Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: iA75Od+PHEVci+TwwAdFXZ4soqrMBHA+knu6rvJsNRA=
Subject key identifier: AC:74:3B:19:5F:05:2F:41:F4:16:BB:44:9A:04:E0:C0:3E:E3:CD:5C
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 019CAC7DB38D3A7005F9A64CA24281891017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 03:00:44 +0000
Manifest this update: Mon 02 Mar 2026 03:00:44 +0000
Manifest next update: Tue 03 Mar 2026 03:00:44 +0000
Files and hashes: 1: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: z7MI58MEyU44sAUFxAPNKqI+APyUEZTBhYz41Hg6i5s=)
2: mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa (hash: UmvKuUUkINXoOW+jyUXuOgnlOY9eMq6JudtGUkNm/Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b3:8d:3a:70:05:f9:a6:4c:a2:42:81:89:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Mar 2 03:00:44 2026 GMT
Not After : Mar 3 03:00:44 2026 GMT
Subject: CN=ac743b195f052f41f416bb449a04e0c03ee3cd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:71:12:e4:1b:c3:59:5a:a4:b3:22:a8:95:
00:4b:3f:32:21:ad:72:52:b6:da:4d:8f:c0:e2:a4:
b4:37:88:1c:cc:21:8a:0c:83:d6:4b:25:fb:75:39:
35:b3:f4:79:90:a6:88:f1:49:f8:be:23:5a:4a:5f:
81:ed:24:86:bc:ca:08:38:b5:ac:26:75:59:73:00:
8f:47:cd:66:79:35:7c:0b:a9:7f:ec:ff:63:2f:17:
d2:b2:0a:fc:34:13:ae:7d:f1:88:6d:41:99:b1:5a:
51:34:a8:7e:33:ab:14:31:d9:80:43:92:b7:b4:91:
8b:92:07:5c:3f:6f:a1:2a:62:36:17:9b:5b:a3:65:
8e:57:13:2c:50:7e:0e:af:6c:fa:7d:6d:92:4d:b2:
e7:db:ca:da:7e:4b:1d:8a:05:d1:26:c6:fd:4f:ae:
3e:dd:19:69:50:8a:7f:0e:4c:c7:e8:0a:e4:79:c3:
0e:bd:52:bf:09:d9:e3:fa:c9:9e:03:49:8e:9d:46:
89:f5:53:10:e5:75:cb:5f:84:1a:85:56:ff:20:90:
8b:44:83:63:91:37:a4:47:da:c0:5e:3c:e7:71:98:
0e:5d:59:b1:6a:70:8e:15:4e:12:e1:81:0d:68:e0:
09:54:78:4a:c7:10:16:d8:6e:66:f4:8b:ac:04:29:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:74:3B:19:5F:05:2F:41:F4:16:BB:44:9A:04:E0:C0:3E:E3:CD:5C
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:15:97:9e:05:bf:ec:2c:aa:d3:eb:49:3b:3c:98:bc:e7:
91:c0:ca:2f:25:b9:22:3e:17:11:38:49:2b:86:25:21:df:75:
a6:73:9c:a6:e4:19:d7:fc:d8:8a:c5:f3:e4:74:ae:f9:b9:d5:
0c:67:70:96:6b:13:c8:18:8f:a1:2b:16:1a:81:25:7e:90:14:
d5:89:b0:ba:8a:6d:c9:97:23:1f:a4:ee:94:69:1e:c7:a8:29:
ad:8e:d7:1a:63:98:17:b6:ea:fb:1f:6c:38:85:f9:72:19:fa:
62:bb:05:36:a9:dd:29:e1:c4:f7:b4:0e:64:79:04:7c:4b:b6:
8d:b6:79:8e:44:6a:ba:f8:8c:c5:47:68:67:07:01:05:9c:77:
b0:bc:f3:91:b1:b3:65:a1:19:fb:4b:b9:ae:38:6e:c6:d9:e3:
64:ca:82:fa:ba:e7:75:31:17:cb:fe:63:3a:75:c7:63:32:e9:
ad:12:f3:17:43:e2:65:f1:f0:67:fb:54:b6:ec:1c:e2:62:ef:
9b:56:43:75:fc:ae:8f:96:58:32:1d:c5:8b:58:50:f8:2d:c4:
e0:31:a1:d8:27:ac:74:d6:0a:a9:ba:c1:cf:4b:7a:8d:88:54:
2b:cb:b4:d7:e3:e4:84:a5:0a:86:ff:0e:f8:db:47:45:f3:b0:
db:71:05:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:45 2026 by rpki-client