Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: i79HLTSDqE72D/ohpIVnUpdAsUmHvT0H2RcAHd71dhw=
Subject key identifier: 25:A7:1A:9D:E4:4B:0A:9B:90:68:92:63:DB:FD:D9:41:E9:42:A7:99
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 019D2B4F02020A39C2C705ACDF73CCE30493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 18:01:31 +0000
Manifest this update: Thu 26 Mar 2026 18:01:31 +0000
Manifest next update: Fri 27 Mar 2026 18:01:31 +0000
Files and hashes: 1: WJZilYaZAHsOAmj637C-MdulMxc.roa (hash: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: WVYRhP7Q3kNDgrkCmpn6oJrIbTNmVgngVXxZQHfahPs=)
3: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (hash: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4f:02:02:0a:39:c2:c7:05:ac:df:73:cc:e3:04:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Mar 26 18:01:31 2026 GMT
Not After : Mar 27 18:01:31 2026 GMT
Subject: CN=25a71a9de44b0a9b90689263dbfdd941e942a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:9f:0d:f0:18:6e:43:61:58:d9:4b:46:35:
d7:fc:66:70:88:90:ad:e3:d4:d4:0c:92:85:cb:a2:
de:78:3b:9c:89:6d:83:80:3e:bc:4e:b3:71:01:91:
e3:b7:b3:f6:ed:15:c7:d1:c6:e7:71:99:27:cf:d1:
bc:35:72:1f:fc:a9:02:6b:74:aa:84:d7:98:c4:d3:
95:b6:27:56:33:ab:8a:d1:ea:77:ea:91:81:52:91:
6a:04:03:bb:8a:85:65:f5:cb:52:9a:ce:11:9a:ae:
13:7f:35:bf:01:6a:b9:f4:82:ae:c1:b6:6d:92:cd:
64:9f:08:b3:ca:a6:f9:3a:bd:d7:9d:90:9f:c5:14:
3e:a9:eb:be:73:86:f8:37:a7:50:ac:77:22:6b:58:
71:42:39:fa:6d:ce:4d:27:c2:03:57:cb:c2:25:33:
1d:35:09:86:20:c0:3d:99:06:db:72:46:de:ea:a5:
a7:77:f4:3a:58:4f:80:c0:13:97:09:e7:8e:85:70:
29:81:93:b7:28:9e:24:35:d1:af:68:69:77:da:da:
5a:a7:0a:3c:19:a7:11:4f:17:f7:fc:2d:c1:02:b7:
cc:41:c9:4c:19:47:7a:4d:37:40:34:f1:29:6e:72:
bd:7c:a9:9c:29:46:75:cb:32:3b:b6:81:03:c9:03:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A7:1A:9D:E4:4B:0A:9B:90:68:92:63:DB:FD:D9:41:E9:42:A7:99
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a5:37:b1:c4:52:f9:ae:bd:0b:a0:04:7f:95:78:bc:c8:36:
6d:e6:39:8f:fd:64:e4:a7:b8:ea:e4:e3:32:68:d2:46:21:89:
4e:99:30:ad:98:31:04:8f:8e:de:40:fa:e4:1f:f4:53:11:3c:
dc:dd:7b:a5:6f:45:90:31:59:ed:81:1d:f6:fe:83:62:c5:53:
10:3b:9c:64:5f:7b:47:be:5f:58:55:6d:fd:a3:2a:2d:c6:85:
4e:4d:84:e6:35:f7:b8:fa:15:60:5e:ee:43:f4:79:fd:95:f7:
a1:27:7b:33:34:b7:74:d4:ac:5a:7e:d0:62:3c:2c:86:86:77:
75:41:02:91:a0:7a:2f:58:1e:2b:34:00:9a:bf:d6:d0:71:89:
f3:94:bd:c1:7c:59:dc:97:da:55:f3:ce:cf:22:7f:6a:41:42:
b6:4c:9b:fa:f1:a5:c2:4f:ba:6b:d6:78:df:18:65:80:aa:c0:
4b:17:50:e3:ed:82:07:65:1b:e0:f5:92:7d:29:4a:1c:e0:dd:
54:89:25:ae:d1:fd:c6:4d:8f:8a:69:97:db:93:63:13:69:18:
b4:65:b3:ec:5c:a0:fe:a1:e3:c3:8e:1a:95:b4:b5:19:c9:5c:
a7:93:f7:e3:21:75:5b:71:30:dd:33:7b:70:3e:bc:cf:d9:6b:
d9:c6:fb:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rTwICCjnCxwWs33PM4wSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4
MDQxNTcwHhcNMjYwMzI2MTgwMTMxWhcNMjYwMzI3MTgwMTMxWjAzMTEwLwYDVQQD
EygyNWE3MWE5ZGU0NGIwYTliOTA2ODkyNjNkYmZkZDk0MWU5NDJhNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo+fDfAYbkNhWNlLRjXX/GZwiJCt
49TUDJKFy6LeeDuciW2DgD68TrNxAZHjt7P27RXH0cbncZknz9G8NXIf/KkCa3Sq
hNeYxNOVtidWM6uK0ep36pGBUpFqBAO7ioVl9ctSms4Rmq4TfzW/AWq59IKuwbZt
ks1knwizyqb5Or3XnZCfxRQ+qeu+c4b4N6dQrHcia1hxQjn6bc5NJ8IDV8vCJTMd
NQmGIMA9mQbbckbe6qWnd/Q6WE+AwBOXCeeOhXApgZO3KJ4kNdGvaGl32tpapwo8
GacRTxf3/C3BArfMQclMGUd6TTdANPEpbnK9fKmcKUZ1yzI7toEDyQPW+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWnGp3kSwqbkGiSY9v92UHpQqeZMB8GA1UdIwQY
MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt
NGViOGIwYjQ5YzRhLzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh
LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6U3scRS
+a69C6AEf5V4vMg2beY5j/1k5Ke46uTjMmjSRiGJTpkwrZgxBI+O3kD65B/0UxE8
3N17pW9FkDFZ7YEd9v6DYsVTEDucZF97R75fWFVt/aMqLcaFTk2E5jX3uPoVYF7u
Q/R5/ZX3oSd7MzS3dNSsWn7QYjwshoZ3dUECkaB6L1geKzQAmr/W0HGJ85S9wXxZ
3JfaVfPOzyJ/akFCtkyb+vGlwk+6a9Z43xhlgKrASxdQ4+2CB2Ub4PWSfSlKHODd
VIklrtH9xk2PimmX25NjE2kYtGWz7Fyg/qHjw44albS1Gclcp5P34yF1W3Ew3TN7
cD68z9lr2cb7sQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:01:48 2026 by rpki-client