Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File: invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier: FdJ6Z8s3YCWfPUIRZdWBWj/MO0m24iSpSpKiLZOEmGw=
Subject key identifier: 29:4A:B0:39:FA:F6:A9:18:14:AF:E4:E8:CB:F6:3B:5D:4A:EC:7F:07
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer: /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial: 019D27DFC8D579847C49388EBF38973719FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number: 0618
Signing time: Thu 26 Mar 2026 02:01:10 +0000
Manifest this update: Thu 26 Mar 2026 02:01:10 +0000
Manifest next update: Fri 27 Mar 2026 02:01:10 +0000
Files and hashes: 1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: fHxLMJKFwboX0F1dlyGWJJbv/uinwP1HnzRpdJ936yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c8:d5:79:84:7c:49:38:8e:bf:38:97:37:19:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Validity
Not Before: Mar 26 02:01:10 2026 GMT
Not After : Mar 27 02:01:10 2026 GMT
Subject: CN=294ab039faf6a91814afe4e8cbf63b5d4aec7f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4c:cf:e8:0f:b3:5d:e2:e8:ed:f3:d8:6b:a9:
f3:3b:96:46:1f:a4:d5:d5:12:e9:eb:80:a4:aa:48:
ce:b5:dc:e5:81:d8:7c:57:43:f5:ba:af:c5:7f:02:
28:5e:b6:0a:7a:52:77:9e:32:80:1e:db:16:f3:c4:
75:34:6a:04:ef:ba:b4:a2:44:2b:0d:5a:8f:af:aa:
b6:17:ed:12:5c:68:a6:63:a8:1c:54:67:da:81:9a:
a8:97:ee:00:82:b1:b9:c8:9f:72:ad:20:ec:5e:7b:
7c:63:b5:83:2f:ab:7c:c8:09:6f:65:e8:88:7a:66:
ed:1a:38:e4:ed:15:4d:76:07:d1:26:9c:76:9d:dd:
6b:b2:68:2a:b0:10:8e:75:b9:49:0e:cf:b4:ca:09:
fd:41:57:ae:3d:85:ed:fc:fc:49:ae:fd:19:4c:fe:
31:fc:5d:f4:8d:aa:1d:10:98:7a:0a:6f:b9:d0:02:
9b:d3:81:c1:3c:71:56:25:39:fc:ae:cd:c5:65:51:
ac:cf:65:68:8d:97:c4:66:fd:dd:ed:90:05:bd:39:
2a:62:3b:64:f8:52:74:05:26:1d:9c:ef:41:54:de:
3a:3f:51:39:7d:33:86:1a:a0:ec:77:c5:06:f3:66:
6f:76:32:d1:cc:cc:96:6c:9c:79:24:19:2f:3b:73:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:B0:39:FA:F6:A9:18:14:AF:E4:E8:CB:F6:3B:5D:4A:EC:7F:07
X509v3 Authority Key Identifier:
keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:37:30:eb:75:1b:d7:85:27:80:bd:97:48:6c:4c:a3:89:dc:
e5:fc:2a:95:1c:6d:4a:f3:37:24:41:29:30:5b:72:21:7c:91:
5b:cb:fb:8a:13:03:bf:6a:f5:d0:a9:de:79:26:00:9c:76:9e:
d3:16:c2:ba:47:c7:ff:ce:63:56:46:bb:a9:f6:16:e1:18:e9:
82:4a:c2:95:b3:1f:ea:d2:1b:75:c9:74:21:f6:be:62:87:0d:
34:bb:86:d5:c6:f7:17:d6:5e:9d:f1:6f:9e:13:b7:f5:a3:48:
d9:b3:52:4f:35:81:f0:23:b0:43:e3:f5:03:6f:05:63:4e:29:
99:45:08:64:e7:ea:05:9f:58:69:bb:2d:65:b3:c4:bd:51:0f:
57:7a:91:5a:e6:d4:a3:c3:4c:52:53:10:5f:45:fc:cc:64:e5:
16:98:fa:f1:7a:33:22:60:04:eb:9f:86:3e:3d:91:28:0f:c5:
15:c6:ef:1c:5b:8c:fe:2c:3a:35:dc:a8:13:93:3d:ba:fa:15:
a7:a2:07:d8:a8:fa:1f:8d:d7:84:2b:54:fa:7a:34:e5:c8:ae:
99:eb:10:3a:31:d6:d0:d5:c1:ad:26:35:94:f6:55:78:f8:d9:
b2:e0:d6:54:b7:23:fc:8b:2a:90:37:9e:62:a0:c7:44:65:ed:
a9:4e:23:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n38jVeYR8STiOvziXNxn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2JkZjJmNWI5NjEyMzJlNThkYjI4OWI0OGE5ZmUyNDVm
YTlkNmMwHhcNMjYwMzI2MDIwMTEwWhcNMjYwMzI3MDIwMTEwWjAzMTEwLwYDVQQD
EygyOTRhYjAzOWZhZjZhOTE4MTRhZmU0ZThjYmY2M2I1ZDRhZWM3ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUzP6A+zXeLo7fPYa6nzO5ZGH6TV
1RLp64CkqkjOtdzlgdh8V0P1uq/FfwIoXrYKelJ3njKAHtsW88R1NGoE77q0okQr
DVqPr6q2F+0SXGimY6gcVGfagZqol+4AgrG5yJ9yrSDsXnt8Y7WDL6t8yAlvZeiI
embtGjjk7RVNdgfRJpx2nd1rsmgqsBCOdblJDs+0ygn9QVeuPYXt/PxJrv0ZTP4x
/F30jaodEJh6Cm+50AKb04HBPHFWJTn8rs3FZVGsz2VojZfEZv3d7ZAFvTkqYjtk
+FJ0BSYdnO9BVN46P1E5fTOGGqDsd8UG82ZvdjLRzMyWbJx5JBkvO3Nm9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClKsDn69qkYFK/k6Mv2O11K7H8HMB8GA1UdIwQY
MBaAFIp73y9blhIy5Y2yibSKn+JF+p1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAt
Njc2ODViNGRjOGI5LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hY2Q3NDYtNzFlYi00Y2RlLWFlMjAtNjc2ODViNGRjOGI5
LzEvaW52ZkwxdVdFakxsamJLSnRJcWY0a1g2bld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajcw63Ub
14UngL2XSGxMo4nc5fwqlRxtSvM3JEEpMFtyIXyRW8v7ihMDv2r10KneeSYAnHae
0xbCukfH/85jVka7qfYW4RjpgkrClbMf6tIbdcl0Ifa+YocNNLuG1cb3F9ZenfFv
nhO39aNI2bNSTzWB8COwQ+P1A28FY04pmUUIZOfqBZ9YabstZbPEvVEPV3qRWubU
o8NMUlMQX0X8zGTlFpj68XozImAE65+GPj2RKA/FFcbvHFuM/iw6NdyoE5M9uvoV
p6IH2Kj6H43XhCtU+no05ciumesQOjHW0NXBrSY1lPZVePjZsuDWVLcj/IsqkDee
YqDHRGXtqU4jVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:59 2026 by rpki-client