Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
File: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft (raw, json)
Hash identifier: 2yXDCcc/zmYT7VmVhrALWSdCG6B2GHpADO+HZb1G8MU=
Subject key identifier: 99:E0:BB:99:DA:0F:8F:70:C7:BC:23:7C:62:BE:04:1C:3D:38:9D:83
Authority key identifier: 88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
Certificate issuer: /CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Certificate serial: 019D27DFD206AA52F37BE7258284EFCF3B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
Manifest number: 1036
Signing time: Thu 26 Mar 2026 02:01:12 +0000
Manifest this update: Thu 26 Mar 2026 02:01:12 +0000
Manifest next update: Fri 27 Mar 2026 02:01:12 +0000
Files and hashes: 1: NX-OMXODzLQyOfb1Q9wNeEL2PHA.roa (hash: Nw9r5+ly9YVKF96b5YkLYTcBHlD+SxK/rgNTOl03LpU=)
2: iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl (hash: Zu5aicniQnpql1lGm9nI3uJBzGZcw2tfwWXm8RRMLe8=)
3: jKKjoO8JUGIlXn-UDp4x0csWoxs.roa (hash: 2ucN/qfe/CRMX/0orfTwnBgNQjP1scKADHH1SlqlwH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:d2:06:aa:52:f3:7b:e7:25:82:84:ef:cf:3b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887a5f0486b18a2448f2358a2746c1abd9fb2e5e
Validity
Not Before: Mar 26 02:01:12 2026 GMT
Not After : Mar 27 02:01:12 2026 GMT
Subject: CN=99e0bb99da0f8f70c7bc237c62be041c3d389d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:69:d2:42:89:1a:f8:bd:e2:e1:87:7a:3a:
ea:5e:00:4e:3b:99:bd:66:73:30:7b:ec:2a:ec:f0:
f6:e2:e6:2b:ce:c4:53:a5:ef:e5:09:e6:56:07:ac:
bd:49:49:bc:39:66:8a:61:9e:fb:68:b7:b7:24:f0:
43:92:0a:0e:92:90:14:c1:4e:ab:73:15:f5:bd:63:
ee:2d:73:4a:93:a3:a3:3b:63:6a:cb:b6:64:42:d7:
e4:56:c8:93:a0:36:4c:9c:b5:a0:33:8e:ae:50:50:
f2:90:88:13:59:29:b8:b5:b2:44:fa:94:70:4d:71:
fe:6c:0f:01:73:a0:28:06:6f:f1:a0:d7:d1:fe:90:
da:61:e0:89:de:70:7a:6e:4e:9a:9c:1f:26:cb:8d:
2e:e9:37:34:37:b1:b9:21:d3:e2:8d:6c:e1:a5:0b:
8b:9e:54:40:84:f5:12:6c:be:e7:44:a4:0c:3d:48:
0a:08:27:a5:9d:12:1f:7d:99:43:dd:7b:e2:06:10:
c3:1d:77:78:e5:f8:06:d3:d0:77:5a:ff:6d:88:94:
31:ad:fc:9b:cc:14:be:8e:2a:49:c0:0f:89:16:1a:
04:75:50:dd:54:13:84:72:bc:27:3e:15:23:c0:28:
1c:af:f0:13:41:24:7d:aa:39:27:5e:84:d8:85:fb:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E0:BB:99:DA:0F:8F:70:C7:BC:23:7C:62:BE:04:1C:3D:38:9D:83
X509v3 Authority Key Identifier:
keyid:88:7A:5F:04:86:B1:8A:24:48:F2:35:8A:27:46:C1:AB:D9:FB:2E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/28c3d1-8a90-4068-bb27-33abc53c0e79/1/iHpfBIaxiiRI8jWKJ0bBq9n7Ll4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:07:ff:42:fa:bc:8a:d5:9c:1b:5d:bb:42:9c:c9:aa:a6:52:
69:ca:ad:d7:da:08:65:88:b3:32:0e:c9:41:57:9b:95:28:e3:
30:f4:ad:9b:59:8d:66:22:92:66:65:a4:96:6d:2d:80:13:b0:
62:e5:40:47:ec:e3:9b:65:06:10:c5:c4:59:f6:1a:af:e9:d4:
d2:b0:2b:02:64:43:d8:86:e0:9e:2e:1d:6f:fa:11:7c:34:cf:
20:6e:68:4e:f7:b1:45:5f:14:ef:aa:8c:01:31:37:9c:29:7c:
ac:f7:9e:1b:f8:a5:bb:2b:12:06:05:e8:bc:99:a6:3a:02:a3:
ac:d7:8c:72:8b:04:69:db:57:83:a3:1b:f9:5f:19:c6:95:9c:
36:e6:5f:8e:6c:c6:46:4b:55:a6:74:ea:03:ee:0e:8a:36:52:
8d:8e:ca:ae:55:00:73:16:5a:14:07:87:a4:1b:b3:d4:55:7a:
49:fb:aa:c9:73:ec:49:ef:cc:06:1b:6d:0e:a3:1b:84:7c:85:
65:4e:bc:64:4f:55:b4:60:02:fb:66:dd:0c:4c:fe:bc:a1:f2:
a7:29:6f:6d:63:39:91:dc:e5:35:7c:03:f7:87:a4:b6:44:28:
15:e0:14:7c:c6:e9:25:98:f4:2d:82:5b:65:03:95:1d:0e:08:
6c:ec:cd:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n39IGqlLze+clgoTvzzucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2E1ZjA0ODZiMThhMjQ0OGYyMzU4YTI3NDZjMWFiZDlm
YjJlNWUwHhcNMjYwMzI2MDIwMTEyWhcNMjYwMzI3MDIwMTEyWjAzMTEwLwYDVQQD
Eyg5OWUwYmI5OWRhMGY4ZjcwYzdiYzIzN2M2MmJlMDQxYzNkMzg5ZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhp0kKJGvi94uGHejrqXgBOO5m9
ZnMwe+wq7PD24uYrzsRTpe/lCeZWB6y9SUm8OWaKYZ77aLe3JPBDkgoOkpAUwU6r
cxX1vWPuLXNKk6OjO2Nqy7ZkQtfkVsiToDZMnLWgM46uUFDykIgTWSm4tbJE+pRw
TXH+bA8Bc6AoBm/xoNfR/pDaYeCJ3nB6bk6anB8my40u6Tc0N7G5IdPijWzhpQuL
nlRAhPUSbL7nRKQMPUgKCCelnRIffZlD3XviBhDDHXd45fgG09B3Wv9tiJQxrfyb
zBS+jipJwA+JFhoEdVDdVBOEcrwnPhUjwCgcr/ATQSR9qjknXoTYhfvyiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJngu5naD49wx7wjfGK+BBw9OJ2DMB8GA1UdIwQY
MBaAFIh6XwSGsYokSPI1iidGwavZ+y5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjct
MzNhYmM1M2MwZTc5LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yOGMzZDEtOGE5MC00MDY4LWJiMjctMzNhYmM1M2MwZTc5
LzEvaUhwZkJJYXhpaVJJOGpXS0owYkJxOW43TGw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAf/Qvq8
itWcG127QpzJqqZSacqt19oIZYizMg7JQVeblSjjMPStm1mNZiKSZmWklm0tgBOw
YuVAR+zjm2UGEMXEWfYar+nU0rArAmRD2Ibgni4db/oRfDTPIG5oTvexRV8U76qM
ATE3nCl8rPeeG/iluysSBgXovJmmOgKjrNeMcosEadtXg6Mb+V8ZxpWcNuZfjmzG
RktVpnTqA+4OijZSjY7KrlUAcxZaFAeHpBuz1FV6SfuqyXPsSe/MBhttDqMbhHyF
ZU68ZE9VtGAC+2bdDEz+vKHypylvbWM5kdzlNXwD94ektkQoFeAUfMbpJZj0LYJb
ZQOVHQ4IbOzNAg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:48 2026 by rpki-client