Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: UPGv3/+2DZs3pQIH/GERDlWEu8RGhOux3lC7rwtQ+xs=
Subject key identifier: 11:FD:87:81:7E:ED:63:7D:6A:68:1F:29:58:0E:03:EF:E9:7D:34:51
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 019D27A8C50C1701620D57AE1F6365ADE658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: 5CcyKCL2bOI8DUta3r/+v8m3CFSkvtFWVESGb7/UC8Q=)
2: zKzb524TG9Tb_yZBVp0kQkUxmSk.roa (hash: cnf66+cFIoDpuzcLy7f9twjeNJ6EZMaeYTno/sX1Zz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c5:0c:17:01:62:0d:57:ae:1f:63:65:ad:e6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=11fd87817eed637d6a681f29580e03efe97d3451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:74:8e:97:2b:e9:ac:01:20:11:8f:a0:1f:
63:8e:e1:52:d1:83:03:99:d5:1d:44:15:e1:41:7b:
1d:b1:43:5f:e3:13:53:46:6f:f4:e6:07:42:01:30:
28:a2:8a:42:0e:82:6a:48:ec:a4:1a:91:1f:da:57:
74:01:18:9e:03:23:dd:12:24:1b:f4:29:b7:27:28:
2f:a4:f4:24:f1:e2:0d:4f:3c:81:00:79:d4:66:a4:
66:7c:7e:ed:81:c9:73:a4:4e:10:3a:e7:2d:53:78:
e6:c2:b5:78:b7:4d:34:35:c8:51:0e:62:23:fd:51:
67:80:e4:a8:fe:8d:90:1f:b9:56:80:4d:cf:bb:d8:
04:e7:f2:7c:ed:4b:af:5d:f5:84:21:26:a6:a3:ac:
e7:06:de:4e:9e:ae:f7:53:f5:40:62:9f:a3:f8:3d:
79:cc:81:74:db:97:82:7d:85:3d:e3:7a:15:81:03:
03:ba:f2:74:6f:04:37:ad:46:e8:57:0f:ba:d5:70:
f8:92:b8:49:2e:ee:d1:60:21:e8:a8:bc:7c:29:b9:
16:af:58:eb:bc:f7:b3:5f:88:b8:aa:a1:7b:b6:cf:
9e:f5:01:51:cc:60:1b:df:97:b1:fa:19:89:ed:11:
4b:03:7b:f2:e5:34:90:c0:e0:a0:65:f1:86:3a:b1:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:87:81:7E:ED:63:7D:6A:68:1F:29:58:0E:03:EF:E9:7D:34:51
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9d:7b:58:b8:40:62:0c:8f:1e:7c:a4:f0:0a:d7:d6:68:62:
dc:61:af:4b:45:60:39:a8:c4:6f:ec:fd:10:0d:eb:16:92:0d:
f8:70:37:ea:a0:c7:11:75:59:7a:52:a4:7c:11:f8:8a:ea:c1:
8d:cc:f4:d8:6c:88:70:a8:1f:34:28:87:01:71:83:70:76:6a:
8d:04:86:ed:db:20:41:d6:a7:3f:5b:02:e8:11:58:d5:35:2d:
4a:39:31:44:6e:c1:82:12:b0:25:64:b9:e8:b1:df:30:2d:6c:
8f:c0:c5:ad:3a:23:c1:10:26:4e:3d:38:f7:59:45:86:ef:a3:
45:1c:a0:a7:79:02:4d:51:73:0d:64:74:cd:e5:7a:1c:95:3a:
e5:cd:05:fb:47:df:ca:10:d9:dd:f6:66:54:d2:42:50:33:83:
f0:75:8b:57:3e:66:c5:f6:98:48:ef:14:bf:c3:55:08:54:ab:
a0:01:81:d6:ad:53:70:60:6e:01:2a:7b:04:ee:b5:05:fe:82:
41:63:e8:4a:3a:bd:9d:4f:30:52:c0:f7:fe:61:21:c6:54:18:
ba:63:de:cc:4c:7d:b7:1c:17:de:eb:2f:3c:ca:c7:80:7c:ad:
ea:8b:26:9d:72:b1:f6:37:73:22:5e:f5:1c:86:d2:df:72:20:
4e:0b:20:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqMUMFwFiDVeuH2NlreZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTQyMWE2ZDk2ZTk5ZDYzZjdjZmI0OTljYTcxMTdjODIz
MDRlYWEwHhcNMjYwMzI2MDEwMTA1WhcNMjYwMzI3MDEwMTA1WjAzMTEwLwYDVQQD
EygxMWZkODc4MTdlZWQ2MzdkNmE2ODFmMjk1ODBlMDNlZmU5N2QzNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2F0jpcr6awBIBGPoB9jjuFS0YMD
mdUdRBXhQXsdsUNf4xNTRm/05gdCATAooopCDoJqSOykGpEf2ld0ARieAyPdEiQb
9Cm3JygvpPQk8eINTzyBAHnUZqRmfH7tgclzpE4QOuctU3jmwrV4t000NchRDmIj
/VFngOSo/o2QH7lWgE3Pu9gE5/J87UuvXfWEISamo6znBt5Onq73U/VAYp+j+D15
zIF025eCfYU943oVgQMDuvJ0bwQ3rUboVw+61XD4krhJLu7RYCHoqLx8KbkWr1jr
vPezX4i4qqF7ts+e9QFRzGAb35ex+hmJ7RFLA3vy5TSQwOCgZfGGOrH2RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH9h4F+7WN9amgfKVgOA+/pfTRRMB8GA1UdIwQY
MBaAFCHkIabZbpnWP3z7SZynEXyCME6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMt
M2U2YjcwMjViNjVlLzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xZDRiMmMtOTQ1ZC00ZjM5LWIyMzMtM2U2YjcwMjViNjVl
LzEvSWVRaHB0bHVtZFlfZlB0Sm5LY1JmSUl3VHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZ17WLhA
YgyPHnyk8ArX1mhi3GGvS0VgOajEb+z9EA3rFpIN+HA36qDHEXVZelKkfBH4iurB
jcz02GyIcKgfNCiHAXGDcHZqjQSG7dsgQdanP1sC6BFY1TUtSjkxRG7BghKwJWS5
6LHfMC1sj8DFrTojwRAmTj0491lFhu+jRRygp3kCTVFzDWR0zeV6HJU65c0F+0ff
yhDZ3fZmVNJCUDOD8HWLVz5mxfaYSO8Uv8NVCFSroAGB1q1TcGBuASp7BO61Bf6C
QWPoSjq9nU8wUsD3/mEhxlQYumPezEx9txwX3usvPMrHgHyt6osmnXKx9jdzIl71
HIbS33IgTgsguQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:12 2026 by rpki-client