Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: 5wNJVn9c/wSnxMgZSo8XA7+olJ5zmR4jRL3l8ry0TDo=
Subject key identifier: AE:1C:61:A2:D5:62:DD:63:9B:C7:98:53:93:E9:8B:22:86:85:F1:8A
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019D288432F92EA55F816BE3D64A97974E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0E36
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: WIO/wgshirJrBkNcSNd/WVL1MmoxX46ZZ7+AFQZHorw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:32:f9:2e:a5:5f:81:6b:e3:d6:4a:97:97:4e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=ae1c61a2d562dd639bc7985393e98b228685f18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:37:af:be:86:a3:30:28:4c:4f:46:50:82:96:
26:10:bc:08:e7:49:74:8b:da:d6:94:9f:0d:30:9e:
57:b5:68:5b:99:0e:9c:2a:c2:16:c6:c0:a9:6a:5a:
fa:f0:66:a4:c2:18:36:48:f9:d4:33:ca:72:5e:a9:
35:a8:a5:ab:b8:3b:2b:c6:66:a9:8d:61:08:a2:49:
2b:18:5a:23:1d:7d:03:6d:13:df:bc:9e:6e:99:15:
6f:bc:49:ef:b4:4e:5a:86:e1:68:33:f9:29:a4:da:
e1:35:05:68:80:5a:ba:fe:cc:59:71:a2:17:91:0f:
24:f8:69:57:71:bf:4f:ad:cd:14:41:6d:9c:5c:77:
4e:93:e3:1b:b6:7f:24:c7:84:8d:ba:6e:2d:3b:2c:
29:5c:de:d0:33:2c:43:09:81:36:90:90:d9:75:70:
ff:17:1f:81:96:27:fb:4b:13:22:ad:06:4d:2a:da:
1d:25:26:0a:ce:ba:82:92:a0:27:70:b3:55:8b:9f:
63:64:9e:b8:dc:0e:b4:e4:87:2d:c2:cc:d9:8a:2c:
50:56:ef:55:4d:c1:dd:9b:e3:ea:b2:dc:b7:e3:f9:
ae:bc:64:c5:fe:8e:7d:ca:b5:6a:38:a4:c2:7b:60:
fc:00:fa:fd:c6:58:0b:6b:ae:42:5c:5e:30:55:b8:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1C:61:A2:D5:62:DD:63:9B:C7:98:53:93:E9:8B:22:86:85:F1:8A
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:45:31:f7:4e:97:7d:eb:b1:d0:04:08:4d:f8:c1:f9:82:
d4:78:e4:ca:11:7c:77:c5:52:39:13:a9:59:e0:aa:b1:1c:d3:
0d:86:00:37:66:9c:ff:a2:11:fd:8e:98:16:a5:92:14:9a:ea:
57:90:c7:16:ad:51:80:d1:66:dc:e9:dd:20:2f:6b:c3:78:78:
6b:3a:4d:a3:57:a9:96:14:29:3e:40:31:59:6c:51:52:d4:a0:
37:83:0e:96:d3:9c:f9:88:a9:97:45:c0:3e:0f:6a:f1:99:9c:
96:a2:38:1a:db:1f:08:39:d0:a2:a1:d7:70:b4:e9:1e:b6:3e:
2b:bf:28:0e:0d:ea:22:19:18:53:ae:dd:fe:a9:4c:71:d2:23:
26:af:45:82:ff:ef:7b:92:33:b2:2d:6f:42:32:50:bb:36:b9:
6d:72:84:51:b9:b0:b3:5b:d5:27:40:15:9e:51:46:5c:f6:6e:
62:67:9e:0c:b5:ab:2e:3a:9f:eb:07:9d:0b:05:69:44:6d:91:
c2:88:06:54:28:ce:c9:6d:90:f7:cd:7a:c2:95:6e:bb:77:dd:
21:71:bb:0d:bc:d8:b8:d5:44:66:6f:cc:3c:dc:88:7d:15:53:
0a:70:7e:ea:ef:e7:d5:d2:60:fd:43:0d:60:9e:59:e2:41:65:
df:9c:92:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohDL5LqVfgWvj1kqXl05RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODM1MjVkMTQyZmJmNGI5NGIzZDE2OTQ0NTM2NWM2NmRk
ZmRkZmQwHhcNMjYwMzI2MDUwMDQ1WhcNMjYwMzI3MDUwMDQ1WjAzMTEwLwYDVQQD
EyhhZTFjNjFhMmQ1NjJkZDYzOWJjNzk4NTM5M2U5OGIyMjg2ODVmMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDevvoajMChMT0ZQgpYmELwI50l0
i9rWlJ8NMJ5XtWhbmQ6cKsIWxsCpalr68Gakwhg2SPnUM8pyXqk1qKWruDsrxmap
jWEIokkrGFojHX0DbRPfvJ5umRVvvEnvtE5ahuFoM/kppNrhNQVogFq6/sxZcaIX
kQ8k+GlXcb9Prc0UQW2cXHdOk+Mbtn8kx4SNum4tOywpXN7QMyxDCYE2kJDZdXD/
Fx+Blif7SxMirQZNKtodJSYKzrqCkqAncLNVi59jZJ643A605IctwszZiixQVu9V
TcHdm+Pqsty34/muvGTF/o59yrVqOKTCe2D8APr9xlgLa65CXF4wVbhCTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4cYaLVYt1jm8eYU5PpiyKGhfGKMB8GA1UdIwQY
MBaAFPyDUl0UL79LlLPRaURTZcZt3939MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQt
NjkyM2E3ZTYxYTZiLzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC84NTRlODYtNTFiYi00NThjLWEwMTQtNjkyM2E3ZTYxYTZi
LzEvX0lOU1hSUXZ2MHVVczlGcFJGTmx4bTNmM2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQlFMfdO
l33rsdAECE34wfmC1HjkyhF8d8VSOROpWeCqsRzTDYYAN2ac/6IR/Y6YFqWSFJrq
V5DHFq1RgNFm3OndIC9rw3h4azpNo1eplhQpPkAxWWxRUtSgN4MOltOc+Yipl0XA
Pg9q8ZmclqI4GtsfCDnQoqHXcLTpHrY+K78oDg3qIhkYU67d/qlMcdIjJq9Fgv/v
e5Izsi1vQjJQuza5bXKEUbmws1vVJ0AVnlFGXPZuYmeeDLWrLjqf6wedCwVpRG2R
wogGVCjOyW2Q9816wpVuu3fdIXG7DbzYuNVEZm/MPNyIfRVTCnB+6u/n1dJg/UMN
YJ5Z4kFl35yS0A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:46 2026 by rpki-client