Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: eNEUUWPl6xa1fJ/0vjV5tzASgJwolf/45h1mVb6OHmI=
Subject key identifier: 3B:B9:10:7E:28:D2:59:4F:25:9A:07:8D:37:4D:2B:94:0B:8D:6A:18
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019D33E362D234C3CF42D22E4347FE26E536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 10F6
Signing time: Sat 28 Mar 2026 10:00:32 +0000
Manifest this update: Sat 28 Mar 2026 10:00:32 +0000
Manifest next update: Sun 29 Mar 2026 10:00:32 +0000
Files and hashes: 1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=)
2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=)
3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: Xzvj8FYw4PDJZt01zoTAfS8Q7l5NEo+r/6270qD4rRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:62:d2:34:c3:cf:42:d2:2e:43:47:fe:26:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Mar 28 10:00:32 2026 GMT
Not After : Mar 29 10:00:32 2026 GMT
Subject: CN=3bb9107e28d2594f259a078d374d2b940b8d6a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:e3:8e:be:6b:c0:ec:35:ea:73:e7:7f:69:
28:f8:36:7b:76:5d:2d:68:14:ea:2f:59:06:a4:c0:
fc:de:59:58:21:8c:6f:61:2e:79:1e:52:9e:f5:9f:
c2:ce:61:58:6b:4d:60:19:fa:6d:b9:80:16:28:54:
94:b7:8f:bc:68:12:d9:f4:76:78:39:79:a3:ab:be:
9d:3a:b3:91:88:93:b0:fe:d4:06:4e:d8:61:3f:13:
5c:aa:fc:c5:69:44:ac:4e:84:f7:00:23:4c:23:5f:
15:6e:f1:06:8c:ed:9e:ed:45:bc:2e:d9:eb:13:96:
6e:34:f9:7b:20:6b:fb:69:7c:b9:75:9f:f2:c2:cc:
8f:83:15:12:a1:33:82:10:73:e7:51:27:a2:1f:a3:
91:6b:58:d6:50:be:6d:12:37:e3:b2:7a:7c:ee:d7:
67:92:4e:32:f8:4a:7f:1a:25:f0:59:5b:29:50:5c:
f6:7a:de:a6:07:6a:29:b2:62:b8:47:eb:38:1b:21:
60:b9:1c:23:65:c0:b9:8c:55:f1:4a:60:12:20:8a:
27:52:e1:ad:f0:55:94:7d:92:2e:71:86:98:7b:55:
2f:6c:29:0e:af:c2:a9:0f:2f:12:50:c2:de:1c:a2:
7c:a1:4d:5a:d4:c1:46:1f:10:d8:1f:aa:72:1e:8c:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:10:7E:28:D2:59:4F:25:9A:07:8D:37:4D:2B:94:0B:8D:6A:18
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:86:c9:07:fe:82:bb:4c:e7:b4:76:81:cd:93:c6:60:ec:
2c:21:f9:2f:5c:4c:6f:59:66:5e:dc:db:45:f3:12:a7:99:3f:
33:c8:c1:ad:a0:2c:48:d8:91:3a:96:48:14:49:b8:d3:ab:fd:
d4:ae:c0:0d:fc:c1:ef:3e:a6:2b:1f:3c:03:80:cb:5b:02:a9:
c1:38:4d:f1:ea:59:38:37:d0:e9:fd:fe:9f:59:90:36:87:9e:
6d:5f:30:9d:02:52:dc:94:a3:56:43:69:f6:07:ff:d1:01:bb:
c6:39:2e:9e:88:d5:e3:81:97:d0:a2:43:b7:59:76:1a:18:ac:
45:3d:88:71:5e:cc:ac:4b:67:3c:a3:96:6c:ae:f9:1a:d7:40:
96:66:8d:3a:bb:d7:65:dc:eb:24:89:d6:07:8a:73:e9:88:e9:
f1:bf:f8:65:00:0c:94:5f:71:69:f2:86:85:61:d7:3f:15:e4:
0c:b1:a1:22:22:ed:39:46:49:6f:1a:ef:75:bb:f3:39:b2:95:
5d:c9:bb:c1:e4:a2:2c:a3:eb:58:d8:b8:3f:d5:0f:4a:fe:3b:
50:9f:dd:9e:bb:97:7e:94:b2:17:09:bb:7e:17:f3:31:09:d6:
4a:8a:64:f4:ed:fd:cc:22:ce:d8:fb:c8:39:40:1b:ac:54:a0:
6a:92:41:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0z42LSNMPPQtIuQ0f+JuU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj
ZGIxNGUwHhcNMjYwMzI4MTAwMDMyWhcNMjYwMzI5MTAwMDMyWjAzMTEwLwYDVQQD
EygzYmI5MTA3ZTI4ZDI1OTRmMjU5YTA3OGQzNzRkMmI5NDBiOGQ2YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48fjjr5rwOw16nPnf2ko+DZ7dl0t
aBTqL1kGpMD83llYIYxvYS55HlKe9Z/CzmFYa01gGfptuYAWKFSUt4+8aBLZ9HZ4
OXmjq76dOrORiJOw/tQGTthhPxNcqvzFaUSsToT3ACNMI18VbvEGjO2e7UW8Ltnr
E5ZuNPl7IGv7aXy5dZ/ywsyPgxUSoTOCEHPnUSeiH6ORa1jWUL5tEjfjsnp87tdn
kk4y+Ep/GiXwWVspUFz2et6mB2opsmK4R+s4GyFguRwjZcC5jFXxSmASIIonUuGt
8FWUfZIucYaYe1UvbCkOr8KpDy8SUMLeHKJ8oU1a1MFGHxDYH6pyHoxf0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDu5EH4o0llPJZoHjTdNK5QLjWoYMB8GA1UdIwQY
MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt
MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh
LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbaGyQf+
grtM57R2gc2TxmDsLCH5L1xMb1lmXtzbRfMSp5k/M8jBraAsSNiROpZIFEm406v9
1K7ADfzB7z6mKx88A4DLWwKpwThN8epZODfQ6f3+n1mQNoeebV8wnQJS3JSjVkNp
9gf/0QG7xjkunojV44GX0KJDt1l2GhisRT2IcV7MrEtnPKOWbK75GtdAlmaNOrvX
ZdzrJInWB4pz6Yjp8b/4ZQAMlF9xafKGhWHXPxXkDLGhIiLtOUZJbxrvdbvzObKV
Xcm7weSiLKPrWNi4P9UPSv47UJ/dnruXfpSyFwm7fhfzMQnWSopk9O39zCLO2PvI
OUAbrFSgapJBjQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:22 2026 by rpki-client