
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
File: iWsznbz4QR1YQAjPAptHyIqzedU.mft (raw, json)
Hash identifier: AU2GDjIKOggNPkZIh2GzdI5hoc/qzxpJsjkaM5EzM7Y=
Subject key identifier: 18:D2:05:A5:32:26:87:90:C6:0F:A7:63:9E:2A:F4:66:17:BD:9D:7A
Authority key identifier: 89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
Certificate issuer: /CN=896b339dbcf8411d584008cf029b47c88ab379d5
Certificate serial: 019D25F12317585656CEF653394566364F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
Manifest number: 62
Signing time: Wed 25 Mar 2026 17:00:53 +0000
Manifest this update: Wed 25 Mar 2026 17:00:53 +0000
Manifest next update: Thu 26 Mar 2026 17:00:53 +0000
Files and hashes: 1: _01xdN9b6VGiDq8TdVfHkv4nsNA.roa (hash: cof+3EhtbeAEqNmK/OvBSq8ShRaGyYdb9JejvgRl8nA=)
2: iWsznbz4QR1YQAjPAptHyIqzedU.crl (hash: Akz+ou4VGRQVzmh1FRA5W8pE+E7bO3jEJW8gsoKHyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:23:17:58:56:56:ce:f6:53:39:45:66:36:4f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896b339dbcf8411d584008cf029b47c88ab379d5
Validity
Not Before: Mar 25 17:00:53 2026 GMT
Not After : Mar 26 17:00:53 2026 GMT
Subject: CN=18d205a532268790c60fa7639e2af46617bd9d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:9d:ff:49:b8:79:8c:ff:59:dc:b8:88:f6:
10:76:0e:f1:43:30:27:8e:4e:9d:20:ee:a7:b2:c5:
47:b8:a7:a2:22:61:06:55:37:cd:14:c6:13:ce:0a:
e1:c0:01:41:2b:5d:40:e2:3e:35:3e:6e:4c:5f:c3:
fe:08:fc:6c:20:66:57:d5:39:ab:99:38:0a:91:b8:
5b:44:9e:44:e8:0d:96:4e:b8:c0:c0:2f:14:26:5c:
bb:fd:37:97:90:64:59:9e:c5:1f:a6:5e:fe:27:32:
39:0d:84:27:78:7e:92:23:ad:a3:4e:4a:0c:97:3e:
84:df:10:9b:2a:00:17:5b:cc:ec:6b:73:17:80:35:
77:51:96:e7:38:ce:8c:82:30:80:3d:58:4c:a4:6b:
f2:12:19:75:c0:89:6c:ad:1f:ff:74:ac:bc:12:d2:
74:cb:da:73:05:a7:40:73:3b:ea:7d:d3:d5:dc:c3:
ae:f0:32:9a:77:d3:b6:e3:9c:40:89:df:55:3a:26:
53:37:81:05:3c:9a:bb:db:27:ae:60:12:c6:15:ba:
38:d4:d8:5f:5f:4c:8b:81:4c:66:bf:a9:a1:06:0c:
c4:3f:db:99:63:24:e4:7d:0c:01:77:2b:9c:08:7f:
78:85:7e:03:8b:b9:b9:e3:c8:db:ef:55:36:8f:9f:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D2:05:A5:32:26:87:90:C6:0F:A7:63:9E:2A:F4:66:17:BD:9D:7A
X509v3 Authority Key Identifier:
keyid:89:6B:33:9D:BC:F8:41:1D:58:40:08:CF:02:9B:47:C8:8A:B3:79:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWsznbz4QR1YQAjPAptHyIqzedU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74c76f-5d70-4eef-99f5-131cc48640dc/1/iWsznbz4QR1YQAjPAptHyIqzedU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:7c:74:1b:04:cb:da:0b:b8:3c:ee:fa:cd:c3:c1:39:b6:
8d:51:c2:5d:5a:b3:3b:71:ab:54:ce:6c:2a:40:78:87:78:6c:
c7:a6:1c:4e:37:85:f6:42:18:e8:66:51:e4:55:9e:4f:7d:05:
61:61:02:11:92:f6:cb:ee:b3:2d:dc:ef:33:48:a4:01:8b:29:
dd:0d:ef:05:9c:ca:f4:a6:74:08:67:6d:a1:f2:93:02:a2:ab:
18:8d:62:a4:44:06:af:e0:07:ae:c7:a1:e1:3d:da:72:4d:50:
c6:7a:cc:d1:d2:46:e5:5c:6e:70:f7:6a:c5:25:d0:2c:52:b4:
a5:42:08:7c:e3:7a:1b:17:71:20:59:3b:27:8f:8b:55:8d:80:
c5:bd:d8:ac:1b:45:ed:71:4f:ef:57:d0:cd:36:a9:65:94:b4:
f6:8a:e2:a2:53:55:48:e1:9c:7f:79:0e:02:15:41:5a:00:fc:
61:da:b5:b3:e1:5c:24:65:89:52:03:6a:b2:7f:29:91:7a:81:
89:cb:31:0c:ea:f0:ac:c5:df:b9:0b:34:da:ed:0d:9f:41:f2:
97:15:a3:92:fc:55:0e:b7:ea:5f:7a:65:0a:56:51:1a:3b:ab:
28:2a:42:9b:3d:41:c5:18:9c:99:b1:2b:17:25:b7:cc:8b:f5:
1a:4e:45:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8SMXWFZWzvZTOUVmNk+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmIzMzlkYmNmODQxMWQ1ODQwMDhjZjAyOWI0N2M4OGFi
Mzc5ZDUwHhcNMjYwMzI1MTcwMDUzWhcNMjYwMzI2MTcwMDUzWjAzMTEwLwYDVQQD
EygxOGQyMDVhNTMyMjY4NzkwYzYwZmE3NjM5ZTJhZjQ2NjE3YmQ5ZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H2d/0m4eYz/Wdy4iPYQdg7xQzAn
jk6dIO6nssVHuKeiImEGVTfNFMYTzgrhwAFBK11A4j41Pm5MX8P+CPxsIGZX1Tmr
mTgKkbhbRJ5E6A2WTrjAwC8UJly7/TeXkGRZnsUfpl7+JzI5DYQneH6SI62jTkoM
lz6E3xCbKgAXW8zsa3MXgDV3UZbnOM6MgjCAPVhMpGvyEhl1wIlsrR//dKy8EtJ0
y9pzBadAczvqfdPV3MOu8DKad9O245xAid9VOiZTN4EFPJq72yeuYBLGFbo41Nhf
X0yLgUxmv6mhBgzEP9uZYyTkfQwBdyucCH94hX4Di7m548jb71U2j58J2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjSBaUyJoeQxg+nY54q9GYXvZ16MB8GA1UdIwQY
MBaAFIlrM528+EEdWEAIzwKbR8iKs3nVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdzem5iejRRUjFZUUFqUEFwdEh5SXF6ZWRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGM3NmYtNWQ3MC00ZWVmLTk5ZjUt
MTMxY2M0ODY0MGRjLzEvaVdzem5iejRRUjFZUUFqUEFwdEh5SXF6ZWRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NGM3NmYtNWQ3MC00ZWVmLTk5ZjUtMTMxY2M0ODY0MGRj
LzEvaVdzem5iejRRUjFZUUFqUEFwdEh5SXF6ZWRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKB8dBsE
y9oLuDzu+s3DwTm2jVHCXVqzO3GrVM5sKkB4h3hsx6YcTjeF9kIY6GZR5FWeT30F
YWECEZL2y+6zLdzvM0ikAYsp3Q3vBZzK9KZ0CGdtofKTAqKrGI1ipEQGr+AHrseh
4T3ack1QxnrM0dJG5VxucPdqxSXQLFK0pUIIfON6GxdxIFk7J4+LVY2Axb3YrBtF
7XFP71fQzTapZZS09oriolNVSOGcf3kOAhVBWgD8Ydq1s+FcJGWJUgNqsn8pkXqB
icsxDOrwrMXfuQs02u0Nn0HylxWjkvxVDrfqX3plClZRGjurKCpCmz1BxRicmbEr
FyW3zIv1Gk5FvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:33 2026 by rpki-client