Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: i1B7DB4oc+6vVYEn/B6wTv+kCECACIDznPpHmqoUGN0=
Subject key identifier: 4B:8B:BC:F5:BD:CF:D4:6A:B0:98:72:C7:28:76:43:70:28:72:04:5A
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 019D2695C928CE4210F95162F29F8709F99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 1596
Signing time: Wed 25 Mar 2026 20:00:43 +0000
Manifest this update: Wed 25 Mar 2026 20:00:43 +0000
Manifest next update: Thu 26 Mar 2026 20:00:43 +0000
Files and hashes: 1: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (hash: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI=)
2: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: Ze276f2zu8+RgadBHXpM5I+pMo9b06OY8Cr4Woen/Fo=)
3: hVY_dYxYhKuO3qtI4MOUcvIONF4.roa (hash: yGx/OoacbBBGFHUNn7h+o/bue//pA9bBusA+ebRU/Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:c9:28:ce:42:10:f9:51:62:f2:9f:87:09:f9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Mar 25 20:00:43 2026 GMT
Not After : Mar 26 20:00:43 2026 GMT
Subject: CN=4b8bbcf5bdcfd46ab09872c7287643702872045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:3a:03:e0:4e:7e:3e:d8:89:ec:6c:bc:50:
4a:48:53:ed:e0:40:47:30:8e:ea:a5:57:d3:56:e4:
d6:c9:12:b0:9d:d1:74:fd:af:fa:21:a2:c4:21:8d:
11:fe:d9:dc:b2:a6:9b:75:c7:b8:3d:a3:d5:a0:37:
f9:e3:20:48:08:e7:45:fc:ad:36:73:bb:41:0d:42:
67:08:cd:d7:30:34:58:8a:04:4e:82:7c:ae:41:bb:
81:a7:9e:09:1a:38:16:af:e8:ee:c3:ac:f6:7f:48:
6d:b9:2d:3c:d5:21:99:6c:ae:47:b7:db:ab:74:2a:
25:2a:cb:29:bd:7a:7d:9d:9b:e7:92:a5:f5:80:18:
25:db:b0:fe:d1:39:c4:a8:c6:85:5f:66:c1:2e:26:
fe:79:c6:57:6f:62:aa:89:bc:ff:31:c2:94:68:db:
04:81:f3:19:1b:79:4b:17:26:75:82:ea:b8:24:f2:
1b:fa:e5:27:27:5e:18:75:5c:bf:d2:f4:a6:86:93:
21:0e:e4:92:60:58:14:d2:79:51:dc:b9:0a:02:66:
20:75:59:f6:b1:25:ec:3f:84:4a:92:6e:42:4e:49:
48:bf:ac:c4:a7:6a:b1:eb:6f:1e:b3:23:e9:db:a8:
28:05:02:2c:14:f3:69:ab:b7:b8:57:10:6b:9f:0e:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:BC:F5:BD:CF:D4:6A:B0:98:72:C7:28:76:43:70:28:72:04:5A
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:21:57:08:20:87:23:b1:1b:d9:92:e4:36:69:52:3a:b8:
1e:d3:e4:ce:9c:f6:a3:ff:0e:4c:b4:1c:85:29:ed:51:0a:18:
24:f0:09:ce:b1:47:fd:ec:43:f8:40:b8:36:40:44:b6:30:62:
97:d5:cf:b0:26:e5:4a:8c:de:7a:d1:a7:24:83:69:26:cf:65:
b9:b0:ed:ff:4d:32:b6:9f:6e:59:21:7c:b5:fd:8b:d1:ac:15:
f9:e9:a8:7c:16:62:76:50:b8:e8:ac:d7:7c:a4:29:a2:40:66:
7e:c1:59:33:36:9c:75:af:d5:38:9e:e1:93:93:94:42:ec:b2:
90:e5:01:99:c0:cc:c2:d7:95:14:db:bb:77:b7:d1:f5:b6:5f:
0d:78:eb:4f:b3:38:17:13:bd:bc:fc:62:c7:0e:4a:35:c9:68:
63:bb:a7:83:73:4b:bf:bf:17:5b:c9:3c:84:4d:7d:48:7e:69:
6d:df:58:d6:63:d4:cf:37:11:64:3e:06:42:02:fb:d2:6b:75:
f5:83:ea:ba:63:1f:d7:1d:cd:e0:83:f1:d3:53:03:c7:48:04:
8e:8d:1b:e9:5d:3e:fb:fa:c8:5d:64:62:8e:22:eb:d4:8e:de:
bd:4f:88:e2:1e:be:af:ae:48:fc:e5:6a:0e:f8:2e:4c:c8:79:
f2:9c:1b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlckozkIQ+VFi8p+HCfmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Zjg4NTIyMGYxNzE5ZjU4MzdjYjVhMzZmYTYyZjNmNTM3
ZThlM2YwHhcNMjYwMzI1MjAwMDQzWhcNMjYwMzI2MjAwMDQzWjAzMTEwLwYDVQQD
Eyg0YjhiYmNmNWJkY2ZkNDZhYjA5ODcyYzcyODc2NDM3MDI4NzIwNDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oI6A+BOfj7YiexsvFBKSFPt4EBH
MI7qpVfTVuTWyRKwndF0/a/6IaLEIY0R/tncsqabdce4PaPVoDf54yBICOdF/K02
c7tBDUJnCM3XMDRYigROgnyuQbuBp54JGjgWr+juw6z2f0htuS081SGZbK5Ht9ur
dColKsspvXp9nZvnkqX1gBgl27D+0TnEqMaFX2bBLib+ecZXb2Kqibz/McKUaNsE
gfMZG3lLFyZ1guq4JPIb+uUnJ14YdVy/0vSmhpMhDuSSYFgU0nlR3LkKAmYgdVn2
sSXsP4RKkm5CTklIv6zEp2qx628esyPp26goBQIsFPNpq7e4VxBrnw61nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuLvPW9z9RqsJhyxyh2Q3AocgRaMB8GA1UdIwQY
MBaAFET4hSIPFxn1g3y1o2+mLz9Tfo4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDkt
MzdlZDk5MTQzYWFlLzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iYWIxOTQtNWUyNC00ZWFkLThmNDktMzdlZDk5MTQzYWFl
LzEvUlBpRklnOFhHZldEZkxXamI2WXZQMU4tamo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUEhVwgg
hyOxG9mS5DZpUjq4HtPkzpz2o/8OTLQchSntUQoYJPAJzrFH/exD+EC4NkBEtjBi
l9XPsCblSozeetGnJINpJs9lubDt/00ytp9uWSF8tf2L0awV+emofBZidlC46KzX
fKQpokBmfsFZMzacda/VOJ7hk5OUQuyykOUBmcDMwteVFNu7d7fR9bZfDXjrT7M4
FxO9vPxixw5KNcloY7ung3NLv78XW8k8hE19SH5pbd9Y1mPUzzcRZD4GQgL70mt1
9YPqumMf1x3N4IPx01MDx0gEjo0b6V0++/rIXWRijiLr1I7evU+I4h6+r65I/OVq
DvguTMh58pwb9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:33 2026 by rpki-client