Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: hY3IwzpvtZsKz+Ze/Y5RfVnXfhk55JLa1U5oC6wNMu8=
Subject key identifier: F5:FE:2F:43:E6:13:C3:73:E5:E5:51:88:63:68:C6:39:9B:51:13:ED
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019D2929434B3E1A13B6AE40A7A99D06A16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 10A4
Signing time: Thu 26 Mar 2026 08:01:03 +0000
Manifest this update: Thu 26 Mar 2026 08:01:03 +0000
Manifest next update: Fri 27 Mar 2026 08:01:03 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: M41hBxPg4vRZqUuQbJMjr/L6NgcffWOGjlpaPwWD2XI=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:43:4b:3e:1a:13:b6:ae:40:a7:a9:9d:06:a1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Mar 26 08:01:03 2026 GMT
Not After : Mar 27 08:01:03 2026 GMT
Subject: CN=f5fe2f43e613c373e5e551886368c6399b5113ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:ca:e5:2f:9f:0c:46:48:71:4d:1a:1f:70:
4f:c8:0b:e1:fd:7c:c5:98:01:88:72:d0:c0:64:bd:
c6:30:40:57:09:66:b7:05:9a:47:17:78:41:b9:cf:
ab:aa:ca:67:ec:7a:6f:33:58:8e:26:d3:40:f4:b9:
21:6e:48:7c:3f:ca:d2:f8:51:c3:19:af:d4:5e:de:
13:b4:25:79:9c:08:bc:1d:42:c0:1f:6d:02:8f:af:
14:6c:53:4b:2e:2b:52:83:ba:d3:b5:1b:2e:4f:12:
3f:39:e3:f0:5d:8d:9a:bb:65:ca:fe:64:78:d5:a2:
34:a1:23:35:be:52:86:40:cf:84:52:21:b2:c3:57:
60:63:f3:d2:37:08:7f:13:9c:cf:e4:3e:3e:e4:cb:
53:88:c6:e1:69:cc:44:e8:ec:a1:bf:23:12:67:38:
aa:b4:16:fb:01:fc:6f:ee:a5:ec:84:61:5c:88:57:
93:fb:65:74:32:52:e9:2f:9e:57:bf:aa:6e:a5:8d:
e0:32:65:75:b7:fc:25:c8:c5:96:68:e8:eb:3e:9c:
e6:32:78:bb:be:bf:42:63:8d:5e:9a:e9:68:7e:f8:
31:e2:7d:44:b4:0c:aa:6c:a1:5d:c8:d9:30:88:bf:
5f:c7:ec:43:bf:a3:5e:2f:63:25:85:4c:c4:3f:cd:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FE:2F:43:E6:13:C3:73:E5:E5:51:88:63:68:C6:39:9B:51:13:ED
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c5:9f:ec:18:24:d0:0c:5c:c6:d4:f6:87:5c:22:50:ae:ac:
3c:9a:a7:29:a7:26:d6:ba:70:9b:66:b4:49:88:71:a8:5b:af:
0c:84:e9:09:ed:7d:bd:91:7e:75:1a:89:5c:ec:57:62:e5:7b:
24:82:25:14:59:df:a0:50:30:be:50:5f:19:58:05:20:fe:00:
48:9d:cc:5a:19:21:ab:5d:42:89:7d:26:76:43:1c:40:9e:de:
ca:3b:31:73:4c:3f:f0:75:f6:ee:66:a9:0d:f9:09:b3:21:41:
b7:bb:7d:34:17:02:53:8e:df:09:be:3d:9c:db:b5:01:e5:dc:
1e:d7:95:f2:94:ab:14:d0:39:6e:07:a8:e8:7e:13:03:76:21:
21:54:4c:ac:01:bb:11:f2:75:39:24:bd:94:46:92:3f:b1:fd:
0b:84:67:90:e6:17:0e:7c:aa:52:b7:f3:6e:be:74:ae:a1:d5:
92:69:5e:22:cd:88:8a:7e:64:cc:ad:84:45:66:68:33:00:ea:
7e:91:63:82:eb:d5:01:43:d5:e4:11:3d:70:04:8f:5d:33:0e:
66:6e:30:09:fa:de:19:c4:92:b6:de:cd:ac:82:91:00:98:6e:
37:bd:10:ec:48:3a:f1:35:ee:d6:18:d3:2c:db:8e:c1:2e:6e:
2f:ff:75:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKUNLPhoTtq5Ap6mdBqFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx
OWE4OGYwHhcNMjYwMzI2MDgwMTAzWhcNMjYwMzI3MDgwMTAzWjAzMTEwLwYDVQQD
EyhmNWZlMmY0M2U2MTNjMzczZTVlNTUxODg2MzY4YzYzOTliNTExM2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQDK5S+fDEZIcU0aH3BPyAvh/XzF
mAGIctDAZL3GMEBXCWa3BZpHF3hBuc+rqspn7HpvM1iOJtNA9Lkhbkh8P8rS+FHD
Ga/UXt4TtCV5nAi8HULAH20Cj68UbFNLLitSg7rTtRsuTxI/OePwXY2au2XK/mR4
1aI0oSM1vlKGQM+EUiGyw1dgY/PSNwh/E5zP5D4+5MtTiMbhacxE6OyhvyMSZziq
tBb7Afxv7qXshGFciFeT+2V0MlLpL55Xv6pupY3gMmV1t/wlyMWWaOjrPpzmMni7
vr9CY41emulofvgx4n1EtAyqbKFdyNkwiL9fx+xDv6NeL2MlhUzEP83SnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX+L0PmE8Nz5eVRiGNoxjmbURPtMB8GA1UdIwQY
MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt
ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy
LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMWf7Bgk
0AxcxtT2h1wiUK6sPJqnKacm1rpwm2a0SYhxqFuvDITpCe19vZF+dRqJXOxXYuV7
JIIlFFnfoFAwvlBfGVgFIP4ASJ3MWhkhq11CiX0mdkMcQJ7eyjsxc0w/8HX27map
DfkJsyFBt7t9NBcCU47fCb49nNu1AeXcHteV8pSrFNA5bgeo6H4TA3YhIVRMrAG7
EfJ1OSS9lEaSP7H9C4RnkOYXDnyqUrfzbr50rqHVkmleIs2Iin5kzK2ERWZoMwDq
fpFjguvVAUPV5BE9cASPXTMOZm4wCfreGcSStt7NrIKRAJhuN70Q7Eg68TXu1hjT
LNuOwS5uL/91bw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:45:00 2026 by rpki-client