Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
File: iW81xeAyGs0CFn3viAfwu29xwo0.mft (raw, json)
Hash identifier: Yd3cnKS/jPjtilLYXGmh7KI/3YtTe+H9ArRfpnnfyNQ=
Subject key identifier: 95:F3:F8:8B:9F:42:67:04:20:ED:7F:05:E7:D7:DF:9D:39:79:59:DD
Authority key identifier: 89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
Certificate issuer: /CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Certificate serial: 019D28BBE225E2F42C5669814F4582F11F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
Manifest number: 1449
Signing time: Thu 26 Mar 2026 06:01:34 +0000
Manifest this update: Thu 26 Mar 2026 06:01:34 +0000
Manifest next update: Fri 27 Mar 2026 06:01:34 +0000
Files and hashes: 1: 7O5GfirPqz8Z-l1UI_YHQO7lQh4.roa (hash: tzbY87wDHF363K7TSFpJw4yb7j/fVIJaQ3EDQVJafo4=)
2: iW81xeAyGs0CFn3viAfwu29xwo0.crl (hash: f8SrFLwgxXG7/JUHo1L7o3ixSQfpN6rXxN5LW7xljHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:e2:25:e2:f4:2c:56:69:81:4f:45:82:f1:1f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896f35c5e0321acd02167def8807f0bb6f71c28d
Validity
Not Before: Mar 26 06:01:34 2026 GMT
Not After : Mar 27 06:01:34 2026 GMT
Subject: CN=95f3f88b9f42670420ed7f05e7d7df9d397959dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:47:14:42:34:9f:8a:d0:9e:58:3a:18:f2:
fb:fb:2d:ea:a1:ff:f3:8c:15:d9:9f:d1:2e:99:0a:
94:94:74:be:bf:01:f9:83:87:04:9b:e9:8d:d7:cd:
d6:86:7d:28:f7:34:58:ae:9a:9f:3e:0a:cb:af:e8:
88:63:ab:e1:d0:4e:70:8f:6b:50:8b:49:20:ce:e3:
52:87:87:f1:52:3e:b0:f1:4b:cd:45:2e:fe:09:50:
53:bf:10:eb:38:76:30:fc:9c:35:85:c2:5b:f1:e7:
9e:c5:9c:e4:58:3c:21:26:fa:ea:67:c2:15:ba:7a:
98:4f:6c:78:06:01:7b:bb:46:42:3e:72:af:05:aa:
3d:f6:5a:d8:55:7d:d8:98:08:41:05:fe:0f:ac:9b:
01:c5:0f:72:f6:39:77:2d:46:25:3f:3e:ad:17:e9:
28:4e:7d:50:1c:8d:ff:5e:87:02:5b:31:e0:40:90:
87:88:f5:c0:af:cf:d4:5a:2a:4c:4f:97:3e:83:88:
4b:ec:74:22:ed:38:85:75:c2:5c:2b:c0:61:90:f9:
d1:75:a3:70:bc:8c:7c:cb:c8:93:98:e5:b1:21:da:
2f:9c:80:0e:3c:c4:1a:8a:f7:d7:4a:b4:08:1f:92:
29:0d:30:34:3a:a3:7c:fd:f6:f2:a5:ac:be:4d:58:
20:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F3:F8:8B:9F:42:67:04:20:ED:7F:05:E7:D7:DF:9D:39:79:59:DD
X509v3 Authority Key Identifier:
keyid:89:6F:35:C5:E0:32:1A:CD:02:16:7D:EF:88:07:F0:BB:6F:71:C2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW81xeAyGs0CFn3viAfwu29xwo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/80c4c0-c729-418e-80af-2299a67e6001/1/iW81xeAyGs0CFn3viAfwu29xwo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:59:c6:87:0b:f5:46:11:bb:38:13:da:ec:fd:57:83:70:9f:
84:cd:7d:86:f7:30:24:5f:33:74:28:42:13:f7:de:55:9b:79:
ef:18:61:69:05:03:0f:49:54:57:67:db:e6:5e:5f:ce:40:6b:
84:c8:a5:51:82:e9:11:85:bb:be:65:5f:75:0c:3e:2e:b9:8c:
c6:e2:95:fc:5a:54:72:52:eb:a5:85:f0:2b:14:77:cc:ba:a4:
ab:7c:5f:18:68:79:b2:e9:67:c7:dd:02:98:d8:1a:a2:d0:5d:
77:d5:ba:5e:ae:90:b6:20:32:18:e2:18:37:a4:0b:ef:e9:c6:
27:d4:84:f9:bc:68:2f:03:9b:67:f2:c4:f0:e7:7e:e3:d9:1d:
1e:7c:85:83:92:6f:9e:f5:21:1f:63:4e:d3:79:69:a3:4e:92:
76:57:ff:aa:f3:17:70:6d:51:98:93:e9:14:8a:a9:04:ed:45:
87:f7:b4:dd:84:29:3e:bd:f9:8b:19:3e:63:09:ef:ce:35:8e:
ef:26:3d:a2:ab:9e:a8:d2:57:14:a3:94:84:bf:c1:f1:14:7e:
fd:19:66:be:73:5f:c8:d5:93:83:69:e3:cb:c7:9c:93:b3:90:
17:79:c3:cf:e4:bb:92:36:ae:ad:26:15:76:53:0c:be:a6:b5:
ee:db:4f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou+Il4vQsVmmBT0WC8R9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmYzNWM1ZTAzMjFhY2QwMjE2N2RlZjg4MDdmMGJiNmY3
MWMyOGQwHhcNMjYwMzI2MDYwMTM0WhcNMjYwMzI3MDYwMTM0WjAzMTEwLwYDVQQD
Eyg5NWYzZjg4YjlmNDI2NzA0MjBlZDdmMDVlN2Q3ZGY5ZDM5Nzk1OWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdHFEI0n4rQnlg6GPL7+y3qof/z
jBXZn9EumQqUlHS+vwH5g4cEm+mN183Whn0o9zRYrpqfPgrLr+iIY6vh0E5wj2tQ
i0kgzuNSh4fxUj6w8UvNRS7+CVBTvxDrOHYw/Jw1hcJb8eeexZzkWDwhJvrqZ8IV
unqYT2x4BgF7u0ZCPnKvBao99lrYVX3YmAhBBf4PrJsBxQ9y9jl3LUYlPz6tF+ko
Tn1QHI3/XocCWzHgQJCHiPXAr8/UWipMT5c+g4hL7HQi7TiFdcJcK8BhkPnRdaNw
vIx8y8iTmOWxIdovnIAOPMQaivfXSrQIH5IpDTA0OqN8/fbypay+TVggPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXz+IufQmcEIO1/BefX3505eVndMB8GA1UdIwQY
MBaAFIlvNcXgMhrNAhZ974gH8LtvccKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYt
MjI5OWE2N2U2MDAxLzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84MGM0YzAtYzcyOS00MThlLTgwYWYtMjI5OWE2N2U2MDAx
LzEvaVc4MXhlQXlHczBDRm4zdmlBZnd1Mjl4d28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlnGhwv1
RhG7OBPa7P1Xg3CfhM19hvcwJF8zdChCE/feVZt57xhhaQUDD0lUV2fb5l5fzkBr
hMilUYLpEYW7vmVfdQw+LrmMxuKV/FpUclLrpYXwKxR3zLqkq3xfGGh5sulnx90C
mNgaotBdd9W6Xq6QtiAyGOIYN6QL7+nGJ9SE+bxoLwObZ/LE8Od+49kdHnyFg5Jv
nvUhH2NO03lpo06Sdlf/qvMXcG1RmJPpFIqpBO1Fh/e03YQpPr35ixk+YwnvzjWO
7yY9oqueqNJXFKOUhL/B8RR+/RlmvnNfyNWTg2njy8eck7OQF3nDz+S7kjaurSYV
dlMMvqa17ttP8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:07:19 2026 by rpki-client