Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: Yo6nhxZ0Ddc8zHzb+PQoZNub0o7i7c9RzxB46iJjoIk=
Subject key identifier: 83:8B:E8:9E:67:72:08:C3:D4:17:33:D0:F7:D5:98:24:1C:7B:21:12
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 019DA30A854A40D47A2F6957DBEBB57D1E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 0862
Signing time: Sun 19 Apr 2026 00:01:08 +0000
Manifest this update: Sun 19 Apr 2026 00:01:08 +0000
Manifest next update: Mon 20 Apr 2026 00:01:08 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: RwYcyo4E1ZGgIRynmTnOitNW845ROBMWfzrLVjfTeWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:85:4a:40:d4:7a:2f:69:57:db:eb:b5:7d:1e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Apr 19 00:01:08 2026 GMT
Not After : Apr 20 00:01:08 2026 GMT
Subject: CN=838be89e677208c3d41733d0f7d598241c7b2112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:58:0c:a9:60:73:57:51:3b:a9:6d:c5:ee:
fd:1a:bf:f5:77:b1:d1:9c:c4:4b:a6:2a:1f:43:f4:
f7:67:76:5e:64:20:19:27:76:db:b6:76:87:f0:a9:
fe:9c:71:37:94:6c:93:78:ea:50:bb:1f:f0:1c:a4:
39:f6:a5:58:ef:ed:22:16:f5:ff:3f:dd:b4:b7:b3:
48:0a:56:a6:8d:d3:6f:03:d7:61:b0:15:5b:d8:f5:
8b:c1:39:c9:5e:e9:2e:ea:2b:a3:23:c6:d3:2c:8b:
59:90:7a:a7:0f:c2:f2:0a:60:55:e0:3d:f0:6a:3f:
fb:85:c7:b6:4a:be:b5:e7:e9:08:80:5f:ea:ab:f0:
c2:7c:d3:15:98:9e:da:a2:81:ae:a2:69:ce:c8:bc:
1a:ec:1c:3d:dc:99:c6:e7:04:8f:f3:d9:bf:2c:64:
75:a1:7f:be:de:75:61:cf:9d:a0:58:80:6f:07:02:
34:1c:51:23:26:8d:1d:dd:29:1e:1c:26:31:0b:50:
98:bf:c4:aa:06:b1:9b:ce:a8:8c:43:fa:81:20:27:
7b:f3:7f:b7:aa:3d:34:e9:ec:d0:cc:3b:1c:e6:2d:
7e:f6:fc:ac:18:77:bc:56:a2:25:e6:ed:58:6c:5f:
c2:6c:45:ec:b9:bf:dd:a0:96:13:b4:50:2a:18:c2:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8B:E8:9E:67:72:08:C3:D4:17:33:D0:F7:D5:98:24:1C:7B:21:12
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:86:22:6f:08:9e:57:76:e1:fe:6e:df:26:c4:1c:7f:4e:9c:
d2:90:27:b5:ee:55:bd:98:e1:c3:68:87:3e:8d:44:2d:f4:b1:
2a:9c:5d:8e:69:79:83:ae:7a:d5:f4:17:15:cc:a9:1a:8c:07:
51:f9:3b:c4:e6:db:69:ac:29:8f:34:7b:8f:ae:dc:06:cc:3d:
df:8d:cb:4a:cb:ed:c2:e3:0c:fd:51:27:5a:00:ec:96:0b:82:
f8:4d:3b:0e:2e:0f:2a:bf:45:cb:bc:20:fb:a7:df:de:0e:ad:
6e:e6:59:2d:74:26:a5:12:e1:e4:a7:f1:40:b3:01:61:4d:e8:
6b:26:14:e1:a1:b0:3f:72:72:8f:fd:fd:4f:5d:c9:88:a9:bd:
95:69:ce:fb:38:20:bc:a9:c7:78:b2:ef:c0:a9:d7:da:11:2e:
5a:0b:68:cb:a7:b9:2d:5b:49:a7:20:1e:5b:e2:a4:0e:6c:64:
1d:c8:8c:9e:3a:10:8d:2e:bd:8e:48:bf:12:5e:d1:c0:c8:ff:
b2:fe:ba:36:33:a8:72:45:5a:d5:f1:81:8e:e4:6e:cb:41:40:
d7:af:4a:4e:27:68:cf:e7:84:13:cc:a0:21:cf:51:29:f6:73:
c6:7b:6e:4f:b7:e3:47:7a:eb:06:1c:46:5c:00:e1:20:bc:62:
d6:43:2c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:23 2026 by rpki-client