Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json)
Hash identifier: ZeHjvXLdBQ3PSKsH075+bJsyQBfTm5iDR3JP0aMUN84=
Subject key identifier: C5:9C:CB:7E:71:5F:6A:D8:7B:02:82:7A:7C:21:2B:11:BA:7F:07:DC
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019D254C45A09DCAB4F20F19B7A6A8A014EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
Manifest number: 01C8
Signing time: Wed 25 Mar 2026 14:00:48 +0000
Manifest this update: Wed 25 Mar 2026 14:00:48 +0000
Manifest next update: Thu 26 Mar 2026 14:00:48 +0000
Files and hashes: 1: 43jM40RYm5KfeGPiDNzubwAPnss.roa (hash: 3FdXgssZKeAEaBlX49WSPSeSpanDn1fR5o5d1jEZFX8=)
2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=)
3: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=)
4: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: 1NUIhRhkXCwtnhCnUhMq8jE4Dd9FTnBLiqFcqmlZIS8=)
5: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=)
6: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=)
7: r50bqW5SnPNE9WQYYRLDyXwjtZc.roa (hash: up7vGtBh2DqMmPO7x5Q3VURAhNEUmEQqjy49vJmJas0=)
8: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:45:a0:9d:ca:b4:f2:0f:19:b7:a6:a8:a0:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: Mar 25 14:00:48 2026 GMT
Not After : Mar 26 14:00:48 2026 GMT
Subject: CN=c59ccb7e715f6ad87b02827a7c212b11ba7f07dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:cf:41:0d:c2:9d:50:fd:0f:f8:6f:a1:ab:
63:f5:14:40:a9:83:00:1c:75:68:d5:78:f5:74:7d:
5b:3e:e0:c0:fb:a6:6e:0a:23:66:d6:13:e2:06:b0:
4f:b6:93:1c:26:72:e2:e2:21:82:55:a0:19:86:55:
ba:f2:0f:c9:33:8b:15:80:86:93:f5:9f:f2:7b:86:
f5:37:90:1e:a6:cd:96:69:24:9f:46:99:8a:37:86:
af:5c:48:69:1b:f2:2f:00:96:8c:73:32:6d:73:c0:
e1:38:f5:74:69:d8:6f:a6:40:8d:5d:46:cf:7b:f3:
58:27:56:2d:1b:47:5d:42:eb:b3:4d:f6:e5:a3:0d:
10:81:dc:ae:f7:c9:af:76:b1:aa:4f:43:9c:b4:09:
13:b5:e2:bf:da:a7:92:c6:26:1b:ce:0d:b4:15:8d:
e2:6e:9a:21:6a:db:e1:27:59:e5:b0:3a:00:84:ad:
ef:bf:82:ea:5a:dd:15:a1:99:cb:b7:e6:90:6f:4d:
d7:7c:17:04:98:c9:bb:2f:2f:b6:4c:02:f0:7c:48:
8e:b0:b0:c6:53:7b:94:8f:2a:03:3f:4f:89:5d:97:
64:4b:98:7c:4d:12:b5:81:00:ea:ec:2d:d0:6e:ad:
91:1c:69:0b:f7:7e:c7:3a:79:32:5f:2f:11:10:da:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9C:CB:7E:71:5F:6A:D8:7B:02:82:7A:7C:21:2B:11:BA:7F:07:DC
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:13:c3:b6:86:3b:d5:25:ae:f1:5d:05:8b:87:ab:79:5f:0d:
77:f4:3f:c6:9f:de:a9:6c:12:9f:cc:9b:3b:ec:57:b3:81:27:
df:8c:6b:27:5e:dc:a5:c3:62:52:a1:8a:06:93:21:03:c8:07:
55:33:40:f1:57:39:5f:74:2d:9a:be:94:e0:a9:e3:37:bc:b0:
38:09:33:c3:d0:b5:f1:84:de:8c:e2:91:90:fa:55:87:26:3f:
68:43:40:56:bd:f2:6b:fa:49:25:94:e4:51:06:87:1d:87:18:
3c:4c:e6:d9:27:0c:5c:0e:87:73:5d:06:66:7b:8e:7e:eb:33:
79:43:69:e2:91:a0:16:f2:ef:fa:c2:ec:dc:f2:2f:24:82:e2:
64:5d:0c:64:f3:8b:63:ba:d9:df:43:89:4a:4d:ab:f2:27:4f:
60:c5:c8:51:77:2c:87:f3:8c:85:76:a3:41:2a:6d:2e:cc:6d:
c7:18:17:1d:fd:ce:b6:d3:49:66:0f:18:60:eb:78:64:60:f2:
9d:ab:d4:16:78:fa:3a:34:1b:a8:15:6c:81:9b:e0:d3:9e:6a:
86:89:57:6c:91:b0:4a:26:be:17:5c:3a:8e:67:65:75:65:19:
d9:c7:e7:e1:8e:43:81:11:ef:d0:dc:72:68:06:e5:a9:f5:2d:
b4:cf:70:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTEWgncq08g8Zt6aooBTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2
Nzg5NmUwHhcNMjYwMzI1MTQwMDQ4WhcNMjYwMzI2MTQwMDQ4WjAzMTEwLwYDVQQD
EyhjNTljY2I3ZTcxNWY2YWQ4N2IwMjgyN2E3YzIxMmIxMWJhN2YwN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dPPQQ3CnVD9D/hvoatj9RRAqYMA
HHVo1Xj1dH1bPuDA+6ZuCiNm1hPiBrBPtpMcJnLi4iGCVaAZhlW68g/JM4sVgIaT
9Z/ye4b1N5Aeps2WaSSfRpmKN4avXEhpG/IvAJaMczJtc8DhOPV0adhvpkCNXUbP
e/NYJ1YtG0ddQuuzTfblow0Qgdyu98mvdrGqT0OctAkTteK/2qeSxiYbzg20FY3i
bpohatvhJ1nlsDoAhK3vv4LqWt0VoZnLt+aQb03XfBcEmMm7Ly+2TALwfEiOsLDG
U3uUjyoDP0+JXZdkS5h8TRK1gQDq7C3Qbq2RHGkL937HOnkyXy8RENra6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWcy35xX2rYewKCenwhKxG6fwfcMB8GA1UdIwQY
MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt
YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx
LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBPDtoY7
1SWu8V0Fi4ereV8Nd/Q/xp/eqWwSn8ybO+xXs4En34xrJ17cpcNiUqGKBpMhA8gH
VTNA8Vc5X3Qtmr6U4KnjN7ywOAkzw9C18YTejOKRkPpVhyY/aENAVr3ya/pJJZTk
UQaHHYcYPEzm2ScMXA6Hc10GZnuOfuszeUNp4pGgFvLv+sLs3PIvJILiZF0MZPOL
Y7rZ30OJSk2r8idPYMXIUXcsh/OMhXajQSptLsxtxxgXHf3OttNJZg8YYOt4ZGDy
navUFnj6OjQbqBVsgZvg055qholXbJGwSia+F1w6jmdldWUZ2cfn4Y5DgRHv0Nxy
aAblqfUttM9w8g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:53 2026 by rpki-client