Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: CdfbVfC3YdkrBHxR2it5xv5d9OJWsl7lqcK2QnMXZjI=
Subject key identifier: 7E:4A:3D:B5:51:9E:6B:65:2C:1F:05:ED:05:74:C4:5A:AA:48:92:A5
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 019D27728CBF2756ECC8EB24028FB085A77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 1360
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: 19kTeJepP8HkpIg63hHdZMuI5pU.roa (hash: rYKL3pXSi0W4E3AFcHleDUG0Z3vGSYXA5D+E17BmR8U=)
2: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: 6KlmFP+ZS35QO0G7llI4gi3ct0vtyYDoGg0s6cYRdCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8c:bf:27:56:ec:c8:eb:24:02:8f:b0:85:a7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=7e4a3db5519e6b652c1f05ed0574c45aaa4892a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:66:d6:7d:90:bd:12:fd:26:4b:04:c1:2d:
3d:e0:e5:08:b7:94:63:e4:50:c8:64:37:4d:00:4e:
19:83:8b:6d:17:24:39:e0:66:64:f9:b6:d2:08:2b:
f2:7f:12:9e:cb:4f:9f:38:01:1e:0f:e7:81:ab:d6:
a8:5e:b5:ac:54:d0:a5:d4:7d:f4:19:2a:22:a6:a0:
0a:a1:51:21:99:ec:a4:cd:75:cc:62:6b:1c:73:e4:
f1:8c:61:51:12:30:9f:fb:2e:6f:83:cc:90:fe:ed:
96:4d:ca:75:63:3d:e8:4c:2a:fe:af:64:d3:ae:0a:
b4:d0:42:3e:33:c7:9f:8e:2f:92:fe:e0:7c:5a:78:
ad:3c:e0:4a:53:dc:96:74:3e:79:69:a7:be:2e:da:
8d:42:cf:08:eb:a0:fb:95:69:c8:6c:fe:e9:30:89:
4f:98:aa:6d:48:18:be:50:93:47:3b:1b:cc:d9:b3:
77:cb:c7:1f:8f:85:31:aa:d6:49:e9:e3:69:d4:ad:
ac:d4:38:7d:5c:fa:02:4e:06:63:a9:45:ce:00:a3:
85:1a:41:7a:fb:a1:72:fb:da:ac:28:b9:f6:1a:f4:
eb:c4:28:c2:c1:4a:d3:ce:6d:2b:f6:ab:b7:68:6d:
8d:54:9c:99:21:6e:47:c4:b3:f6:4e:b1:c5:56:9b:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4A:3D:B5:51:9E:6B:65:2C:1F:05:ED:05:74:C4:5A:AA:48:92:A5
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f5:ea:05:c8:63:c9:f0:5f:fc:7f:96:e8:95:c0:d5:3e:6d:
15:9d:46:73:a5:14:8d:b0:c3:80:1e:f0:1b:60:16:b6:71:ee:
99:56:64:7a:8e:6e:1e:5b:06:a6:5c:51:9c:dc:0d:b0:b6:8a:
11:c4:dd:65:13:19:ec:da:5b:f8:07:2a:be:55:8c:06:6f:9d:
cc:bd:ab:b0:39:df:0c:1e:7f:c1:c8:aa:48:40:c3:5d:96:32:
2b:b2:7c:fb:9d:08:8f:39:e2:a1:b0:c3:78:15:10:d3:75:ce:
a9:e1:e5:75:8c:4c:9e:87:bb:cb:9a:c7:37:4b:d1:fd:30:94:
fb:1f:cb:33:25:ef:c4:2c:ff:36:60:66:49:f8:09:e6:f7:73:
bb:37:ea:36:5c:d8:6c:54:8d:07:4f:6e:c5:00:dc:d0:0d:31:
7d:3e:5d:fa:17:02:54:34:59:f3:ef:c4:d6:be:ea:91:b0:94:
62:0b:34:3d:f7:de:3a:52:55:b5:45:2f:7a:30:13:62:1a:b7:
20:31:52:bd:2a:9f:fd:9c:84:48:a5:29:dd:04:71:e4:84:49:
12:fc:ba:35:d0:b3:b9:20:73:f3:b2:e8:c4:dc:11:ec:52:54:
46:3f:1d:5b:21:60:60:24:f7:b2:54:fb:81:8c:27:5e:ec:ac:
69:9a:60:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncoy/J1bsyOskAo+whad8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ODE2NjQ2M2ExYTMwMWNhNWI2ZWI5OGJkZGQwN2UzOTcw
OTE5ODYwHhcNMjYwMzI2MDAwMTUxWhcNMjYwMzI3MDAwMTUxWjAzMTEwLwYDVQQD
Eyg3ZTRhM2RiNTUxOWU2YjY1MmMxZjA1ZWQwNTc0YzQ1YWFhNDg5MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX1m1n2QvRL9JksEwS094OUIt5Rj
5FDIZDdNAE4Zg4ttFyQ54GZk+bbSCCvyfxKey0+fOAEeD+eBq9aoXrWsVNCl1H30
GSoipqAKoVEhmeykzXXMYmscc+TxjGFREjCf+y5vg8yQ/u2WTcp1Yz3oTCr+r2TT
rgq00EI+M8efji+S/uB8WnitPOBKU9yWdD55aae+LtqNQs8I66D7lWnIbP7pMIlP
mKptSBi+UJNHOxvM2bN3y8cfj4UxqtZJ6eNp1K2s1Dh9XPoCTgZjqUXOAKOFGkF6
+6Fy+9qsKLn2GvTrxCjCwUrTzm0r9qu3aG2NVJyZIW5HxLP2TrHFVptixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5KPbVRnmtlLB8F7QV0xFqqSJKlMB8GA1UdIwQY
MBaAFIiBZkY6GjAcpbbrmL3dB+OXCRmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUt
MzhjMmMyYTc5YzM1LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NzZmZDAtYjhhNi00NjFmLWI0YzUtMzhjMmMyYTc5YzM1
LzEvaUlGbVJqb2FNQnlsdHV1WXZkMEg0NWNKR1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/XqBchj
yfBf/H+W6JXA1T5tFZ1Gc6UUjbDDgB7wG2AWtnHumVZkeo5uHlsGplxRnNwNsLaK
EcTdZRMZ7Npb+AcqvlWMBm+dzL2rsDnfDB5/wciqSEDDXZYyK7J8+50IjzniobDD
eBUQ03XOqeHldYxMnoe7y5rHN0vR/TCU+x/LMyXvxCz/NmBmSfgJ5vdzuzfqNlzY
bFSNB09uxQDc0A0xfT5d+hcCVDRZ8+/E1r7qkbCUYgs0PffeOlJVtUUvejATYhq3
IDFSvSqf/ZyESKUp3QRx5IRJEvy6NdCzuSBz87LoxNwR7FJURj8dWyFgYCT3slT7
gYwnXuysaZpgUw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:26 2026 by rpki-client