Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: 9AUsfEmdASRugtcki25wl4ogm430bC31HuCWpYm10sY=
Subject key identifier: EF:DC:C1:F5:43:3C:68:28:BC:85:87:54:55:07:D0:43:F9:41:16:89
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019D2AA93D83A5C5608023DCC841603C3690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 15:00:27 +0000
Manifest this update: Thu 26 Mar 2026 15:00:27 +0000
Manifest next update: Fri 27 Mar 2026 15:00:27 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: 01jKnSRpalXCnMSS95M7AZ6BQpQIXA1MEKbF8fwpogc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:3d:83:a5:c5:60:80:23:dc:c8:41:60:3c:36:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Mar 26 15:00:27 2026 GMT
Not After : Mar 27 15:00:27 2026 GMT
Subject: CN=efdcc1f5433c6828bc8587545507d043f9411689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:c1:46:49:ae:39:7e:e8:58:00:71:33:d8:
51:46:cd:b1:dc:7d:32:51:6f:1b:c7:6b:9f:50:e9:
45:39:26:ea:a3:9e:0f:0a:81:b7:c2:76:cd:4c:a0:
3a:51:75:fd:ea:6a:a6:92:61:92:5e:18:3c:37:f9:
f3:84:75:ca:e0:a3:2a:97:f6:8c:6b:50:58:6e:cb:
2a:af:92:35:62:c5:10:95:b7:48:29:94:87:bf:00:
44:af:66:1f:5a:9e:d3:d5:34:f0:77:43:dc:38:3e:
41:96:52:2e:73:b1:93:df:19:e1:0d:42:68:9f:6b:
c7:6b:66:1f:44:90:3d:a1:14:7d:56:73:70:c6:22:
47:cb:47:e7:7d:90:f3:43:62:f6:00:2e:45:3c:87:
3a:1a:ea:83:b4:25:61:cc:94:22:f9:96:e2:e5:a5:
57:55:6c:5e:cc:85:bd:c9:0a:86:43:db:fa:a7:1b:
90:0d:98:ca:9a:c1:0d:26:0d:2b:56:35:69:ce:99:
3f:07:6c:59:33:32:6c:33:40:70:d3:27:85:cf:70:
54:bb:4a:04:7c:02:34:b0:64:86:a6:d3:e3:81:c9:
35:9c:bf:ae:bc:65:4d:4c:25:df:02:a1:f9:86:8d:
03:08:72:ee:fb:30:f3:43:00:b8:d2:fc:42:6f:b0:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DC:C1:F5:43:3C:68:28:BC:85:87:54:55:07:D0:43:F9:41:16:89
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:97:de:fb:90:3d:6a:fa:4a:69:aa:2c:f6:2a:ec:89:07:60:
03:aa:8b:4e:79:f2:a4:29:ae:20:14:96:e8:aa:f0:12:76:d0:
59:40:b1:2f:71:60:0c:21:e5:dd:12:aa:83:ca:b3:74:fe:82:
0d:79:ce:e2:e1:a8:37:68:9a:a6:fb:73:28:b6:e5:ad:cc:ed:
69:6d:7f:22:ea:8f:5d:d3:7e:ac:3e:f1:52:e0:65:e2:b2:da:
4c:97:c4:f6:51:b8:a8:27:84:b1:0b:08:45:b9:03:52:54:59:
dd:d6:73:52:0c:38:2d:01:ee:f6:b5:f0:36:66:ba:99:2c:31:
7d:1c:13:1f:9d:01:2a:88:92:eb:3f:c1:7b:33:d8:0e:c7:4a:
b0:62:8b:53:4e:92:8e:ed:a3:7b:1c:3e:cc:34:6d:cf:2d:a5:
31:6b:e7:6e:66:48:75:b6:c4:83:a3:55:b4:12:0a:9d:c1:6a:
10:84:f4:25:34:f0:e2:5a:7c:c3:7b:4e:15:76:0e:69:66:f7:
53:b1:52:62:52:c5:53:89:e2:56:75:cc:f2:14:0a:8a:0a:e1:
05:3d:fe:9c:9b:4e:5d:b2:02:b6:84:75:13:2b:43:c4:90:bb:
68:46:be:04:bf:e8:a1:2f:0b:08:84:e1:3c:35:39:8e:95:af:
f6:48:5d:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqT2DpcVggCPcyEFgPDaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx
M2U5M2UwHhcNMjYwMzI2MTUwMDI3WhcNMjYwMzI3MTUwMDI3WjAzMTEwLwYDVQQD
EyhlZmRjYzFmNTQzM2M2ODI4YmM4NTg3NTQ1NTA3ZDA0M2Y5NDExNjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC7BRkmuOX7oWABxM9hRRs2x3H0y
UW8bx2ufUOlFOSbqo54PCoG3wnbNTKA6UXX96mqmkmGSXhg8N/nzhHXK4KMql/aM
a1BYbssqr5I1YsUQlbdIKZSHvwBEr2YfWp7T1TTwd0PcOD5BllIuc7GT3xnhDUJo
n2vHa2YfRJA9oRR9VnNwxiJHy0fnfZDzQ2L2AC5FPIc6GuqDtCVhzJQi+Zbi5aVX
VWxezIW9yQqGQ9v6pxuQDZjKmsENJg0rVjVpzpk/B2xZMzJsM0Bw0yeFz3BUu0oE
fAI0sGSGptPjgck1nL+uvGVNTCXfAqH5ho0DCHLu+zDzQwC40vxCb7BbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/cwfVDPGgovIWHVFUH0EP5QRaJMB8GA1UdIwQY
MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt
NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk
LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5fe+5A9
avpKaaos9irsiQdgA6qLTnnypCmuIBSW6KrwEnbQWUCxL3FgDCHl3RKqg8qzdP6C
DXnO4uGoN2iapvtzKLblrcztaW1/IuqPXdN+rD7xUuBl4rLaTJfE9lG4qCeEsQsI
RbkDUlRZ3dZzUgw4LQHu9rXwNma6mSwxfRwTH50BKoiS6z/BezPYDsdKsGKLU06S
ju2jexw+zDRtzy2lMWvnbmZIdbbEg6NVtBIKncFqEIT0JTTw4lp8w3tOFXYOaWb3
U7FSYlLFU4niVnXM8hQKigrhBT3+nJtOXbICtoR1EytDxJC7aEa+BL/ooS8LCITh
PDU5jpWv9khdmw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:25 2026 by rpki-client