Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File: is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier: J+ebgCG/ntVkzHfX55OPwPf5jA6V5zYN+lnKS8zLDD4=
Subject key identifier: 13:60:F4:07:02:FD:EB:5F:D6:B1:47:FA:93:4B:1F:BE:9C:DE:59:7E
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 019D296083955E42ECFC788138F5CAC8D245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:24 +0000
Manifest this update: Thu 26 Mar 2026 09:01:24 +0000
Manifest next update: Fri 27 Mar 2026 09:01:24 +0000
Files and hashes: 1: 9tcqRBW5dWCPlBmOmJEm6c--iDU.roa (hash: u8oO/RgVRYujIoxnuHbXuI4mqtgSWQD8/zpjHQZYwcI=)
2: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: wuNi91K2Le7Ng+35MKgtDS1NCHf9ELzHv5LTNZVK0g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:83:95:5e:42:ec:fc:78:81:38:f5:ca:c8:d2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Mar 26 09:01:24 2026 GMT
Not After : Mar 27 09:01:24 2026 GMT
Subject: CN=1360f40702fdeb5fd6b147fa934b1fbe9cde597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:04:c5:13:63:27:65:bf:26:6a:32:75:ee:78:
0f:82:f8:04:54:f6:2b:6a:4d:91:f9:62:19:d7:bf:
50:b4:9b:45:5a:fb:17:d2:4d:74:b7:c1:0d:3d:ba:
37:c4:52:42:2a:a7:91:4a:1e:8a:58:3a:d0:9f:33:
50:12:de:5f:c5:a6:db:3b:aa:ae:18:15:c0:0a:35:
80:ba:03:17:21:3d:42:e8:1b:f1:50:49:63:db:f5:
f7:45:a7:24:a9:a8:18:e6:5a:52:ce:d7:28:21:22:
48:25:99:ea:94:6f:17:e9:40:19:ab:03:02:0a:37:
33:ca:51:fc:a3:d8:0f:8c:c7:aa:18:e9:14:ff:d0:
24:32:18:d1:7e:b4:5c:83:6b:26:3e:ff:7c:9e:64:
4c:bf:87:d9:40:0d:c0:bd:03:2c:95:da:c7:48:d6:
d7:22:42:1c:b0:79:31:d5:a1:36:28:17:d5:50:1d:
39:76:d3:09:4e:1b:85:05:12:26:65:79:c2:e1:fe:
7d:30:9a:37:c0:46:83:ff:64:31:ed:a8:96:af:7b:
a1:0f:d9:dc:35:03:51:29:4a:6c:f8:79:c7:56:57:
28:09:3b:92:b4:f1:8a:c3:12:f2:b9:e7:84:c7:8f:
ff:be:73:ca:17:0d:39:44:be:e7:24:10:ab:5e:6f:
54:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:F4:07:02:FD:EB:5F:D6:B1:47:FA:93:4B:1F:BE:9C:DE:59:7E
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d7:a3:06:58:4b:72:3d:78:1e:19:d7:f8:27:57:55:36:a0:
be:f2:ef:6f:bd:61:b1:34:9c:0c:d2:89:48:d3:fe:04:5c:d9:
7d:de:5a:4a:e5:93:c9:ed:9f:6b:c3:29:8c:fe:54:ac:31:dd:
69:52:69:cc:46:5b:72:8b:4f:bf:60:5c:73:08:c4:63:04:b3:
b4:a4:3f:92:4a:cb:ba:6c:dc:43:d7:ef:5c:fe:cf:0d:aa:b9:
ab:d8:dd:35:11:55:37:40:65:af:36:8c:4c:c8:66:1a:a8:d5:
a0:ea:78:7c:23:b0:ad:f6:a8:8f:b7:04:3b:6d:08:fc:31:af:
4b:5f:02:f4:13:1c:4f:07:a0:45:26:63:2a:eb:89:73:f7:5c:
90:0b:01:6a:46:29:90:62:fa:02:e1:2c:d6:ea:a7:7a:32:dc:
a3:52:24:a3:ae:41:49:09:eb:eb:22:4f:14:dd:ed:66:8a:44:
dc:ff:08:89:80:99:8e:fc:49:1d:bd:7a:c9:5a:3e:12:5a:bf:
9c:46:64:7b:f2:1e:0e:4b:ac:a9:4c:99:3f:06:30:ba:fb:77:
bb:4c:f4:f3:cd:98:59:c5:a1:02:8e:ba:58:e5:f1:33:06:30:
1b:33:aa:ed:21:55:fa:19:9e:a1:33:af:5a:ce:bb:d7:08:27:
af:c6:53:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYIOVXkLs/HiBOPXKyNJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2RkZDVjMzBkNTgwZWIwZmVlY2EyYTE2Y2Y1YzVhOGIy
NTY4ZmQwHhcNMjYwMzI2MDkwMTI0WhcNMjYwMzI3MDkwMTI0WjAzMTEwLwYDVQQD
EygxMzYwZjQwNzAyZmRlYjVmZDZiMTQ3ZmE5MzRiMWZiZTljZGU1OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQTFE2MnZb8majJ17ngPgvgEVPYr
ak2R+WIZ179QtJtFWvsX0k10t8ENPbo3xFJCKqeRSh6KWDrQnzNQEt5fxabbO6qu
GBXACjWAugMXIT1C6BvxUElj2/X3RackqagY5lpSztcoISJIJZnqlG8X6UAZqwMC
CjczylH8o9gPjMeqGOkU/9AkMhjRfrRcg2smPv98nmRMv4fZQA3AvQMsldrHSNbX
IkIcsHkx1aE2KBfVUB05dtMJThuFBRImZXnC4f59MJo3wEaD/2Qx7aiWr3uhD9nc
NQNRKUps+HnHVlcoCTuStPGKwxLyueeEx4//vnPKFw05RL7nJBCrXm9UhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNg9AcC/etf1rFH+pNLH76c3ll+MB8GA1UdIwQY
MBaAFIrN3Vww1YDrD+7KKhbPXFqLJWj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDIt
MTdiMWM3Mzc5MzAwLzEvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDItMTdiMWM3Mzc5MzAw
LzEvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA19ejBlhL
cj14HhnX+CdXVTagvvLvb71hsTScDNKJSNP+BFzZfd5aSuWTye2fa8MpjP5UrDHd
aVJpzEZbcotPv2BccwjEYwSztKQ/kkrLumzcQ9fvXP7PDaq5q9jdNRFVN0BlrzaM
TMhmGqjVoOp4fCOwrfaoj7cEO20I/DGvS18C9BMcTwegRSZjKuuJc/dckAsBakYp
kGL6AuEs1uqnejLco1Iko65BSQnr6yJPFN3tZopE3P8IiYCZjvxJHb16yVo+Elq/
nEZke/IeDkusqUyZPwYwuvt3u0z0882YWcWhAo66WOXxMwYwGzOq7SFV+hmeoTOv
Ws671wgnr8ZTCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:59 2026 by rpki-client