Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: iecaZQXatcsHft5vcFbQA+oK9pnGJmC3E7c8iqSfvGA=
Subject key identifier: 95:36:F6:40:39:78:9D:7C:75:5E:15:C4:22:9C:E5:7F:3D:8F:0B:ED
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019CABA25B49186CD8EA7A97FB4A9082AF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: VpwJMnBc4x4+crKQrfq1AaYlJDZ90y8vlX2qpOlkaIM=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:5b:49:18:6c:d8:ea:7a:97:fb:4a:90:82:af:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=9536f64039789d7c755e15c4229ce57f3d8f0bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:59:9c:09:90:07:96:aa:26:98:f5:df:c1:
ba:8e:af:14:66:8a:97:fa:9c:28:73:7a:fd:80:9b:
84:a0:64:99:d9:28:c7:2c:dd:54:90:5c:b0:d0:aa:
48:67:b1:26:47:02:c9:24:74:3f:46:7d:67:60:3a:
ab:63:89:f3:55:6d:52:86:73:d7:f4:ac:b3:0e:47:
7c:03:8a:a6:42:2e:0d:3d:5a:64:15:85:e6:88:be:
6a:92:da:0a:12:00:6b:2a:cf:12:28:b4:33:98:29:
67:e1:20:0e:41:a4:6c:88:23:b9:e6:ff:e5:ff:06:
1d:94:15:0c:78:9c:8b:94:6c:17:a2:9a:fc:77:38:
b8:46:12:b3:a8:73:13:2d:6a:40:64:b6:37:42:be:
96:79:5c:7a:1b:46:16:1c:d1:3a:ff:f2:fb:36:41:
87:bb:90:b6:b2:e8:58:28:49:4f:3d:5b:8d:68:54:
24:93:97:f0:bd:b7:ba:3a:8a:03:2e:ff:d6:aa:82:
01:5b:ed:02:a8:32:72:cf:a3:de:8a:84:8c:6e:4e:
a3:22:37:1d:f0:63:b0:58:56:b3:09:65:d0:92:33:
85:f3:12:6b:fc:4d:73:37:4a:da:80:01:8a:4d:fe:
00:55:13:4a:0f:03:c4:9c:9d:d4:ed:7d:56:7c:ae:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:36:F6:40:39:78:9D:7C:75:5E:15:C4:22:9C:E5:7F:3D:8F:0B:ED
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:7f:d4:69:33:5f:97:34:85:00:5a:f4:d4:da:fb:8a:96:
d7:cf:b0:61:de:30:ff:b3:04:88:54:6c:58:1f:6f:2e:a4:6c:
75:c0:6c:11:3c:d0:78:72:8f:ee:54:9a:f5:62:8f:c8:a7:8a:
8f:50:e4:8c:da:82:4e:7f:22:b8:bc:15:2f:8f:71:53:71:f1:
64:ad:a6:ab:95:fd:b3:03:50:7c:04:e9:ea:10:b1:b7:b9:e4:
42:68:1f:0a:30:29:3f:4e:9a:7d:fc:eb:86:7d:25:7c:97:45:
cb:73:77:19:66:b9:2c:46:de:2a:19:73:c5:08:2e:90:e3:8d:
61:7b:8d:49:af:e0:9b:40:87:e1:ae:4f:f3:bf:7a:67:a0:f3:
f5:81:99:72:aa:ba:bf:c6:b7:a5:d4:4b:38:e4:85:eb:9e:95:
64:8e:41:11:62:a8:54:c7:ba:d2:47:48:37:c9:9b:ee:3e:9e:
ce:6e:c2:65:98:e2:b4:58:25:5c:a6:dd:ff:52:57:a0:eb:e6:
58:bc:ed:71:79:4a:44:f7:a5:4c:fa:48:ca:fd:38:fa:44:a1:
0f:21:b2:c1:13:b6:fc:13:76:9b:3e:dd:8a:fd:50:a8:41:b5:
bc:43:74:61:cc:f8:87:1a:a3:07:84:bf:f5:44:24:d5:10:5a:
e7:74:1e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:18 2026 by rpki-client