Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: NIXwRNiJnMTOVZCJxzumTW16FyZuvlPKNs7PT5Ntfj0=
Subject key identifier: 37:54:FA:A8:90:93:39:64:03:95:83:A2:F6:F5:13:5D:4A:A3:74:F0
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019CAD90CF8573092B23EF1CC0BD01C71327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 08:01:14 +0000
Manifest this update: Mon 02 Mar 2026 08:01:14 +0000
Manifest next update: Tue 03 Mar 2026 08:01:14 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: tk6XCQ7MnPwBTMfqhsCa64L5kl/yl9ITtVHU2n53/ms=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:cf:85:73:09:2b:23:ef:1c:c0:bd:01:c7:13:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Mar 2 08:01:14 2026 GMT
Not After : Mar 3 08:01:14 2026 GMT
Subject: CN=3754faa890933964039583a2f6f5135d4aa374f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:16:30:32:66:b8:e6:31:b1:c8:c8:7a:9d:
a0:7e:cd:28:b8:b1:e1:d9:f5:63:f9:83:12:f4:cf:
8d:4e:c7:f8:f5:d5:67:25:b7:9b:f4:f1:82:0d:df:
b2:79:4e:a4:58:c3:df:30:f4:85:6d:9e:8a:f6:e5:
dc:10:ae:27:21:b7:40:9f:57:18:f3:d5:f6:04:67:
62:fc:41:95:9c:a4:ea:86:e5:7e:f6:ed:07:8e:ef:
31:69:bd:62:cc:3e:1f:83:a2:1c:f1:af:68:d5:89:
f3:8a:cf:77:73:de:bc:56:10:ad:b0:be:a3:2e:d7:
26:f0:ea:4c:da:32:6a:7a:91:6e:bc:74:d4:60:d9:
79:1d:b4:d6:35:fc:68:17:23:f8:0a:47:dc:ca:9f:
1f:79:bb:e0:0e:f1:2b:da:9e:45:4f:51:94:87:34:
61:bb:e4:0f:49:d9:33:ac:0d:9f:03:e4:ef:2c:d6:
43:a7:b1:bf:50:82:12:2f:ae:b4:9a:8e:63:70:62:
de:69:bb:e9:ee:bd:77:c9:47:18:89:49:ce:d6:31:
94:06:09:ac:84:74:97:b9:14:75:65:cd:65:e2:c8:
2a:ef:b7:d4:f4:4a:0f:ab:c0:38:ec:3c:93:7f:7f:
22:35:1d:c0:fb:f7:11:a8:a1:5a:7a:e1:84:01:5e:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:54:FA:A8:90:93:39:64:03:95:83:A2:F6:F5:13:5D:4A:A3:74:F0
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b2:1b:2f:3f:53:59:9e:98:82:64:90:17:4d:85:d7:a3:13:
23:d3:71:4e:1d:89:97:72:e4:b1:d4:99:50:05:69:45:96:50:
95:af:b6:75:0c:87:fd:37:57:76:eb:85:b2:04:44:fc:39:23:
8f:31:c6:76:66:8d:ec:2d:7d:eb:0e:6c:da:42:39:95:af:35:
b7:fc:18:b2:fd:6f:21:90:6f:2b:f4:8a:61:90:dc:eb:29:38:
e1:87:e6:80:aa:db:27:3a:c3:e1:e3:43:d7:f3:09:03:b5:38:
3e:33:24:75:d5:e3:d7:5f:5c:df:cd:90:c8:c2:2a:11:62:cf:
7c:56:2f:9a:f6:36:d5:50:a1:9c:63:cc:3f:1b:db:cd:c4:07:
1f:1d:66:f8:ec:f0:20:7d:23:a2:bd:18:04:ca:06:f7:20:6b:
71:82:f0:0c:3b:a7:8d:ac:3b:67:f4:4e:6f:71:8f:a9:16:1d:
bb:00:9b:ef:0e:f4:18:01:eb:5b:a7:b3:c8:0b:59:ef:63:f1:
2a:e0:8d:60:37:b0:13:d2:e8:76:69:77:f9:25:18:7c:ab:2e:
da:2e:ab:41:c2:4d:8a:16:eb:13:f5:6c:e2:31:8a:5c:db:35:
98:5a:6e:97:92:c8:cf:32:9f:93:f6:89:87:96:8c:ee:17:5a:
d3:5e:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:05 2026 by rpki-client