Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: 2M4Tustw9vgOcm1TsD3c4WP2RlZGDyihsMYuXyL1CxQ=
Subject key identifier: 3E:2A:18:0F:83:5E:E1:52:57:87:2E:CB:B0:D4:4C:95:BB:93:D9:B4
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 019D2703EF76F575EDD6843B9C83121D45EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: +Qa1uhpaJMY6/Ch88iMSwUv6XSL1fwaLlKg2yPqmBug=)
2: YH3qouyi9uf0Sjp7erwfbtdqIMY.roa (hash: XATxeFAkfU3QrOitUmq9zj3TBTO+Je2+3q8oJUZcsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ef:76:f5:75:ed:d6:84:3b:9c:83:12:1d:45:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=3e2a180f835ee15257872ecbb0d44c95bb93d9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:70:33:dc:91:2c:f4:5e:8e:d2:92:74:7a:
82:26:ae:69:12:70:12:b3:bb:94:5a:44:69:9c:7d:
ed:15:8e:0b:23:69:30:f3:3c:c8:b5:cb:86:dc:e7:
8a:e9:e1:49:47:21:01:7c:21:3e:c4:bc:a5:97:0d:
2f:0a:b0:68:39:dd:50:85:04:da:74:61:fc:c4:ca:
ba:04:c0:01:ee:aa:3d:e9:da:46:73:7f:21:60:6a:
62:9f:cc:92:d6:88:e9:ec:f4:ce:28:ae:7f:f6:77:
89:42:d9:ec:3c:15:f1:af:1c:fb:78:ab:0c:6f:7e:
dd:d4:c5:88:7d:93:f5:73:cd:b6:1d:3e:9b:57:33:
f7:f4:89:71:d7:f1:85:ef:82:ee:82:39:1b:fd:e6:
df:9c:e8:5c:5a:c0:61:6d:4e:93:cc:23:32:32:c2:
2f:45:e0:a6:03:65:1d:17:f2:5c:d8:b7:11:b2:42:
cb:d9:35:ee:8f:80:dd:ab:e2:ab:30:7a:15:c6:c3:
b8:b3:d9:15:48:05:b3:46:0c:5b:a7:5a:03:ea:48:
57:6a:d7:b6:f0:4f:1f:62:3d:af:b2:b8:a0:61:10:
e2:30:ef:28:24:fa:00:10:82:f0:e5:c8:45:e3:db:
a5:e5:05:0b:92:ab:f1:58:49:4f:62:0b:6a:f4:20:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:18:0F:83:5E:E1:52:57:87:2E:CB:B0:D4:4C:95:BB:93:D9:B4
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:04:6e:8b:01:71:bf:61:3e:9f:e9:af:7d:20:3c:60:f1:44:
f7:63:87:ac:ab:e2:9f:82:7b:86:2f:c8:e4:97:78:c9:a1:9e:
7a:b4:2d:55:49:ae:83:24:41:ec:f9:61:b2:79:d1:9c:6f:cb:
10:35:70:9c:8c:e0:be:6f:6b:6e:09:c6:30:b7:99:48:d1:db:
19:e4:c8:03:cd:cf:b8:f1:9a:fa:69:d9:50:05:35:a9:bd:7c:
56:9f:8e:c5:bd:15:71:ac:f7:6f:78:53:c4:38:f4:23:9f:b4:
c8:d7:cd:81:c3:0d:db:a8:5d:8b:1e:cb:46:04:25:2f:c0:26:
30:ae:23:d8:9a:ba:b0:fb:c2:a5:1e:96:bd:e5:25:b9:75:47:
59:60:43:13:47:4c:59:bd:82:8a:55:7c:09:90:2c:20:cd:cc:
2b:17:f9:f1:7b:e3:1b:e9:4f:17:f1:d5:9c:6c:11:03:5c:7a:
8e:36:92:99:c7:58:be:25:6f:3c:2a:ca:0c:43:fe:a2:e3:d2:
55:2e:b1:0f:72:35:f2:5a:14:ec:d1:23:f3:a9:01:28:64:0c:
6f:e1:a8:91:7a:b8:62:9b:3c:95:ea:15:b7:0a:10:3d:70:ea:
69:25:ac:a6:bb:ad:86:a3:a1:a1:ce:ae:57:95:72:9d:58:a8:
19:0c:18:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA+929XXt1oQ7nIMSHUXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjFlMDlmMGU2ZWQ4OTFhZDE3ZDZjZTRhM2M3MzI4ZDc1
OWI0YzgwHhcNMjYwMzI1MjIwMTAyWhcNMjYwMzI2MjIwMTAyWjAzMTEwLwYDVQQD
EygzZTJhMTgwZjgzNWVlMTUyNTc4NzJlY2JiMGQ0NGM5NWJiOTNkOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09xwM9yRLPRejtKSdHqCJq5pEnAS
s7uUWkRpnH3tFY4LI2kw8zzItcuG3OeK6eFJRyEBfCE+xLyllw0vCrBoOd1QhQTa
dGH8xMq6BMAB7qo96dpGc38hYGpin8yS1ojp7PTOKK5/9neJQtnsPBXxrxz7eKsM
b37d1MWIfZP1c822HT6bVzP39Ilx1/GF74Lugjkb/ebfnOhcWsBhbU6TzCMyMsIv
ReCmA2UdF/Jc2LcRskLL2TXuj4Ddq+KrMHoVxsO4s9kVSAWzRgxbp1oD6khXate2
8E8fYj2vsrigYRDiMO8oJPoAEILw5chF49ul5QULkqvxWElPYgtq9CCi+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4qGA+DXuFSV4cuy7DUTJW7k9m0MB8GA1UdIwQY
MBaAFCPx4J8ObtiRrRfWzko8cyjXWbTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTkt
MmRkY2Y1NmE3NjNlLzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC85NTVlZDEtOGI0MC00MTg1LTg0YTktMmRkY2Y1NmE3NjNl
LzEvSV9IZ253NXUySkd0RjliT1NqeHpLTmRadE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOARuiwFx
v2E+n+mvfSA8YPFE92OHrKvin4J7hi/I5Jd4yaGeerQtVUmugyRB7PlhsnnRnG/L
EDVwnIzgvm9rbgnGMLeZSNHbGeTIA83PuPGa+mnZUAU1qb18Vp+Oxb0Vcaz3b3hT
xDj0I5+0yNfNgcMN26hdix7LRgQlL8AmMK4j2Jq6sPvCpR6WveUluXVHWWBDE0dM
Wb2CilV8CZAsIM3MKxf58XvjG+lPF/HVnGwRA1x6jjaSmcdYviVvPCrKDEP+ouPS
VS6xD3I18loU7NEj86kBKGQMb+GokXq4Yps8leoVtwoQPXDqaSWspruthqOhoc6u
V5VynVioGQwY4A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:52 2026 by rpki-client