Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json)
Hash identifier: iFT/zL6PK7bBVIA5k1D/fGBdL30ar85P4maPjxOwlko=
Subject key identifier: A5:49:41:F8:F1:33:29:77:51:A2:19:E7:74:16:FC:B4:A7:59:BB:66
Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Certificate serial: 019D273AB3E7EC8B972612E19593B0C32EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:51 +0000
Manifest this update: Wed 25 Mar 2026 23:00:51 +0000
Manifest next update: Thu 26 Mar 2026 23:00:51 +0000
Files and hashes: 1: b2w6O9WirtRCdzK66va1rPliDCM.roa (hash: stbRk0sxdQicjLZT3kCAibpOrHEkv6FoTLisoOLFpLg=)
2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: XBErQz1vBTBFovag6eK2YswQATVZW/Payn2g/SkWGvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b3:e7:ec:8b:97:26:12:e1:95:93:b0:c3:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde
Validity
Not Before: Mar 25 23:00:51 2026 GMT
Not After : Mar 26 23:00:51 2026 GMT
Subject: CN=a54941f8f133297751a219e77416fcb4a759bb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:a4:c6:da:60:5c:c0:4a:c4:ac:7d:75:99:
30:6f:6d:0f:13:ce:1c:e1:0d:e6:6a:f8:99:15:79:
99:45:09:17:8a:53:45:fa:04:9a:04:90:85:f9:22:
e5:0f:d0:46:4f:72:03:69:94:5d:7e:9e:81:4e:58:
0c:b1:13:88:ef:bf:d1:40:7b:73:de:d2:86:d0:4c:
87:45:64:13:00:85:0d:ae:05:4e:65:b4:96:05:98:
14:61:d5:ac:37:dc:1f:5e:50:43:00:e9:15:03:07:
95:70:68:cc:db:18:8d:ec:97:01:46:3a:5b:34:90:
6b:d5:8e:e9:93:29:72:78:78:8c:d7:6c:00:1b:78:
2e:34:10:ea:59:40:ee:0d:e9:e9:04:71:e7:f9:33:
65:be:35:8a:77:1a:c1:18:a5:89:ed:f5:fd:92:51:
95:b9:89:fc:83:f7:f5:52:ae:c5:a8:ad:d8:bc:b7:
8b:f9:c3:90:2e:25:6b:52:b2:8c:36:b4:4d:11:88:
cc:1a:10:39:87:1b:05:05:a3:8b:ed:3d:b7:8a:7d:
cb:74:aa:4f:cd:cd:e1:c3:3f:ec:9e:61:13:24:73:
c1:5d:a5:50:15:23:21:63:b1:f0:16:1e:11:12:07:
35:7d:13:dd:a2:e4:40:3d:f2:b8:e0:8e:87:4d:b3:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:49:41:F8:F1:33:29:77:51:A2:19:E7:74:16:FC:B4:A7:59:BB:66
X509v3 Authority Key Identifier:
keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fb:0e:c3:9d:dc:b0:86:32:d0:3a:d2:18:54:31:d4:62:c0:
5c:17:ac:23:73:71:78:0a:e3:be:6a:36:32:04:72:69:5f:16:
a5:a8:a6:97:af:71:48:98:65:56:5d:5f:2c:2d:34:08:c0:67:
31:6f:4b:e7:7c:21:21:3f:f3:ba:f0:15:5a:05:2f:91:d1:4f:
ea:1d:2c:bf:31:79:39:01:18:63:ab:c5:ad:38:98:de:e7:b6:
9c:0f:ba:d2:4f:13:9f:19:68:01:25:85:0e:11:2e:e6:d7:96:
32:35:ee:9a:f8:3b:07:b8:f2:35:7f:1b:6b:fc:59:b8:32:0e:
ef:0c:91:d5:15:63:80:a3:27:e2:cb:00:7c:a3:3d:6e:2d:3f:
66:79:e1:c3:ce:e6:df:f6:1c:75:b7:da:e3:31:54:26:87:73:
1c:ef:59:a4:b2:80:ab:be:5f:43:9f:de:dc:45:90:13:94:a2:
4f:82:28:30:b3:59:49:0f:b6:4e:10:eb:59:30:fc:8b:ed:a9:
e7:69:69:0d:cd:05:b8:1b:da:f4:7a:e2:d2:c7:9c:a5:98:84:
44:f2:2b:2c:e3:99:98:89:27:34:01:0f:7f:75:d7:78:b1:6e:
9f:0e:e0:ab:76:9c:16:66:91:0d:c9:55:56:21:fc:fa:c7:91:
07:43:f9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOrPn7IuXJhLhlZOwwy7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj
YjZmZGUwHhcNMjYwMzI1MjMwMDUxWhcNMjYwMzI2MjMwMDUxWjAzMTEwLwYDVQQD
EyhhNTQ5NDFmOGYxMzMyOTc3NTFhMjE5ZTc3NDE2ZmNiNGE3NTliYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPGkxtpgXMBKxKx9dZkwb20PE84c
4Q3maviZFXmZRQkXilNF+gSaBJCF+SLlD9BGT3IDaZRdfp6BTlgMsROI77/RQHtz
3tKG0EyHRWQTAIUNrgVOZbSWBZgUYdWsN9wfXlBDAOkVAweVcGjM2xiN7JcBRjpb
NJBr1Y7pkylyeHiM12wAG3guNBDqWUDuDenpBHHn+TNlvjWKdxrBGKWJ7fX9klGV
uYn8g/f1Uq7FqK3YvLeL+cOQLiVrUrKMNrRNEYjMGhA5hxsFBaOL7T23in3LdKpP
zc3hwz/snmETJHPBXaVQFSMhY7HwFh4REgc1fRPdouRAPfK44I6HTbNQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVJQfjxMyl3UaIZ53QW/LSnWbtmMB8GA1UdIwQY
MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt
MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0
LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/sOw53c
sIYy0DrSGFQx1GLAXBesI3NxeArjvmo2MgRyaV8Wpaiml69xSJhlVl1fLC00CMBn
MW9L53whIT/zuvAVWgUvkdFP6h0svzF5OQEYY6vFrTiY3ue2nA+60k8TnxloASWF
DhEu5teWMjXumvg7B7jyNX8ba/xZuDIO7wyR1RVjgKMn4ssAfKM9bi0/Znnhw87m
3/Ycdbfa4zFUJodzHO9ZpLKAq75fQ5/e3EWQE5SiT4IoMLNZSQ+2ThDrWTD8i+2p
52lpDc0FuBva9Hri0secpZiERPIrLOOZmIknNAEPf3XXeLFunw7gq3acFmaRDclV
ViH8+seRB0P5Ug==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:36 2026 by rpki-client