Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: L92eHCpP+q6KF8mLMS5oSfou04oWkBL/F44c1oDKOpI=
Subject key identifier: 7F:8F:FE:29:C0:7E:A8:F0:A1:70:65:7A:96:C0:DE:E9:B6:3C:48:D3
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019D28BBC0312FAB0263DD7AB45F68BB31C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 06:01:26 +0000
Manifest this update: Thu 26 Mar 2026 06:01:26 +0000
Manifest next update: Fri 27 Mar 2026 06:01:26 +0000
Files and hashes: 1: 5qofx5kn-ofCIj9o3NGivX2oyoc.roa (hash: 7NfNoXJjBTrvr3E7539ztDCcU2EbYZAvEuO82OgvQXg=)
2: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: Eck1yf5W4dz0YQJ0gVdjjTB0j8I403Hd6JpZhiClzhY=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:c0:31:2f:ab:02:63:dd:7a:b4:5f:68:bb:31:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Mar 26 06:01:26 2026 GMT
Not After : Mar 27 06:01:26 2026 GMT
Subject: CN=7f8ffe29c07ea8f0a170657a96c0dee9b63c48d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:f6:33:b2:78:85:9d:c8:9d:84:ab:46:6f:
a9:84:93:2a:92:22:94:25:47:08:28:c1:c3:62:e8:
a6:1d:e6:d3:e6:47:70:06:7e:b8:a9:02:41:4c:21:
ea:55:50:1f:98:0e:15:70:f2:af:65:a9:ad:cf:75:
49:c2:fa:e0:32:38:bf:2a:95:60:4b:94:74:83:45:
55:65:b7:99:2f:1d:19:43:e0:56:10:d6:cf:30:04:
9b:b4:37:c5:1c:b2:3e:2c:82:bb:5d:01:be:c9:83:
d0:18:6e:d9:c5:8d:b5:b4:f9:4e:a5:b7:9b:16:c9:
cc:9c:98:31:2b:c4:62:0a:b9:1a:c8:8e:6f:eb:ef:
06:e7:07:41:6a:fe:e3:55:b2:47:48:3a:fb:f9:f8:
2d:77:fb:22:75:5e:54:63:d6:83:e9:d2:6d:1c:ac:
96:b0:e9:04:56:07:da:49:01:09:e1:92:b9:61:29:
6a:58:40:ff:22:70:46:8e:d0:ed:c6:8b:71:93:93:
a0:be:31:3d:fe:4e:b9:dd:8c:f1:23:a7:c6:d9:59:
d7:bc:22:93:fa:a5:cc:23:75:d9:06:e2:52:f3:f2:
f0:b7:7e:cd:f6:02:ef:6c:92:e0:18:9d:e4:b6:13:
3d:ea:89:99:66:f9:81:a4:12:a4:d2:e6:07:7d:bf:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:FE:29:C0:7E:A8:F0:A1:70:65:7A:96:C0:DE:E9:B6:3C:48:D3
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d1:c4:e5:4b:d2:cf:5b:83:a8:84:52:a1:91:66:26:f6:38:
dd:ec:e8:ed:c6:47:e0:58:37:36:e3:45:82:1f:b7:3d:47:1f:
37:a9:0b:35:3e:60:3f:59:d2:4d:6c:34:63:13:f7:72:21:51:
3e:1c:eb:4f:3f:14:e8:c4:a0:52:20:48:ce:6a:42:32:88:f3:
db:b4:56:b0:d5:b4:93:91:68:40:ad:2d:41:33:d5:9c:0e:a0:
38:42:c3:e3:34:40:c6:fe:13:2c:d4:a1:d0:5c:65:bf:d5:80:
00:fe:19:c1:9d:81:7c:91:ec:86:1c:20:f0:d8:18:3b:34:80:
9a:0c:f8:d8:a3:e2:ae:5a:e1:75:aa:35:2e:5c:7b:da:de:54:
3a:1e:62:d3:4d:98:50:83:b8:be:a0:7c:86:c9:ea:77:b8:02:
7f:99:87:14:d2:8c:40:a5:f8:d4:9b:4b:b1:34:00:70:11:49:
46:8d:15:2c:b8:83:b0:39:74:53:a9:9b:74:3f:2d:91:49:e0:
46:ec:07:6e:02:7a:e9:c1:a9:e0:78:33:7a:c6:2a:45:3d:10:
9f:38:a2:f1:fc:bd:de:b6:9d:8a:8b:50:3c:d4:fa:cc:dc:74:
bf:fd:0d:4f:26:0a:d5:c3:38:c0:50:29:74:3e:c6:a0:4d:db:
21:e0:f5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou8AxL6sCY916tF9ouzHIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0
ZTg4NDcwHhcNMjYwMzI2MDYwMTI2WhcNMjYwMzI3MDYwMTI2WjAzMTEwLwYDVQQD
Eyg3ZjhmZmUyOWMwN2VhOGYwYTE3MDY1N2E5NmMwZGVlOWI2M2M0OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8v2M7J4hZ3InYSrRm+phJMqkiKU
JUcIKMHDYuimHebT5kdwBn64qQJBTCHqVVAfmA4VcPKvZamtz3VJwvrgMji/KpVg
S5R0g0VVZbeZLx0ZQ+BWENbPMASbtDfFHLI+LIK7XQG+yYPQGG7ZxY21tPlOpbeb
FsnMnJgxK8RiCrkayI5v6+8G5wdBav7jVbJHSDr7+fgtd/sidV5UY9aD6dJtHKyW
sOkEVgfaSQEJ4ZK5YSlqWED/InBGjtDtxotxk5OgvjE9/k653YzxI6fG2VnXvCKT
+qXMI3XZBuJS8/Lwt37N9gLvbJLgGJ3kthM96omZZvmBpBKk0uYHfb8NUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+P/inAfqjwoXBlepbA3um2PEjTMB8GA1UdIwQY
MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt
NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl
LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdHE5UvS
z1uDqIRSoZFmJvY43ezo7cZH4Fg3NuNFgh+3PUcfN6kLNT5gP1nSTWw0YxP3ciFR
PhzrTz8U6MSgUiBIzmpCMojz27RWsNW0k5FoQK0tQTPVnA6gOELD4zRAxv4TLNSh
0Fxlv9WAAP4ZwZ2BfJHshhwg8NgYOzSAmgz42KPirlrhdao1Llx72t5UOh5i002Y
UIO4vqB8hsnqd7gCf5mHFNKMQKX41JtLsTQAcBFJRo0VLLiDsDl0U6mbdD8tkUng
RuwHbgJ66cGp4HgzesYqRT0Qnzii8fy93radiotQPNT6zNx0v/0NTyYK1cM4wFAp
dD7GoE3bIeD18A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:00 2026 by rpki-client