Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: Qcc3P+f/pE+dFBpwkFLEU+Pvf+37g55akw+ai0x2J1k=
Subject key identifier: 69:4C:D2:EA:87:72:C2:65:90:79:E9:EA:92:0A:28:94:90:C1:56:9A
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 019D299721525362E7E7D1177FCB72B19A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 074B
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: 6tHZhT7N21w3Z616ewGEbAeKLdw.roa (hash: drk0jZRid095U5sVAWQhFh5KREeBBkf7MnZyeJizYAc=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: o/J1ij6PgOZjNcalXx84Q2lFOAIL+ZlhbyZCjPEsXIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:21:52:53:62:e7:e7:d1:17:7f:cb:72:b1:9a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=694cd2ea8772c2659079e9ea920a289490c1569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:48:26:b9:dc:d6:11:b0:9e:12:e8:77:8b:
d9:86:e5:d0:04:c9:bf:f2:b8:62:11:67:16:3d:e2:
fb:9a:19:b9:d0:09:f7:86:65:b6:a9:9a:99:bc:e8:
99:6f:16:50:83:ed:aa:47:e1:59:59:8c:e0:a6:b1:
e4:91:ca:68:84:63:f6:a4:fe:0c:7c:85:6c:11:a1:
57:80:4f:86:84:38:e8:95:85:e5:04:d7:f8:d6:90:
ec:66:53:d4:fd:2e:19:0c:3e:fc:eb:76:b6:b6:18:
53:fc:26:57:cc:48:b7:a2:d1:25:5e:d3:c7:62:99:
13:d4:e1:0c:9c:d2:db:bb:59:3e:01:53:57:62:70:
e6:63:c3:99:62:1d:bd:15:87:76:a6:73:16:1d:e2:
0f:c7:19:81:1d:4e:05:2e:05:9d:8b:2a:50:72:13:
56:6a:61:49:8f:e5:0e:5a:22:fb:a6:b7:90:a1:07:
95:e6:ec:25:cc:75:b0:da:92:cb:78:80:a3:cd:ed:
c1:7a:20:af:51:37:47:9e:3a:ba:48:c2:ad:8c:e1:
2b:03:11:24:71:f5:f7:1d:4a:63:5e:81:9a:e4:c9:
5b:d9:cf:2e:07:04:a4:0d:d2:f2:42:c7:5c:df:95:
d6:8c:bc:f2:76:c1:50:63:58:57:41:fc:2a:f5:0d:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4C:D2:EA:87:72:C2:65:90:79:E9:EA:92:0A:28:94:90:C1:56:9A
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b4:1b:18:cc:f7:00:4a:bb:fe:84:e4:f3:c4:a5:39:b8:f4:
53:c9:b8:4c:4e:54:5c:a7:ea:16:32:28:b5:d4:96:ce:91:57:
9c:7b:de:de:6d:9f:5d:42:f5:d4:42:66:df:58:d2:0b:83:af:
f9:d7:0e:03:99:0c:4f:84:cf:33:a3:8d:83:36:34:4a:ae:21:
4f:0e:23:04:04:45:94:46:99:a8:4a:bf:42:2f:40:fa:2c:75:
9c:6c:b8:34:0d:cb:1b:19:3a:db:ac:f3:31:ee:f4:07:1d:ef:
90:b4:d1:f7:d2:01:5d:2b:b1:e8:69:6d:90:c3:da:dc:07:42:
f0:49:78:b3:61:cf:b3:05:47:b5:e2:b2:84:fd:c1:5a:3d:b0:
a8:76:c7:c3:51:d2:b3:1f:43:60:7a:85:be:d6:db:cd:5b:4b:
42:74:eb:19:75:b1:22:ea:62:56:6f:e7:90:cf:4b:c6:de:d7:
eb:0c:09:eb:e5:b4:b8:91:c6:af:1d:95:82:c2:a6:a5:3e:22:
84:aa:9a:33:6b:d5:98:68:ea:45:62:00:aa:f5:20:a3:80:c7:
8b:b1:60:eb:f5:55:bb:81:13:db:1f:08:d6:48:22:e6:e4:5c:
23:e1:2b:26:2f:57:6b:27:26:bc:6e:3e:73:93:4e:dc:04:fd:
e8:84:92:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plyFSU2Ln59EXf8tysZpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNzNmODM3MzVjOGFiMTBhMGE4ZDQ0ZTE3MDEyOGYwMjM4
NDZlNzkwHhcNMjYwMzI2MTAwMTAzWhcNMjYwMzI3MTAwMTAzWjAzMTEwLwYDVQQD
Eyg2OTRjZDJlYTg3NzJjMjY1OTA3OWU5ZWE5MjBhMjg5NDkwYzE1NjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT9IJrnc1hGwnhLod4vZhuXQBMm/
8rhiEWcWPeL7mhm50An3hmW2qZqZvOiZbxZQg+2qR+FZWYzgprHkkcpohGP2pP4M
fIVsEaFXgE+GhDjolYXlBNf41pDsZlPU/S4ZDD7863a2thhT/CZXzEi3otElXtPH
YpkT1OEMnNLbu1k+AVNXYnDmY8OZYh29FYd2pnMWHeIPxxmBHU4FLgWdiypQchNW
amFJj+UOWiL7preQoQeV5uwlzHWw2pLLeICjze3BeiCvUTdHnjq6SMKtjOErAxEk
cfX3HUpjXoGa5Mlb2c8uBwSkDdLyQsdc35XWjLzydsFQY1hXQfwq9Q0d8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlM0uqHcsJlkHnp6pIKKJSQwVaaMB8GA1UdIwQY
MBaAFItz+Dc1yKsQoKjUThcBKPAjhG55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQt
NjVkZDdmNTJlNDZjLzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNzZhOTUtZjdhZS00NGI5LTlkOGQtNjVkZDdmNTJlNDZj
LzEvaTNQNE56WElxeENncU5ST0Z3RW84Q09FYm5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw7QbGMz3
AEq7/oTk88SlObj0U8m4TE5UXKfqFjIotdSWzpFXnHve3m2fXUL11EJm31jSC4Ov
+dcOA5kMT4TPM6ONgzY0Sq4hTw4jBARFlEaZqEq/Qi9A+ix1nGy4NA3LGxk626zz
Me70Bx3vkLTR99IBXSux6GltkMPa3AdC8El4s2HPswVHteKyhP3BWj2wqHbHw1HS
sx9DYHqFvtbbzVtLQnTrGXWxIupiVm/nkM9Lxt7X6wwJ6+W0uJHGrx2VgsKmpT4i
hKqaM2vVmGjqRWIAqvUgo4DHi7Fg6/VVu4ET2x8I1kgi5uRcI+ErJi9XaycmvG4+
c5NO3AT96ISSNw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:22 2026 by rpki-client