Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: TZTo52QOg1ozucvIKxJhiK8WxhYZD1kQueOFulSP32U=
Subject key identifier: 10:89:F2:7C:D4:54:4C:F8:DA:58:8D:4F:0D:E2:83:38:12:8F:09:1F
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 019CA97D8D5730115B0B98890BC2D4654855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 13:01:43 +0000
Manifest this update: Sun 01 Mar 2026 13:01:43 +0000
Manifest next update: Mon 02 Mar 2026 13:01:43 +0000
Files and hashes: 1: DpXD_qmAIFL_EpLe0GJAEUHvYxs.roa (hash: H5hh0chuQLZ9k4SOj22nhApIqV8qceTKzoblxLgW6NE=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: 0xypKXiwtKRGTr7w868E9a0IsIB4um8yJ1S2RgNHPnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:8d:57:30:11:5b:0b:98:89:0b:c2:d4:65:48:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Mar 1 13:01:43 2026 GMT
Not After : Mar 2 13:01:43 2026 GMT
Subject: CN=1089f27cd4544cf8da588d4f0de28338128f091f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:6d:8b:a2:6e:f1:0d:33:e4:7f:2d:b2:ad:
b8:76:95:ce:41:49:31:03:3d:de:ce:9d:bb:1b:df:
1d:f1:60:7d:11:02:3e:bf:41:e5:f1:65:f1:5c:36:
8d:b8:e2:0b:fd:21:33:5b:34:dc:56:bf:10:91:93:
c6:6a:a2:ca:99:70:c7:4d:91:4c:5e:ef:0e:e0:af:
9e:5a:20:fd:3c:21:ce:0b:d8:e4:ae:0c:60:17:6e:
ad:c7:f0:90:cd:7c:9b:b3:0e:70:2c:c8:7b:8d:7d:
fe:b5:16:91:49:dd:c7:5b:97:08:09:54:5c:4e:ec:
43:85:67:49:9c:84:a6:ec:ca:5f:0d:cc:6c:6d:4e:
3c:02:81:48:d2:e6:0d:9d:9e:60:15:5f:dd:dc:cc:
2c:77:15:8d:22:12:ec:75:4f:ff:b4:a4:38:de:ac:
9b:05:03:18:6f:5c:dc:c4:ce:d2:9f:af:d9:18:ce:
09:65:10:c2:da:e6:ff:32:ae:b8:c6:00:ae:58:8c:
70:a4:f8:ea:28:c0:82:8e:9e:05:af:70:31:bc:12:
95:dd:ac:ec:fe:83:ba:c7:6b:06:99:c2:da:dc:b8:
41:8c:fe:b3:df:80:fe:7e:ef:14:6a:02:ec:5a:cc:
7b:48:ba:1e:19:68:68:4a:d8:49:e3:00:2e:62:05:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:F2:7C:D4:54:4C:F8:DA:58:8D:4F:0D:E2:83:38:12:8F:09:1F
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:a1:58:96:43:4b:85:5d:a9:87:42:56:74:a0:6c:ec:d9:
b3:3c:f0:c1:a2:60:da:69:ba:b7:45:af:68:7a:41:b7:e9:c4:
31:75:8c:bd:06:ef:f0:77:3d:1f:ed:64:9c:2e:ae:b1:1e:1b:
a7:5d:b9:21:19:8b:31:c9:8b:20:68:52:8d:39:ea:cf:b9:19:
62:2a:1c:ad:77:5e:83:4d:5d:86:44:54:5c:b1:12:40:e4:6a:
dd:48:f2:7d:f5:b3:d7:ef:ab:f0:11:ff:b5:ec:b3:4a:89:71:
e3:af:c3:17:ef:26:9d:b8:ee:4a:24:79:93:27:4c:8a:f9:c5:
bd:04:cb:fb:24:ad:e0:cb:ad:9c:0e:72:62:4f:7d:06:fd:18:
60:93:dc:78:ca:41:35:20:d4:b4:2f:fa:74:20:fb:bc:e2:e9:
f4:ba:0a:7c:5e:c2:2d:92:a8:6c:5a:8d:3b:c5:63:62:0e:7d:
a6:7c:27:61:cb:85:f2:53:ec:d9:21:0e:b6:db:18:c1:a1:cb:
37:33:e6:83:07:2b:da:69:9d:04:36:52:e1:6f:9b:6f:6f:97:
ac:9a:09:15:56:c5:6b:57:a8:d7:b9:dc:97:4d:a2:28:41:2d:
9a:19:2c:6c:6f:d7:7a:82:0c:98:7f:69:ae:e4:3d:4f:98:fc:
92:86:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:36 2026 by rpki-client