Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: 7EnQv0L4NyLWVF6DRVxD2OfFpKI7FJdqQy0ar3kehQ8=
Subject key identifier: C9:D7:55:94:F9:C6:AD:54:62:98:A6:4C:F4:B0:A5:49:45:9C:37:B7
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 019D28847C6AC6FAC9F034A3FE110D76B643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: 5nqAIjs4Map_dmOK-D_BzJ5dduI.roa (hash: YmgmK05MQj5RQuP0mkk06fEYlISXZEUPrlooDAX79Gc=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: NAa9x/1HGaBbjJ1RBssXOWkr2l7u7LPSllRNHEBJ6T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7c:6a:c6:fa:c9:f0:34:a3:fe:11:0d:76:b6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=c9d75594f9c6ad546298a64cf4b0a549459c37b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:6b:51:73:c7:3c:41:d5:fd:46:69:14:6c:
3f:11:61:1f:62:ef:54:7a:31:35:98:12:58:11:45:
68:80:51:70:91:73:47:d5:f5:30:ba:75:b5:0c:20:
52:cf:7a:12:97:cb:f5:85:36:cf:bb:e0:1a:6b:66:
81:33:e7:4a:15:2f:8f:44:d7:a0:9f:ab:92:d5:5c:
f0:27:1b:7f:13:bf:4a:37:46:51:8d:11:67:26:68:
35:9f:20:c5:4e:d6:02:3e:b7:62:56:d4:2b:d2:ca:
7a:c2:89:7c:30:ed:dc:89:f1:3e:a4:01:19:3d:43:
3a:d5:44:4e:14:ec:fb:c9:ea:a4:db:08:fa:0e:55:
34:39:7e:1e:54:8c:89:e6:c5:49:00:f0:3b:e9:70:
41:34:d1:fd:d1:9d:72:4d:17:3a:97:dd:03:f1:f1:
fd:9c:f6:78:fc:73:5d:4c:df:01:18:6d:ab:5c:ab:
f1:d4:fc:02:44:d0:63:5b:c0:11:a8:0b:9b:d1:3b:
89:14:da:a0:d1:de:49:66:27:a8:11:9c:f5:f3:f8:
ca:ad:ef:74:d7:10:20:28:8f:cb:ac:5b:33:71:f9:
48:b4:bb:7a:e2:49:1c:e2:39:86:6a:20:4c:fc:96:
9c:b6:34:8a:6d:43:c8:76:a9:b0:d3:5a:2d:e3:3f:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:55:94:F9:C6:AD:54:62:98:A6:4C:F4:B0:A5:49:45:9C:37:B7
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:49:1c:3f:61:f5:14:06:6e:c1:2b:ed:fd:0c:a6:1f:14:05:
f8:bb:1d:9f:91:aa:4a:92:35:c9:22:f4:12:31:f9:b6:f4:5e:
b9:c7:bd:c4:bd:5f:61:12:8e:a2:a2:18:6d:13:01:20:4c:ca:
69:2d:8f:ae:99:23:1e:50:63:b7:65:4d:69:87:ca:1a:36:6e:
c8:9a:b8:e7:81:64:de:28:bd:b2:e3:3e:17:4d:3d:8f:b8:3e:
3d:2c:bc:29:32:11:3b:64:28:12:e2:15:c0:20:6b:20:18:c6:
2d:7f:48:07:be:c6:53:a1:17:a6:44:0c:f5:14:54:43:38:31:
04:57:bc:7c:a7:f8:f6:bf:c8:f3:ab:82:63:72:f5:96:0f:0e:
74:67:4d:c7:ed:55:04:00:a6:24:bc:e8:93:9e:e9:87:b5:22:
e3:3a:41:5d:ea:66:63:72:30:9c:7a:2e:90:78:9c:f3:02:49:
c3:b0:f3:e2:0f:8a:63:15:6b:c0:5d:59:bc:e8:c5:98:b5:09:
c3:e5:04:6b:a0:88:f2:e4:f7:f1:ff:ff:52:43:01:5b:d6:02:
64:24:87:16:37:8e:2b:02:d5:5a:0f:6c:b7:70:c7:b6:60:cd:
c4:22:c9:50:11:30:ea:23:b4:f7:59:17:33:17:f1:4d:a5:4c:
25:9f:a0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohHxqxvrJ8DSj/hENdrZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjIxZjczMTZlMWJkNzhmODZlZWE2NDI1ZDVjMjI5Yjk4
MGY5YWMwHhcNMjYwMzI2MDUwMTA0WhcNMjYwMzI3MDUwMTA0WjAzMTEwLwYDVQQD
EyhjOWQ3NTU5NGY5YzZhZDU0NjI5OGE2NGNmNGIwYTU0OTQ1OWMzN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC9rUXPHPEHV/UZpFGw/EWEfYu9U
ejE1mBJYEUVogFFwkXNH1fUwunW1DCBSz3oSl8v1hTbPu+Aaa2aBM+dKFS+PRNeg
n6uS1VzwJxt/E79KN0ZRjRFnJmg1nyDFTtYCPrdiVtQr0sp6wol8MO3cifE+pAEZ
PUM61UROFOz7yeqk2wj6DlU0OX4eVIyJ5sVJAPA76XBBNNH90Z1yTRc6l90D8fH9
nPZ4/HNdTN8BGG2rXKvx1PwCRNBjW8ARqAub0TuJFNqg0d5JZieoEZz18/jKre90
1xAgKI/LrFszcflItLt64kkc4jmGaiBM/JactjSKbUPIdqmw01ot4z8XuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnXVZT5xq1UYpimTPSwpUlFnDe3MB8GA1UdIwQY
MBaAFCPyH3MW4b14+G7qZCXVwim5gPmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2Yt
OTc0YzMxZjI2NjBiLzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YTU5Y2YtNTA5Mi00NzRkLTgxY2YtOTc0YzMxZjI2NjBi
LzEvSV9JZmN4Ymh2WGo0YnVwa0pkWENLYm1BLWF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0kcP2H1
FAZuwSvt/QymHxQF+Lsdn5GqSpI1ySL0EjH5tvReuce9xL1fYRKOoqIYbRMBIEzK
aS2PrpkjHlBjt2VNaYfKGjZuyJq454Fk3ii9suM+F009j7g+PSy8KTIRO2QoEuIV
wCBrIBjGLX9IB77GU6EXpkQM9RRUQzgxBFe8fKf49r/I86uCY3L1lg8OdGdNx+1V
BACmJLzok57ph7Ui4zpBXepmY3IwnHoukHic8wJJw7Dz4g+KYxVrwF1ZvOjFmLUJ
w+UEa6CI8uT38f//UkMBW9YCZCSHFjeOKwLVWg9st3DHtmDNxCLJUBEw6iO091kX
MxfxTaVMJZ+gdg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:01 2026 by rpki-client