Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: h0AyQFSyC6tlTSdjBfJXiKUoT2OuP4YGrzd4GkfkaTY=
Subject key identifier: 90:A6:8D:C1:37:1B:F4:16:0C:C0:05:7C:07:7E:F9:D0:AC:4F:29:F1
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019D28843A7700F0D49D6772EA4E814B5C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: enodbx6xJJzfyK6rov103horjFcQ8BRe6wt1VQ2czbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3a:77:00:f0:d4:9d:67:72:ea:4e:81:4b:5c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=90a68dc1371bf4160cc0057c077ef9d0ac4f29f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:54:10:f6:d4:9e:7f:d5:ba:70:a6:a7:15:
74:a0:12:2e:f4:da:b0:5a:3e:d4:fc:d4:48:e5:e5:
81:64:34:b1:0d:1c:42:0d:57:79:9c:89:a6:2a:44:
df:19:e7:c3:e3:79:9c:fb:b0:6d:8a:52:94:42:fc:
7e:72:6b:d3:71:61:d7:1c:dd:79:7c:c2:ad:31:dd:
8f:27:65:49:85:f5:7a:71:e7:83:0f:2f:73:34:1e:
c7:54:b7:20:6f:52:d7:fd:3e:e4:62:22:1d:a0:f2:
99:24:f5:23:22:0e:ca:8d:13:07:57:f3:bc:f8:44:
6a:ae:9b:48:8e:de:98:d2:04:31:82:46:56:53:57:
d8:c5:4c:39:4d:9b:f9:7d:19:e7:ef:56:61:c6:72:
22:45:b5:e4:46:76:02:90:2c:df:c3:d8:7f:da:5e:
a2:34:0f:0e:86:7b:41:11:05:71:fc:a0:10:f3:bd:
d5:bc:44:1b:1e:86:00:87:07:78:b6:0b:5f:43:d6:
db:c0:d6:a2:e3:3a:4c:17:bb:ed:d1:82:d2:76:18:
b4:a1:3c:37:12:f6:f2:eb:df:1b:97:16:83:5c:58:
af:9d:fe:0e:fb:cd:02:ac:17:e6:96:2e:9b:2e:e5:
d8:09:8a:d0:ac:55:f4:0b:10:78:80:9f:bc:a9:8c:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A6:8D:C1:37:1B:F4:16:0C:C0:05:7C:07:7E:F9:D0:AC:4F:29:F1
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:03:ef:c0:8d:48:d3:b5:3b:17:40:bd:33:9d:b7:93:62:56:
14:bf:fe:31:dc:dc:1b:e2:9b:6d:a6:66:90:1b:eb:18:3c:3a:
f1:8b:fc:ff:9f:05:9b:e6:d4:22:e5:c2:96:2d:ff:f1:0e:18:
25:56:b2:eb:58:47:9a:ad:a8:f3:89:6c:28:d1:b6:d4:b8:01:
9e:af:a6:e7:76:ff:94:ba:8a:63:1e:9b:14:55:c8:cf:67:32:
fa:9a:33:99:b7:05:e2:ae:e8:22:5f:8e:92:e9:0a:4a:c2:d0:
84:b0:90:fd:76:81:c8:53:d4:d2:68:5c:37:1c:c4:ae:a2:52:
30:b3:80:48:a7:53:27:7b:4f:88:6b:33:b4:a3:41:78:76:7a:
0a:ec:b9:7e:4e:c3:55:12:cb:67:8a:43:53:4f:75:83:5f:a5:
77:4f:ab:d5:58:6a:74:6b:fa:27:33:22:fe:e3:b5:4a:e7:67:
3d:8a:14:6d:2d:4c:5f:b1:22:5c:90:f7:db:d2:dc:bf:b6:9c:
ab:2a:1e:a7:0a:34:a8:2f:e8:e8:d2:36:10:15:f2:2d:12:66:
88:91:02:a2:a1:8e:d2:c4:00:57:59:6d:4b:f4:23:9c:ba:27:
6f:55:ef:cd:b4:7d:22:eb:53:9d:d7:05:e5:53:c7:2a:6b:d1:
98:04:f7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohDp3APDUnWdy6k6BS1xiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx
YjRlMWEwHhcNMjYwMzI2MDUwMDQ3WhcNMjYwMzI3MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg5MGE2OGRjMTM3MWJmNDE2MGNjMDA1N2MwNzdlZjlkMGFjNGYyOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqFUEPbUnn/VunCmpxV0oBIu9Nqw
Wj7U/NRI5eWBZDSxDRxCDVd5nImmKkTfGefD43mc+7BtilKUQvx+cmvTcWHXHN15
fMKtMd2PJ2VJhfV6ceeDDy9zNB7HVLcgb1LX/T7kYiIdoPKZJPUjIg7KjRMHV/O8
+ERqrptIjt6Y0gQxgkZWU1fYxUw5TZv5fRnn71ZhxnIiRbXkRnYCkCzfw9h/2l6i
NA8OhntBEQVx/KAQ873VvEQbHoYAhwd4tgtfQ9bbwNai4zpMF7vt0YLSdhi0oTw3
Evby698blxaDXFivnf4O+80CrBfmli6bLuXYCYrQrFX0CxB4gJ+8qYzylQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCmjcE3G/QWDMAFfAd++dCsTynxMB8GA1UdIwQY
MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct
Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh
LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgPvwI1I
07U7F0C9M523k2JWFL/+MdzcG+KbbaZmkBvrGDw68Yv8/58Fm+bUIuXCli3/8Q4Y
JVay61hHmq2o84lsKNG21LgBnq+m53b/lLqKYx6bFFXIz2cy+pozmbcF4q7oIl+O
kukKSsLQhLCQ/XaByFPU0mhcNxzErqJSMLOASKdTJ3tPiGsztKNBeHZ6Cuy5fk7D
VRLLZ4pDU091g1+ld0+r1VhqdGv6JzMi/uO1SudnPYoUbS1MX7EiXJD329Lcv7ac
qyoepwo0qC/o6NI2EBXyLRJmiJECoqGO0sQAV1ltS/QjnLonb1XvzbR9IutTndcF
5VPHKmvRmAT3Mg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:42:46 2026 by rpki-client