Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: WIdLmiUkixc1qKR1fluFy8prN9Eq5mgFf/Z7K4B8UaQ=
Subject key identifier: 68:39:65:C3:5A:34:7B:5E:1B:B2:7B:3B:B9:29:E6:10:5F:19:0D:12
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 019D26CCF5521E8D8BFB6CCA007B687AA4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 05C3
Signing time: Wed 25 Mar 2026 21:00:59 +0000
Manifest this update: Wed 25 Mar 2026 21:00:59 +0000
Manifest next update: Thu 26 Mar 2026 21:00:59 +0000
Files and hashes: 1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: csr0tm7yZFZQlFSM9ssn4oD3pacnBEF9YiIIhBrL8XU=)
2: eJRSSJ2okd5UCzM_2-qvK3U4-Vw.roa (hash: kPVh31w2HnqTCOv3mV2mx2QeB0MVVo+s0ob9l5XktM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f5:52:1e:8d:8b:fb:6c:ca:00:7b:68:7a:a4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Mar 25 21:00:59 2026 GMT
Not After : Mar 26 21:00:59 2026 GMT
Subject: CN=683965c35a347b5e1bb27b3bb929e6105f190d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:5a:7c:74:47:de:ab:fb:fc:fe:19:d5:29:
ad:ba:f7:b8:56:71:50:f0:7c:15:e8:4b:8d:d2:3e:
1d:35:81:e9:fe:c0:64:fa:34:93:ab:35:c2:73:d7:
03:d7:f3:ec:c2:51:30:28:4c:39:dc:c9:76:8a:9f:
3c:10:dc:03:4a:52:aa:c7:99:f9:91:0b:89:1a:ab:
d5:6d:42:94:7a:bf:59:40:c2:8e:97:20:5d:04:90:
f2:4b:6f:07:04:71:06:4b:6d:6b:a6:99:a0:63:80:
c5:d5:ec:fa:7c:f3:03:95:ab:4e:ca:3e:91:80:64:
c8:60:99:10:5f:ec:94:09:da:e7:57:70:e8:45:ca:
19:90:3e:55:3c:64:22:a3:41:eb:b6:2a:ed:81:6e:
9f:f0:f7:b0:16:52:f5:ee:78:9e:9f:2d:65:02:c8:
6d:0d:3d:ed:ef:60:6b:09:54:1b:6e:d2:7a:71:14:
e6:80:56:e2:96:37:1e:75:73:93:3c:3b:3d:1f:c9:
1c:58:73:9e:98:a3:97:a5:ee:57:a0:fe:7a:fb:8b:
f2:15:5e:73:e0:9e:63:14:e6:38:16:04:c8:67:b8:
1b:1a:f7:43:31:05:e1:9e:b8:8f:b9:97:1b:fc:a6:
ec:d9:ce:d9:2e:3b:b8:3a:bb:1a:e3:db:ee:c9:ba:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:39:65:C3:5A:34:7B:5E:1B:B2:7B:3B:B9:29:E6:10:5F:19:0D:12
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4e:fb:80:c4:7b:81:26:84:33:6f:e2:dd:8d:20:de:63:13:
cd:eb:d6:ee:2f:a9:ba:53:5b:46:e6:7c:ff:a4:cc:44:aa:02:
cf:da:19:6b:12:00:20:dc:42:b0:96:c9:12:51:98:a9:28:62:
59:08:12:0e:53:df:b2:6e:35:c7:0d:95:c3:fb:16:48:ab:b6:
a7:77:71:d3:cf:1f:5e:16:6e:d3:54:95:e3:70:d7:3e:bb:f1:
05:81:b1:b0:5b:2a:d3:69:ce:ce:14:4e:05:71:74:e5:53:9a:
4e:2a:29:86:18:70:8b:1e:0e:f2:0d:be:f7:c7:98:51:ad:a5:
52:50:5c:7b:21:91:c9:b8:db:71:b6:80:94:0d:37:a4:2e:49:
35:6b:c2:85:ae:4c:01:a3:c4:67:4e:e8:b1:34:2b:36:bf:0e:
11:cc:b1:9f:a4:5c:03:b6:b6:b6:36:d7:c8:6e:f6:31:80:1a:
d9:1f:0e:dc:8c:44:f6:5c:74:64:48:60:ce:d2:d9:20:7e:cd:
e8:92:df:69:8c:e7:7f:ec:8b:21:90:12:13:e8:5b:af:b4:2b:
4f:e9:a5:d9:19:47:01:b2:bf:b3:ce:1a:9e:b6:18:55:e7:63:
d1:1e:a7:cc:dd:2b:f7:ef:13:db:e2:2b:88:f2:57:34:03:72:
c5:f7:ee:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPVSHo2L+2zKAHtoeqT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDUxMjE1ZjZmMWJkMjI3ZGI3ZjQwZGY3NDhkNjRjMTA2
Zjg0YTMwHhcNMjYwMzI1MjEwMDU5WhcNMjYwMzI2MjEwMDU5WjAzMTEwLwYDVQQD
Eyg2ODM5NjVjMzVhMzQ3YjVlMWJiMjdiM2JiOTI5ZTYxMDVmMTkwZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7NafHRH3qv7/P4Z1Smtuve4VnFQ
8HwV6EuN0j4dNYHp/sBk+jSTqzXCc9cD1/PswlEwKEw53Ml2ip88ENwDSlKqx5n5
kQuJGqvVbUKUer9ZQMKOlyBdBJDyS28HBHEGS21rppmgY4DF1ez6fPMDlatOyj6R
gGTIYJkQX+yUCdrnV3DoRcoZkD5VPGQio0HrtirtgW6f8PewFlL17nieny1lAsht
DT3t72BrCVQbbtJ6cRTmgFbiljcedXOTPDs9H8kcWHOemKOXpe5XoP56+4vyFV5z
4J5jFOY4FgTIZ7gbGvdDMQXhnriPuZcb/Kbs2c7ZLju4Orsa49vuybqT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGg5ZcNaNHteG7J7O7kp5hBfGQ0SMB8GA1UdIwQY
MBaAFCMFEhX28b0ifbf0DfdI1kwQb4SjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2It
NmM2ZjBlMzE5Y2ExLzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI0ODYtNzlhMC00Mzk2LTgzM2ItNmM2ZjBlMzE5Y2Ex
LzEvSXdVU0ZmYnh2U0o5dF9RTjkwaldUQkJ2aEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV077gMR7
gSaEM2/i3Y0g3mMTzevW7i+pulNbRuZ8/6TMRKoCz9oZaxIAINxCsJbJElGYqShi
WQgSDlPfsm41xw2Vw/sWSKu2p3dx088fXhZu01SV43DXPrvxBYGxsFsq02nOzhRO
BXF05VOaTiophhhwix4O8g2+98eYUa2lUlBceyGRybjbcbaAlA03pC5JNWvCha5M
AaPEZ07osTQrNr8OEcyxn6RcA7a2tjbXyG72MYAa2R8O3IxE9lx0ZEhgztLZIH7N
6JLfaYznf+yLIZASE+hbr7QrT+ml2RlHAbK/s84anrYYVedj0R6nzN0r9+8T2+Ir
iPJXNANyxffuFA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:05:54 2026 by rpki-client