Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: n669Kdr50RS04B+Ss8DKmXtWM+kca4KmAxs+uu3DbOQ=
Subject key identifier: F5:11:ED:8B:9E:45:ED:44:E6:6B:36:84:86:7D:10:5B:30:CC:70:35
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019D299751A9F4F8F1406B034FBE4907F3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 13D3
Signing time: Thu 26 Mar 2026 10:01:15 +0000
Manifest this update: Thu 26 Mar 2026 10:01:15 +0000
Manifest next update: Fri 27 Mar 2026 10:01:15 +0000
Files and hashes: 1: 7YpkD0KfUd6GvtssKEAM5COaSjg.roa (hash: WV0BukIXTVr1fBZ0Z/X4lkuf8IyCGzCcom5E1ZYckgc=)
2: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: CwA5mPqdsC7HnvAUuA/dQO8vYSKzah1noQvhuljUHHg=)
3: NJVMWOrligqTcr-rcvI2msW0lWg.roa (hash: h/rbFp7XU21SARi1YVpy4hQ7ylKq7LqNyiG5q+Csv/s=)
4: PZ3DvBnBZEzRJV1pn3nJOWDaINo.roa (hash: kJlVCfKZcI1/z1HhlgFzXn1hqpVcX/my4yK+JhAitIM=)
5: RWueY0qSJBqdnyfoUjIKJBQ4tBM.roa (hash: bpFMaHQ2+HH7JzdJGHBSYoDlCYd8W8QG7hNLlWzI4Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:51:a9:f4:f8:f1:40:6b:03:4f:be:49:07:f3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Mar 26 10:01:15 2026 GMT
Not After : Mar 27 10:01:15 2026 GMT
Subject: CN=f511ed8b9e45ed44e66b3684867d105b30cc7035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:15:02:d3:44:8f:e2:31:d6:a1:6f:44:84:
ae:91:b4:15:bf:98:22:0d:da:96:1d:72:7a:a9:28:
dc:89:e6:8b:e1:76:61:15:94:1b:98:13:5a:6a:93:
80:9f:22:b4:cd:63:bf:13:a6:5f:46:f8:47:12:84:
e0:a5:d4:82:01:d4:23:02:25:89:fe:37:c1:b0:8b:
77:8d:03:e4:60:68:3d:af:12:00:e4:7a:bb:bd:e9:
67:77:2b:b0:14:82:92:fc:42:dd:15:f8:23:21:c2:
28:36:cc:8d:df:c5:83:e8:a0:54:ae:81:eb:70:f1:
54:8a:16:b9:e9:df:cf:56:23:1d:7c:d1:e9:76:50:
4f:50:3d:c9:72:eb:c4:ed:eb:2d:e8:ad:47:13:00:
36:58:47:05:e0:69:12:a3:bf:27:bb:13:77:9f:61:
11:2d:04:77:22:a6:e2:eb:e0:d8:e5:ef:e6:42:de:
88:0d:f9:3b:6e:74:3e:99:29:6b:01:44:86:c2:61:
37:24:51:45:9a:c1:cd:e0:5a:b4:bd:7f:be:d4:a9:
21:2c:91:71:82:27:3a:30:f2:ca:27:0b:e3:b3:5d:
c8:fc:dc:ed:88:df:17:0b:a8:90:15:d4:c0:05:0e:
8b:d6:6b:d5:96:d1:55:af:09:09:98:66:4a:ea:32:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:11:ED:8B:9E:45:ED:44:E6:6B:36:84:86:7D:10:5B:30:CC:70:35
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a7:cb:15:8d:c1:e0:be:77:bf:92:70:ca:57:7c:f9:d7:3b:
f9:2a:5f:27:71:6b:44:45:2f:23:4b:12:89:17:a8:2c:78:39:
42:57:b3:5f:17:3b:1e:3e:b8:d5:ae:93:c9:80:63:0a:05:4c:
c6:56:ac:1f:66:19:f2:73:fe:e1:b0:49:6a:40:4f:1b:80:8d:
f8:2f:41:cb:f3:87:2d:75:4f:18:b4:c0:d1:df:84:6a:07:42:
01:f7:6b:24:f7:e0:e7:f3:e1:f6:8f:d3:3e:92:ee:63:96:8e:
dd:9b:16:af:6e:32:1a:72:93:85:14:3d:48:24:aa:24:e4:34:
4a:3d:ac:63:1d:cf:66:9c:f1:10:57:64:e6:07:2f:2e:c1:c5:
c4:14:2e:8b:29:74:a0:bf:81:b4:7a:c3:14:52:c0:83:ec:3e:
91:b6:4a:a2:6a:f1:2b:16:23:47:b1:70:d4:55:45:8d:90:1d:
b7:71:59:60:29:fd:2c:39:1d:b7:c8:ee:3c:48:95:c2:bd:ba:
10:75:ca:e8:52:7b:50:3a:44:7c:49:6c:b0:58:ed:98:b4:7e:
65:49:a6:75:3c:66:cf:dc:74:68:ee:79:d9:4b:32:3e:e7:cc:
74:64:0e:06:11:fa:5e:6c:64:3f:dc:44:4c:20:e5:1a:d9:b0:
8c:91:ed:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl1Gp9PjxQGsDT75JB/O+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxM2UxZDUwZDUyMjg4YmVlODBlZWE0MzU1NzcwMTg3MTI0
MDliYmUwHhcNMjYwMzI2MTAwMTE1WhcNMjYwMzI3MTAwMTE1WjAzMTEwLwYDVQQD
EyhmNTExZWQ4YjllNDVlZDQ0ZTY2YjM2ODQ4NjdkMTA1YjMwY2M3MDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogoVAtNEj+Ix1qFvRISukbQVv5gi
DdqWHXJ6qSjcieaL4XZhFZQbmBNaapOAnyK0zWO/E6ZfRvhHEoTgpdSCAdQjAiWJ
/jfBsIt3jQPkYGg9rxIA5Hq7velndyuwFIKS/ELdFfgjIcIoNsyN38WD6KBUroHr
cPFUiha56d/PViMdfNHpdlBPUD3JcuvE7est6K1HEwA2WEcF4GkSo78nuxN3n2ER
LQR3Iqbi6+DY5e/mQt6IDfk7bnQ+mSlrAUSGwmE3JFFFmsHN4Fq0vX++1KkhLJFx
gic6MPLKJwvjs13I/NztiN8XC6iQFdTABQ6L1mvVltFVrwkJmGZK6jIxqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUR7YueRe1E5ms2hIZ9EFswzHA1MB8GA1UdIwQY
MBaAFCE+HVDVIoi+6A7qQ1V3AYcSQJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYt
MzE2ZWYyNjFmNGE1LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yYTFjZTktZmI0Yy00MWVlLTlmZjYtMzE2ZWYyNjFmNGE1
LzEvSVQ0ZFVOVWlpTDdvRHVwRFZYY0JoeEpBbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPqfLFY3B
4L53v5Jwyld8+dc7+SpfJ3FrREUvI0sSiReoLHg5QlezXxc7Hj641a6TyYBjCgVM
xlasH2YZ8nP+4bBJakBPG4CN+C9By/OHLXVPGLTA0d+EagdCAfdrJPfg5/Ph9o/T
PpLuY5aO3ZsWr24yGnKThRQ9SCSqJOQ0Sj2sYx3PZpzxEFdk5gcvLsHFxBQuiyl0
oL+BtHrDFFLAg+w+kbZKomrxKxYjR7Fw1FVFjZAdt3FZYCn9LDkdt8juPEiVwr26
EHXK6FJ7UDpEfElssFjtmLR+ZUmmdTxmz9x0aO552UsyPufMdGQOBhH6XmxkP9xE
TCDlGtmwjJHt6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:56 2026 by rpki-client