Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: C/xT+UZmDS5LJtBDxyq2wYOVDTCQH/YDRVmL1UZmnoA=
Subject key identifier: 77:36:AB:71:FA:1A:63:18:E7:BB:1D:EE:A0:AE:DA:03:DB:48:1C:46
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019D2A3C0CF4F3F82D9D645A9D4715E5E5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 13:01:11 +0000
Manifest this update: Thu 26 Mar 2026 13:01:11 +0000
Manifest next update: Fri 27 Mar 2026 13:01:11 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: 7eGAAapTL0BNJpnl0KsS5aibyhKp1YxFpBNu9FUuMA8=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:0c:f4:f3:f8:2d:9d:64:5a:9d:47:15:e5:e5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Mar 26 13:01:11 2026 GMT
Not After : Mar 27 13:01:11 2026 GMT
Subject: CN=7736ab71fa1a6318e7bb1deea0aeda03db481c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:3e:85:d4:6a:67:03:e6:1b:6d:28:eb:a7:
f4:61:7d:53:df:61:a0:06:ac:f0:a1:85:e7:0f:14:
5a:73:3d:bc:59:44:0b:96:09:bf:80:c7:84:e1:00:
c8:7a:e9:e6:27:45:54:16:64:0e:18:7b:34:33:af:
1b:c0:47:5f:89:d6:4d:c9:76:ab:e9:1e:fe:13:34:
1c:a1:42:d9:62:6b:ec:ab:bb:8d:43:d9:a3:ea:82:
ef:3d:d4:74:c0:78:88:ae:78:04:91:ad:0e:25:55:
99:36:b5:f4:33:30:a4:32:15:48:31:31:b4:e0:2b:
8f:71:53:9e:e2:df:c6:56:24:e2:ad:e2:85:df:49:
bc:b4:39:e1:af:7f:ad:a5:14:4c:d5:60:f7:e2:b0:
1b:08:9b:57:8f:9b:41:49:73:35:b7:bc:7b:f0:b6:
8d:67:9a:e4:24:a3:49:90:a0:2e:8f:82:50:f1:23:
a0:b5:7e:21:fa:f2:bb:70:31:28:11:b8:74:b1:51:
97:97:e7:4e:bb:b8:e6:0b:74:d5:a9:8b:43:f6:61:
fb:60:a8:1d:52:fc:e3:82:70:17:d3:10:59:29:31:
ac:86:b9:58:df:72:61:2c:db:4a:85:da:4d:84:31:
f6:ee:5b:4d:80:17:7f:89:3e:b7:37:7d:66:c3:37:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:AB:71:FA:1A:63:18:E7:BB:1D:EE:A0:AE:DA:03:DB:48:1C:46
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:77:37:87:1a:d7:38:dc:a3:4f:07:0d:31:fd:ba:76:f5:
4b:96:ff:b7:80:f4:9c:d2:6f:a2:54:47:c0:16:df:be:15:26:
2f:c9:5f:0e:81:5a:33:c3:85:d9:65:ec:a3:6d:88:ee:0d:24:
1e:0a:ba:fa:c8:b4:b4:c7:42:0d:a9:c0:d3:8a:dd:05:73:03:
6a:80:58:b8:f7:92:27:ea:e9:74:a5:9c:e1:d5:1e:b9:d1:9a:
9b:e0:10:d9:60:b8:45:6c:6c:25:10:9b:6e:b1:89:36:ed:c5:
28:25:73:23:2c:e5:32:ae:4a:6c:09:38:6f:15:ec:f4:00:60:
fb:69:57:a5:fd:3e:32:6e:a1:2d:82:c9:3d:88:77:09:8d:e2:
0c:07:b2:c3:0e:20:9b:66:78:32:d0:f1:74:86:88:57:e0:e2:
c7:37:7e:08:cf:5a:13:21:7a:df:99:2f:b7:2d:d2:f1:25:78:
cd:2c:2c:4a:bf:bc:8a:3e:66:32:36:8b:61:d1:fc:62:c9:28:
55:b2:9b:51:84:cf:07:1c:ea:54:c7:e1:2a:80:63:50:6b:c4:
bf:7d:5e:02:7d:8b:d9:0e:95:ad:4b:4a:1d:3e:9c:f2:5b:e6:
89:f5:c3:01:a1:2c:0e:49:a4:59:ad:b3:ba:93:dc:74:52:f1:
57:9a:b3:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPAz08/gtnWRanUcV5eWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjYwMzI2MTMwMTExWhcNMjYwMzI3MTMwMTExWjAzMTEwLwYDVQQD
Eyg3NzM2YWI3MWZhMWE2MzE4ZTdiYjFkZWVhMGFlZGEwM2RiNDgxYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rc+hdRqZwPmG20o66f0YX1T32Gg
BqzwoYXnDxRacz28WUQLlgm/gMeE4QDIeunmJ0VUFmQOGHs0M68bwEdfidZNyXar
6R7+EzQcoULZYmvsq7uNQ9mj6oLvPdR0wHiIrngEka0OJVWZNrX0MzCkMhVIMTG0
4CuPcVOe4t/GViTireKF30m8tDnhr3+tpRRM1WD34rAbCJtXj5tBSXM1t7x78LaN
Z5rkJKNJkKAuj4JQ8SOgtX4h+vK7cDEoEbh0sVGXl+dOu7jmC3TVqYtD9mH7YKgd
UvzjgnAX0xBZKTGshrlY33JhLNtKhdpNhDH27ltNgBd/iT63N31mwzcFgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc2q3H6GmMY57sd7qCu2gPbSBxGMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1x3N4ca
1zjco08HDTH9unb1S5b/t4D0nNJvolRHwBbfvhUmL8lfDoFaM8OF2WXso22I7g0k
Hgq6+si0tMdCDanA04rdBXMDaoBYuPeSJ+rpdKWc4dUeudGam+AQ2WC4RWxsJRCb
brGJNu3FKCVzIyzlMq5KbAk4bxXs9ABg+2lXpf0+Mm6hLYLJPYh3CY3iDAeyww4g
m2Z4MtDxdIaIV+Dixzd+CM9aEyF635kvty3S8SV4zSwsSr+8ij5mMjaLYdH8Ysko
VbKbUYTPBxzqVMfhKoBjUGvEv31eAn2L2Q6VrUtKHT6c8lvmifXDAaEsDkmkWa2z
upPcdFLxV5qzEw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:56:18 2026 by rpki-client