Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: 9Q2UmiG+GrlFkhyxyAfhfMgeykZVBFxaH97O1JkoE+k=
Subject key identifier: 3D:83:61:B0:86:7E:1F:61:95:0B:F9:30:79:59:74:43:C9:F7:56:40
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 019D288474C72CB4F2F835FEC8BAA35271F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:02 +0000
Manifest this update: Thu 26 Mar 2026 05:01:02 +0000
Manifest next update: Fri 27 Mar 2026 05:01:02 +0000
Files and hashes: 1: cqgfNLDExy7FaffRoXOKMQXtqL4.roa (hash: TWz48Wr5Z6qhNEoUkqeyNmR7SZVnU/2APhq7EOM+kUQ=)
2: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: Nbw9vhMkWp0W6Vloowt9stA7qs4MW3RgtgJqBGzFDks=)
3: wy6ybCdcWedAi4Mt3ixAA7PS5a0.roa (hash: G/CGlMinA8eb2TiqC5edW4JcIc15BJpfk+/kohiZa2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:74:c7:2c:b4:f2:f8:35:fe:c8:ba:a3:52:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Mar 26 05:01:02 2026 GMT
Not After : Mar 27 05:01:02 2026 GMT
Subject: CN=3d8361b0867e1f61950bf93079597443c9f75640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:d2:f5:eb:35:20:a0:94:1b:44:e1:d6:b2:
d4:18:02:86:5c:2c:a2:6a:8a:c7:f8:e0:52:e1:1d:
de:bd:1e:34:b1:38:fe:ce:cd:e9:af:3a:c7:16:05:
7d:bb:36:b4:a9:7e:93:bd:42:15:d0:a8:ef:18:40:
37:71:bb:61:95:ff:3f:20:41:2e:23:1b:ca:42:83:
f6:f1:29:55:bd:10:7f:56:eb:40:eb:c2:39:59:e4:
c2:c7:7e:00:69:0c:7a:af:2f:02:f9:38:25:89:be:
a2:e2:77:82:e2:16:9d:93:63:9b:2b:86:08:52:c5:
1d:f2:88:45:d1:d6:3c:27:89:26:3e:ba:18:40:d7:
ab:88:39:0f:fe:d4:41:46:c2:e4:31:8f:dd:47:19:
ff:ad:17:6a:20:62:dc:6c:d3:aa:e2:1e:c7:83:b8:
39:a5:62:93:d3:65:78:fc:82:d8:2e:80:a7:b7:9d:
c2:07:bc:24:19:f1:9a:db:38:34:aa:2d:9d:73:08:
c3:f8:5c:29:34:f9:57:82:a9:9d:68:2c:12:ee:56:
61:e1:ee:c5:da:3f:f8:bd:86:2d:16:60:bb:cf:ce:
20:20:b0:22:fa:f3:c6:bf:1e:1b:2b:72:3b:c5:3f:
68:f3:cd:0b:83:30:0c:a4:b4:34:9d:29:86:df:a1:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:83:61:B0:86:7E:1F:61:95:0B:F9:30:79:59:74:43:C9:F7:56:40
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5f:96:08:31:ec:6c:21:7b:ed:64:4a:9e:af:59:15:73:d1:
2a:5d:81:51:59:a9:74:61:80:f4:a9:3b:c8:21:40:94:f5:26:
93:f3:2b:2e:1b:27:95:9d:cf:d5:07:7c:56:f7:6a:f6:33:34:
ba:6e:16:9d:e7:a9:11:2d:78:a5:f5:ef:03:de:91:ae:dd:ce:
6a:bc:c8:92:14:99:21:d6:e9:47:e5:56:22:6f:98:40:61:f5:
f4:a1:29:20:e7:e3:30:cb:7f:0b:5e:08:ac:6f:88:c0:23:50:
5b:d5:ef:f5:eb:da:a5:ed:be:b5:5a:93:c9:04:ad:72:2b:09:
4e:80:fe:92:38:fe:b2:f4:90:7b:39:2c:9c:ca:eb:d5:65:25:
11:6d:7c:ea:4e:e5:25:b0:a6:1e:41:0f:93:4e:79:e6:37:78:
39:99:7b:78:af:92:36:49:df:40:c4:b1:51:61:62:dc:c5:36:
e2:b3:fa:b5:36:b5:d8:e6:1b:f4:b0:19:a6:c3:f1:c9:da:cb:
07:32:28:d0:8e:37:ef:82:62:e4:f7:6e:01:c8:a6:21:36:de:
1d:e9:df:cc:49:d7:df:f5:b8:02:e2:eb:2d:0a:bc:b9:b1:2e:
79:c0:5d:dd:9c:50:8f:38:d7:7d:0b:5c:c7:2d:63:1e:8c:aa:
a5:d1:6d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohHTHLLTy+DX+yLqjUnHwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTc4MDczOGI4NTNhY2ZmYmFiZGIyMzkxNGM1MGUzNjQy
MWY3NzMwHhcNMjYwMzI2MDUwMTAyWhcNMjYwMzI3MDUwMTAyWjAzMTEwLwYDVQQD
EygzZDgzNjFiMDg2N2UxZjYxOTUwYmY5MzA3OTU5NzQ0M2M5Zjc1NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwADS9es1IKCUG0Th1rLUGAKGXCyi
aorH+OBS4R3evR40sTj+zs3przrHFgV9uza0qX6TvUIV0KjvGEA3cbthlf8/IEEu
IxvKQoP28SlVvRB/VutA68I5WeTCx34AaQx6ry8C+Tglib6i4neC4hadk2ObK4YI
UsUd8ohF0dY8J4kmProYQNeriDkP/tRBRsLkMY/dRxn/rRdqIGLcbNOq4h7Hg7g5
pWKT02V4/ILYLoCnt53CB7wkGfGa2zg0qi2dcwjD+FwpNPlXgqmdaCwS7lZh4e7F
2j/4vYYtFmC7z84gILAi+vPGvx4bK3I7xT9o880LgzAMpLQ0nSmG36EizQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2DYbCGfh9hlQv5MHlZdEPJ91ZAMB8GA1UdIwQY
MBaAFIingHOLhTrP+6vbI5FMUONkIfdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzkt
NjZmNTZlZjljZTI2LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iODk3MDQtNGZkMi00ZTA3LWEwMzktNjZmNTZlZjljZTI2
LzEvaUtlQWM0dUZPc183cTlzamtVeFE0MlFoOTNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxF+WCDHs
bCF77WRKnq9ZFXPRKl2BUVmpdGGA9Kk7yCFAlPUmk/MrLhsnlZ3P1Qd8Vvdq9jM0
um4WneepES14pfXvA96Rrt3OarzIkhSZIdbpR+VWIm+YQGH19KEpIOfjMMt/C14I
rG+IwCNQW9Xv9evape2+tVqTyQStcisJToD+kjj+svSQezksnMrr1WUlEW186k7l
JbCmHkEPk0555jd4OZl7eK+SNknfQMSxUWFi3MU24rP6tTa12OYb9LAZpsPxydrL
BzIo0I4374Ji5PduAcimITbeHenfzEnX3/W4AuLrLQq8ubEuecBd3ZxQjzjXfQtc
xy1jHoyqpdFtvg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:12 2026 by rpki-client