Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: osEKlDeVhRY8kfCnb6JJWx+NYKzcIo/zvypg1ov8Hyo=
Subject key identifier: F4:D2:D1:85:22:BC:41:19:5E:AF:48:ED:3E:EA:3A:20:3A:AB:F9:7E
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 019D273AA9D3BC2AAA15321350A33322DDDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 0861
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: IwgOR8SpECdLjDFzz0M9A3eTqHc.roa (hash: bqzQ3UtBaN9yvyQu2pNXKzVdfCP2Omy5M2vD+gjTY/A=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: WhlkFKJ/5HwBtO/gWC66XTjGR3vGvrknpyxMPJ1gRgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a9:d3:bc:2a:aa:15:32:13:50:a3:33:22:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=f4d2d18522bc41195eaf48ed3eea3a203aabf97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:82:6a:0b:3f:68:67:57:ea:74:f9:73:9c:
10:e4:a6:1d:21:8b:97:06:a9:ac:19:7b:68:91:49:
3c:6e:bc:6a:65:97:3d:46:5c:17:e1:56:30:f5:6c:
27:b0:fd:92:5b:8a:b8:03:00:64:b1:cd:7c:e1:07:
8f:3a:4c:55:b5:77:71:80:d9:02:c9:a4:5b:f8:41:
21:4e:37:42:26:d5:4f:b8:b8:27:66:bb:1a:c3:3f:
ca:cc:73:ae:ec:27:ab:98:58:77:8f:bf:58:b5:24:
5c:cb:f8:79:d2:37:02:a2:5b:c6:5f:ee:85:26:53:
ef:3a:01:ca:22:8e:02:5d:65:ff:3f:11:f5:9f:cc:
d1:78:93:89:09:45:fc:76:87:97:c8:1a:3d:85:bd:
6d:42:f2:bf:16:2a:b4:2e:65:be:3b:4e:4b:ab:2b:
0b:80:4b:36:df:6b:a1:91:6f:19:b0:b5:3b:36:8d:
07:ca:93:0d:f6:e0:fb:80:1b:35:d9:10:f4:a4:ab:
57:68:75:02:78:7b:fa:3c:00:44:7f:f1:ad:9a:62:
15:35:e7:32:c8:66:4e:e4:aa:d4:8b:e5:af:b5:65:
f3:90:9d:5e:66:ee:0d:46:f8:73:ca:51:b6:7e:86:
b7:2c:bf:37:f2:91:b9:18:7d:3e:4c:47:a9:a4:2d:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D2:D1:85:22:BC:41:19:5E:AF:48:ED:3E:EA:3A:20:3A:AB:F9:7E
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:da:e9:6c:5b:0f:71:0e:24:54:bd:bd:b5:ba:7b:16:03:5c:
73:3b:06:c9:0b:2c:30:a0:83:f5:d2:5b:01:08:de:7d:d1:84:
d9:68:f0:78:93:14:f3:52:c2:d1:b7:97:60:a9:4c:c3:b1:f7:
dd:5f:62:55:f9:9c:35:4f:e2:dc:5d:21:13:16:ec:08:8d:9b:
ea:aa:24:c2:04:7f:58:4d:c1:54:3d:de:17:5f:b6:bb:44:5e:
65:18:a1:a7:8e:58:10:bf:1b:17:5d:e1:f7:40:d0:cf:b0:c9:
75:02:fe:ce:27:e8:b2:03:99:56:1c:e7:c4:bc:e6:8b:4a:32:
9e:e2:76:6f:7f:b9:81:6a:2d:0d:41:42:1b:20:bb:53:dc:97:
60:c0:0e:ae:fe:8f:e6:6c:a4:9d:a3:22:50:29:1f:8d:46:00:
2e:a9:5c:ab:a1:66:ac:e8:82:9d:50:78:c5:b6:68:43:e7:d5:
ac:1f:2f:9f:7b:34:2f:50:8f:bc:fe:fb:ef:ce:67:ab:5d:6e:
e5:1d:d1:67:0f:b6:b0:28:c6:da:49:de:5f:5e:ee:85:d2:8d:
73:2d:e3:1e:7a:8f:77:f6:98:5e:38:ba:86:d6:7c:a6:66:ce:
5a:c5:ff:4d:82:c7:d4:8a:77:3a:97:b4:00:7f:e3:42:23:00:
71:22:b8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqnTvCqqFTITUKMzIt3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OGEwMWUyNTI2ZTM5NTA0MTkyYzMwMjcyZjM4MGIzOWFl
M2YyYTYwHhcNMjYwMzI1MjMwMDQ5WhcNMjYwMzI2MjMwMDQ5WjAzMTEwLwYDVQQD
EyhmNGQyZDE4NTIyYmM0MTE5NWVhZjQ4ZWQzZWVhM2EyMDNhYWJmOTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzSCags/aGdX6nT5c5wQ5KYdIYuX
BqmsGXtokUk8brxqZZc9RlwX4VYw9WwnsP2SW4q4AwBksc184QePOkxVtXdxgNkC
yaRb+EEhTjdCJtVPuLgnZrsawz/KzHOu7CermFh3j79YtSRcy/h50jcColvGX+6F
JlPvOgHKIo4CXWX/PxH1n8zReJOJCUX8doeXyBo9hb1tQvK/Fiq0LmW+O05LqysL
gEs232uhkW8ZsLU7No0HypMN9uD7gBs12RD0pKtXaHUCeHv6PABEf/GtmmIVNecy
yGZO5KrUi+WvtWXzkJ1eZu4NRvhzylG2foa3LL838pG5GH0+TEeppC204wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTS0YUivEEZXq9I7T7qOiA6q/l+MB8GA1UdIwQY
MBaAFJiKAeJSbjlQQZLDAnLzgLOa4/KmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTM2MDMtYzJjYS00NTc3LWI3ZWIt
NzcyZjg0MWM0MzkzLzEvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mYTM2MDMtYzJjYS00NTc3LWI3ZWItNzcyZjg0MWM0Mzkz
LzEvbUlvQjRsSnVPVkJCa3NNQ2N2T0FzNXJqOHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmtrpbFsP
cQ4kVL29tbp7FgNcczsGyQssMKCD9dJbAQjefdGE2WjweJMU81LC0beXYKlMw7H3
3V9iVfmcNU/i3F0hExbsCI2b6qokwgR/WE3BVD3eF1+2u0ReZRihp45YEL8bF13h
90DQz7DJdQL+zifosgOZVhznxLzmi0oynuJ2b3+5gWotDUFCGyC7U9yXYMAOrv6P
5myknaMiUCkfjUYALqlcq6FmrOiCnVB4xbZoQ+fVrB8vn3s0L1CPvP77785nq11u
5R3RZw+2sCjG2kneX17uhdKNcy3jHnqPd/aYXji6htZ8pmbOWsX/TYLH1Ip3Ope0
AH/jQiMAcSK4sw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:03 2026 by rpki-client