Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: s4Y1/TnEo1oWuEwlUXOfTTOlAJovsAvk5Q2YNIW0RsA=
Subject key identifier: 21:9C:A3:33:AB:56:75:72:86:B2:3D:BB:5A:10:98:BC:13:F1:B7:84
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 019D281668C49E8465D8B0F1B30EC6B97DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0AFE
Signing time: Thu 26 Mar 2026 03:00:50 +0000
Manifest this update: Thu 26 Mar 2026 03:00:50 +0000
Manifest next update: Fri 27 Mar 2026 03:00:50 +0000
Files and hashes: 1: 78kqC8j6LoRWjdngK7kKihALOYk.roa (hash: 7AMmVdZKov3gEwV1YiogGxz3l6UvzVaoKb5Zky6YO88=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: swmuZEnkuomi4FNLQ13RoUhDBGQw5FSwwiQesLjXJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:68:c4:9e:84:65:d8:b0:f1:b3:0e:c6:b9:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Mar 26 03:00:50 2026 GMT
Not After : Mar 27 03:00:50 2026 GMT
Subject: CN=219ca333ab56757286b23dbb5a1098bc13f1b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:d1:47:fa:c0:5e:e6:00:9c:43:1a:56:1c:
43:70:b5:cf:fc:85:da:ea:61:dc:6b:a3:c5:6f:4d:
f6:37:02:96:52:27:31:a2:d6:ea:8b:ab:36:67:ca:
30:2b:f2:43:7d:f3:cb:08:24:0d:a2:94:fc:9c:86:
51:a9:b0:a6:a9:67:69:be:b2:7d:21:bf:55:56:ca:
c6:bd:9f:63:7e:55:98:bc:0d:bd:ef:21:e0:df:49:
dd:db:07:33:c9:b4:33:2d:d5:6b:22:0d:c5:04:1d:
5a:a8:15:c4:0e:bd:61:7a:3e:b0:ee:32:b3:87:54:
40:4a:e4:8d:cb:5b:b2:fb:c1:1a:23:bb:fe:ae:fd:
79:e6:7e:44:0e:6b:97:5e:bf:c0:8f:75:16:e6:0e:
d0:a6:6c:67:9d:4f:f3:4d:98:9a:e4:24:2d:a5:51:
d8:e0:88:0e:ee:5d:f7:c6:68:f6:8a:f6:04:42:08:
92:b3:c4:be:86:b3:cc:14:7b:21:8c:2f:f7:1e:56:
36:17:8e:95:0f:3b:e7:50:9a:36:51:dd:95:26:53:
7d:6b:64:58:27:fe:12:4c:c9:73:51:cc:d0:4a:04:
dd:d8:83:b7:fe:93:24:c8:eb:04:3c:26:c0:f9:3a:
99:38:07:51:9d:3f:30:bd:24:d8:57:57:b0:fb:cf:
0d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9C:A3:33:AB:56:75:72:86:B2:3D:BB:5A:10:98:BC:13:F1:B7:84
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:12:ac:29:b9:6b:a1:ba:10:74:9e:d8:94:b1:89:11:e0:92:
9d:b2:65:bd:fc:20:05:af:e1:5d:80:2a:62:0a:a5:61:d6:45:
f0:62:13:d9:ab:5d:ec:c3:4c:ec:56:22:25:63:a9:ea:a4:df:
48:57:3a:07:13:61:28:58:11:8d:7f:e2:67:ec:7c:23:39:18:
ba:00:f7:e7:68:72:e5:93:70:ee:f7:6d:62:01:ae:62:5b:bc:
08:37:19:fe:9d:e3:61:b1:fb:c8:e8:35:74:37:30:d5:7b:f1:
78:28:45:4d:ca:87:88:9a:c4:52:20:4f:ff:6f:a3:87:8e:26:
c9:dc:67:2e:a8:c3:9c:2a:78:26:32:76:d3:ed:3e:0a:6f:69:
b0:a1:85:c7:c3:8c:97:20:48:b5:28:6a:b9:d2:94:21:55:27:
39:59:1b:88:d6:ff:98:e3:73:93:7a:13:2d:3c:42:a5:07:07:
fc:f5:83:e1:f9:62:f8:da:1e:77:be:00:5e:73:25:c3:d2:8b:
5c:91:b6:9a:f1:6e:1f:dc:11:15:a0:50:b4:13:16:59:be:ff:
84:ac:38:09:4d:f9:63:d9:69:5a:39:20:25:3b:b9:6f:27:61:
ff:86:44:f0:ed:d7:49:d1:f2:c0:c2:0c:f0:5a:c7:de:38:40:
bb:01:6e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmjEnoRl2LDxsw7GuX2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyOWZiMGZiM2QyNzhlMWIyODBhNzc3ZGUyMDBlZmJkMDhi
YWFjMzAwHhcNMjYwMzI2MDMwMDUwWhcNMjYwMzI3MDMwMDUwWjAzMTEwLwYDVQQD
EygyMTljYTMzM2FiNTY3NTcyODZiMjNkYmI1YTEwOThiYzEzZjFiNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwojRR/rAXuYAnEMaVhxDcLXP/IXa
6mHca6PFb032NwKWUicxotbqi6s2Z8owK/JDffPLCCQNopT8nIZRqbCmqWdpvrJ9
Ib9VVsrGvZ9jflWYvA297yHg30nd2wczybQzLdVrIg3FBB1aqBXEDr1hej6w7jKz
h1RASuSNy1uy+8EaI7v+rv155n5EDmuXXr/Aj3UW5g7QpmxnnU/zTZia5CQtpVHY
4IgO7l33xmj2ivYEQgiSs8S+hrPMFHshjC/3HlY2F46VDzvnUJo2Ud2VJlN9a2RY
J/4STMlzUczQSgTd2IO3/pMkyOsEPCbA+TqZOAdRnT8wvSTYV1ew+88N/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGcozOrVnVyhrI9u1oQmLwT8beEMB8GA1UdIwQY
MBaAFCKfsPs9J44bKAp3feIA770IuqwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTct
N2I5ODY2MzNhYzVlLzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82YzU0YTktOWZlNS00ODkzLTlkYTctN2I5ODY2MzNhYzVl
LzEvSXAtdy16MG5qaHNvQ25kOTRnRHZ2UWk2ckRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihKsKblr
oboQdJ7YlLGJEeCSnbJlvfwgBa/hXYAqYgqlYdZF8GIT2atd7MNM7FYiJWOp6qTf
SFc6BxNhKFgRjX/iZ+x8IzkYugD352hy5ZNw7vdtYgGuYlu8CDcZ/p3jYbH7yOg1
dDcw1XvxeChFTcqHiJrEUiBP/2+jh44mydxnLqjDnCp4JjJ20+0+Cm9psKGFx8OM
lyBItShqudKUIVUnOVkbiNb/mONzk3oTLTxCpQcH/PWD4fli+Noed74AXnMlw9KL
XJG2mvFuH9wRFaBQtBMWWb7/hKw4CU35Y9lpWjkgJTu5bydh/4ZE8O3XSdHywMIM
8FrH3jhAuwFucA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:13:02 2026 by rpki-client