Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: /LAfO7Sm5IxGhE0dkHqaa/7084hhH+C8dsd+3Wxdl58=
Subject key identifier: C9:75:DB:F3:D0:F8:D3:88:0C:80:97:8F:DB:26:7C:C6:2E:1F:CC:37
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019CAB34075C37D2266F2E49BD5362138FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0968
Signing time: Sun 01 Mar 2026 21:00:39 +0000
Manifest this update: Sun 01 Mar 2026 21:00:39 +0000
Manifest next update: Mon 02 Mar 2026 21:00:39 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: U1d+PNNhB7Pm33GD5eyDOsaeQqy3Dyva8Ek8598Bf8k=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:07:5c:37:d2:26:6f:2e:49:bd:53:62:13:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Mar 1 21:00:39 2026 GMT
Not After : Mar 2 21:00:39 2026 GMT
Subject: CN=c975dbf3d0f8d3880c80978fdb267cc62e1fcc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:36:29:7f:d3:80:fa:d9:ea:12:6a:7a:75:
84:ad:aa:a7:f1:28:6c:fb:1c:08:2a:97:57:d6:18:
13:63:5b:04:49:87:13:4d:6a:42:8d:b6:95:b2:48:
61:ba:d0:8e:a0:d4:50:7d:77:37:82:e1:96:8d:b3:
7b:e3:4d:26:8c:02:8d:5d:ed:3a:d9:e2:26:f7:82:
63:63:3f:52:70:1c:c1:d9:df:69:4a:ea:25:1d:0d:
a1:df:dd:cd:ad:ce:bd:36:06:b4:1b:c3:64:77:7b:
fe:12:73:e5:c6:28:39:d8:c2:f5:21:5b:85:e0:65:
f2:d8:c2:98:19:3b:ee:fd:fb:a7:3e:fb:51:f3:96:
34:56:f9:13:e6:d8:b3:95:01:d4:7d:0e:6e:e8:1e:
f2:da:b3:4d:82:bd:88:2c:2d:8e:39:fb:f0:04:d6:
d5:96:13:e4:a6:61:57:b3:0b:64:c8:cf:14:0b:c6:
48:67:d7:29:3f:08:4c:96:30:81:11:1e:c1:7d:d9:
6c:3e:be:16:32:c3:e0:c7:fb:3c:66:87:aa:6e:70:
87:f0:19:82:2a:7d:a3:31:ba:8d:29:6c:b9:11:5b:
c9:10:56:f7:1e:05:a2:dc:45:fe:d2:23:f6:65:a3:
19:67:66:fb:4f:c3:b7:4c:27:f6:65:58:1f:86:b7:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:DB:F3:D0:F8:D3:88:0C:80:97:8F:DB:26:7C:C6:2E:1F:CC:37
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:08:04:ee:2c:1c:f0:a7:cc:08:a5:07:5a:18:13:1f:8d:2f:
38:db:8b:f2:12:a6:0c:d9:c0:c0:f2:55:4c:e2:fb:61:78:ac:
d2:27:64:fa:84:5a:38:79:0e:51:ab:f2:38:76:3b:9b:92:a2:
8c:5c:cd:e4:e7:24:53:8b:40:72:d7:16:b7:b2:c1:6d:b7:a9:
10:40:1c:cb:ba:f5:7c:30:8d:8d:00:19:00:43:a2:7b:9d:37:
5d:65:73:6f:24:87:b4:74:3d:86:ca:ce:23:34:50:80:63:47:
23:67:43:33:ac:83:11:53:5c:2b:78:89:3c:8f:20:7a:d2:cb:
94:82:e2:06:ac:92:98:6b:00:74:8d:1a:91:eb:7a:30:21:5a:
43:dc:ae:4f:f4:a4:55:08:21:b2:4d:48:95:14:f0:17:70:81:
09:42:0c:3c:9a:99:75:8e:96:97:59:7c:c0:c3:26:e9:1d:8d:
6b:fd:28:d3:68:ac:eb:03:ef:99:0e:e5:c7:f1:b9:16:33:46:
c9:69:cb:f4:38:06:46:de:5f:11:02:e4:7c:33:2f:28:35:8d:
55:9b:48:87:71:bd:e3:3d:54:12:53:c8:a3:8b:d1:ca:81:91:
0e:84:13:bf:a2:91:67:02:e5:19:f1:26:3e:e5:17:a6:ac:83:
4f:be:c1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:25 2026 by rpki-client