1:29:b1:49:e6:66:bf:e2:d2:c3:d2:fb:40:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:12:B3:98:F8:F9:0C:4D:18:43:B3:8A:86:55:45:B4:D5:ED:9F:C7
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:93:77:0e:39:c0:05:a1:7e:09:c3:e1:b9:88:73:a3:39:
6a:66:e2:9a:0a:37:61:f8:4a:be:3f:2f:4a:23:a0:36:09:5b:
4a:67:ae:34:67:2f:46:0f:86:b2:29:25:f0:71:c7:60:2a:dd:
75:63:03:bd:d3:96:4b:48:ff:73:bb:5e:75:97:26:0b:7d:ef:
8d:24:db:39:b9:09:71:6b:d1:c8:c7:47:9c:01:2d:93:2d:65:
a5:24:ea:a6:fe:82:f0:ce:ae:a8:be:b0:8d:c4:75:f2:2e:a3:
6b:94:99:37:a0:6d:bf:f1:61:07:c2:e8:e4:b8:d0:b8:ab:b8:
7f:79:e5:7f:13:2d:09:87:1d:e4:73:ac:54:da:68:be:90:78:
eb:1d:f8:a6:97:ad:04:8a:fe:5c:51:f2:a9:92:f4:a6:ac:41:
f4:65:a8:0e:6e:75:de:da:73:58:e7:8e:ac:7a:2c:0d:87:5a:
52:1f:bc:01:9e:d5:99:87:a3:8a:50:ac:79:f0:13:f3:16:78:
05:1c:f1:01:49:d5:98:28:28:fa:e6:80:eb:48:12:b8:95:28:
44:bb:cf:19:16:a5:56:17:2b:11:10:4d:b8:bc:57:e6:2d:b0:
a7:bf:fa:aa:e7:b8:1e:13:fe:ff:89:68:bd:59:c2:12:67:23:
a2:63:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:59 2026 by rpki-client