Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: 3g5mp32h67efGHETKPR+Czl7/6NEY+ORIJK8E0laCYE=
Subject key identifier: DB:88:DC:DB:19:6C:ED:04:D7:F4:04:80:01:18:CB:8D:16:FF:48:47
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019CAC1037BA6E6513A775DDF18D0F550169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 0189
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=)
2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
3: OwnmL8kddIBhLRX-NHEzddhuNVA.roa (hash: leLJKgM8a2VW5VrAHQjffz+j5cjfJqCfMtcGbwf0E0E=)
4: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: ivqkDtwzPRBXoI0CLK47jqWXkBoGK26IBAWIo5Aekvs=)
5: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
6: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
7: r50bqW5SnPNE9WQYYRLDyXwjtZc.roa (hash: up7vGtBh2DqMmPO7x5Q3VURAhNEUmEQqjy49vJmJas0=)
8: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:37:ba:6e:65:13:a7:75:dd:f1:8d:0f:55:01:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=db88dcdb196ced04d7f404800118cb8d16ff4847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6c:8a:c1:8e:8a:77:3c:d5:50:2e:01:b0:5c:
f5:04:b2:41:3f:60:49:46:98:62:78:af:0f:95:4a:
d3:18:89:ae:4b:97:bf:c4:eb:02:93:6d:8e:eb:5f:
36:6a:91:db:8b:9f:ef:f7:0e:eb:d6:7c:12:35:61:
d2:04:e3:6c:37:a1:a4:34:3f:88:92:3b:10:81:bd:
41:ac:6c:5f:b3:0d:13:82:20:74:e6:3e:b8:17:89:
3d:df:cd:97:f9:e6:51:a9:53:21:98:78:5d:97:9c:
d3:23:94:10:c2:e5:62:43:21:7c:4a:ef:dc:fd:9c:
3e:9a:1e:4f:09:6e:3a:62:b2:c1:0b:10:85:4d:f3:
dd:8c:d2:ec:60:dc:db:0a:f6:d9:21:f8:fd:a8:62:
18:b6:56:46:a8:70:ae:e2:f3:7b:91:60:88:06:31:
32:5e:f7:24:e9:98:df:f8:35:9c:52:45:63:8e:ce:
57:23:8b:d4:a5:48:e8:32:77:12:93:cc:99:38:1e:
0c:a9:73:6a:eb:5b:19:20:7f:09:43:6e:a4:7b:d1:
c6:c0:fc:0d:3a:27:76:26:d9:e0:ff:76:6e:ba:30:
4e:8d:98:28:69:e9:ef:1a:86:03:c8:bf:d3:a7:ce:
39:b5:c6:98:98:0f:5f:5e:7a:f5:99:ab:82:57:ef:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:88:DC:DB:19:6C:ED:04:D7:F4:04:80:01:18:CB:8D:16:FF:48:47
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:d7:1c:0d:a4:38:ca:d0:d5:6f:74:7f:50:89:94:cc:dc:
3a:ff:9f:a6:3d:42:7d:e0:f6:88:5a:3e:be:c1:a9:e6:e1:25:
08:8d:f5:b9:a1:90:a8:a4:e5:02:a6:72:43:ec:fa:dc:7d:c5:
45:40:9c:d0:19:8a:43:60:95:ca:50:34:22:41:5f:e2:9d:fb:
61:14:04:7a:38:22:58:e7:c8:c6:74:9d:31:47:12:e2:b9:96:
37:0b:f3:7a:02:61:e3:da:19:c8:d9:4d:b2:f3:ed:1f:8d:63:
39:9e:ff:55:cd:5c:ec:ef:16:9a:e0:e7:1f:e2:42:1c:b6:35:
cc:56:73:26:6b:05:66:2c:8e:3b:36:1c:60:32:50:9d:9e:6f:
3a:10:43:44:a8:fe:f7:c1:89:4c:3b:cb:4f:1d:63:29:ab:a8:
e0:a2:d4:8f:47:e8:0e:01:3c:09:76:36:a6:65:d6:59:32:4a:
06:72:50:91:fe:e6:7b:75:91:d8:11:28:d0:e8:b6:9b:49:83:
f2:e4:d1:54:ba:70:15:c9:bc:e0:e9:80:c7:4b:50:bc:6a:39:
b8:ff:7f:b7:bb:7b:d0:a9:37:16:e5:cc:c2:d4:be:a5:d7:ef:
e9:73:9c:1d:f7:23:72:c0:c9:46:a1:5e:6c:3d:1d:fa:bb:f0:
2e:b5:05:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:00:01 2026 by rpki-client