Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: 2EBRH1Om+KLk/iYo77ATUqzLl+P2eh1MOpb0BQ3hZjA=
Subject key identifier: D3:17:BD:E8:25:AD:6E:74:87:59:13:EA:D5:57:6F:A6:7F:A4:C7:D6
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 019D273B3DCF87658B986FAC98B375F82069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 1407
Signing time: Wed 25 Mar 2026 23:01:26 +0000
Manifest this update: Wed 25 Mar 2026 23:01:26 +0000
Manifest next update: Thu 26 Mar 2026 23:01:26 +0000
Files and hashes: 1: DWHWORrS3BHCdKCom2SvJuOOFgQ.roa (hash: neZrwsmxWjbB3VimASaWthX1wVXWiR6atISt14XcKo0=)
2: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: XoBpnk9nGZe9MbaPKZKM1he/FV426HZsA6dZU/n8GUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:3d:cf:87:65:8b:98:6f:ac:98:b3:75:f8:20:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Mar 25 23:01:26 2026 GMT
Not After : Mar 26 23:01:26 2026 GMT
Subject: CN=d317bde825ad6e74875913ead5576fa67fa4c7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:bc:05:21:20:8b:a3:dc:8e:bb:2b:04:1b:
d8:79:36:4d:ff:10:83:40:3e:35:41:82:5e:ff:28:
22:21:a7:69:c4:3c:01:a1:05:61:12:64:8b:c9:43:
ea:53:c3:11:79:d6:fe:64:95:86:03:30:9d:3d:e2:
cb:40:93:6d:46:4c:d0:41:60:98:36:c2:78:03:a0:
7a:f7:a8:d4:e0:2a:32:38:d6:e8:01:5b:c1:35:c2:
a9:ad:19:48:35:f0:59:99:f5:7d:8a:68:74:d5:21:
0f:6b:6f:e9:51:73:13:99:ac:45:bd:49:ae:74:fa:
2c:33:ad:8c:ef:19:df:96:f9:04:97:67:c6:45:f4:
fb:97:76:d2:a7:9f:cf:5e:f0:0c:8e:db:81:df:5c:
61:85:b1:ae:30:f7:75:53:15:2d:ca:c2:5b:80:70:
e1:57:d3:b4:17:49:d8:e4:a2:7b:7b:c4:71:34:e3:
be:b9:f7:2a:bf:22:4c:66:c2:20:aa:19:98:2b:37:
b1:37:b2:e6:4b:46:09:d7:83:de:0f:79:02:de:b6:
73:58:3b:5a:a7:6b:41:38:19:5d:42:94:bb:55:da:
b0:45:8f:93:29:d7:8f:63:dd:61:30:a2:a7:29:a9:
85:c0:c2:52:6b:9a:fb:cd:47:35:c8:aa:3a:6f:ac:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:BD:E8:25:AD:6E:74:87:59:13:EA:D5:57:6F:A6:7F:A4:C7:D6
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:10:02:5c:c5:62:de:1d:ca:12:40:0c:93:30:fb:7e:78:84:
ad:23:5f:cd:b4:78:a9:50:a7:f8:e5:4d:f9:bc:4d:ac:c6:cf:
c2:88:b6:4d:1a:a7:11:1a:c9:88:5a:d4:96:76:f4:70:6c:62:
e4:2b:49:ce:c7:34:0b:ab:99:eb:7f:af:0b:34:70:04:47:c3:
59:ed:e0:ed:60:34:8b:05:38:c8:cc:f6:fa:e5:4a:c6:20:18:
25:bf:aa:c1:a2:7a:ae:62:89:d4:9f:47:d7:f8:2b:ef:23:3c:
ba:92:87:32:d8:5b:ba:52:3c:31:c3:79:86:54:d3:df:1b:aa:
07:db:b4:71:62:44:30:55:bb:99:5c:9d:31:67:03:90:0c:77:
f2:6b:16:4f:55:0c:f6:d2:53:33:cc:60:01:75:d6:ea:db:60:
8f:44:fe:2e:c0:c0:9e:64:3d:1d:df:3e:24:e2:fb:1f:59:ad:
23:e6:7f:0f:a5:e7:0c:6f:bf:6c:67:10:58:98:88:20:1a:62:
77:ed:43:a1:4f:1c:a2:98:88:6a:e6:ce:38:a5:71:9b:21:bb:
b4:31:31:f5:82:98:c0:09:89:5d:d6:fa:c7:22:36:94:b5:2d:
d2:5d:5e:97:06:24:4c:b8:21:35:64:db:75:0a:e0:78:f3:63:
9b:e0:9a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOz3Ph2WLmG+smLN1+CBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz
OGI1OTAwHhcNMjYwMzI1MjMwMTI2WhcNMjYwMzI2MjMwMTI2WjAzMTEwLwYDVQQD
EyhkMzE3YmRlODI1YWQ2ZTc0ODc1OTEzZWFkNTU3NmZhNjdmYTRjN2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+8BSEgi6PcjrsrBBvYeTZN/xCD
QD41QYJe/ygiIadpxDwBoQVhEmSLyUPqU8MRedb+ZJWGAzCdPeLLQJNtRkzQQWCY
NsJ4A6B696jU4CoyONboAVvBNcKprRlINfBZmfV9imh01SEPa2/pUXMTmaxFvUmu
dPosM62M7xnflvkEl2fGRfT7l3bSp5/PXvAMjtuB31xhhbGuMPd1UxUtysJbgHDh
V9O0F0nY5KJ7e8RxNOO+ufcqvyJMZsIgqhmYKzexN7LmS0YJ14PeD3kC3rZzWDta
p2tBOBldQpS7VdqwRY+TKdePY91hMKKnKamFwMJSa5r7zUc1yKo6b6xjqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMXveglrW50h1kT6tVXb6Z/pMfWMB8GA1UdIwQY
MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt
MTI1ZWVkZjhkOWYxLzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx
LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxACXMVi
3h3KEkAMkzD7fniErSNfzbR4qVCn+OVN+bxNrMbPwoi2TRqnERrJiFrUlnb0cGxi
5CtJzsc0C6uZ63+vCzRwBEfDWe3g7WA0iwU4yMz2+uVKxiAYJb+qwaJ6rmKJ1J9H
1/gr7yM8upKHMthbulI8McN5hlTT3xuqB9u0cWJEMFW7mVydMWcDkAx38msWT1UM
9tJTM8xgAXXW6ttgj0T+LsDAnmQ9Hd8+JOL7H1mtI+Z/D6XnDG+/bGcQWJiIIBpi
d+1DoU8copiIaubOOKVxmyG7tDEx9YKYwAmJXdb6xyI2lLUt0l1elwYkTLghNWTb
dQrgePNjm+CaEA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:32 2026 by rpki-client