Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: xmUuhKlpZxud59V71Fh3sx/x8RaV9+7u9lZrQ1cCMgY=
Subject key identifier: 0C:4D:5A:38:F3:96:E9:68:68:34:F6:0A:5A:13:F4:33:B4:90:56:10
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019D2929798D42927DEE10BAAA80825D4AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 093A
Signing time: Thu 26 Mar 2026 08:01:16 +0000
Manifest this update: Thu 26 Mar 2026 08:01:16 +0000
Manifest next update: Fri 27 Mar 2026 08:01:16 +0000
Files and hashes: 1: 0O9vWC_vw7OUH6qBouhrAzEg9nc.roa (hash: ikuJBuSdoGWkG2wBAzVqA4TgxffZfq78hbpeayBzWqc=)
2: 8UaUU7He9Yv29kZRYVxM02CQ6Go.roa (hash: TPMPD8z4BbyqW0UZlFEZ6YpvhPgmje5aXLJzkHd/hwk=)
3: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: qD1nFoTXYF9rKIGMBgGEwprFD+GCZoUsNYleUJznR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:79:8d:42:92:7d:ee:10:ba:aa:80:82:5d:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Mar 26 08:01:16 2026 GMT
Not After : Mar 27 08:01:16 2026 GMT
Subject: CN=0c4d5a38f396e9686834f60a5a13f433b4905610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:bf:ed:35:d1:92:48:fe:8d:97:e2:6a:12:
a6:e8:0e:e1:41:2e:86:1b:9b:4a:14:4e:ae:30:2d:
89:f2:fe:d9:6a:5e:8c:67:6b:e0:0a:24:c1:26:82:
a2:88:11:3d:5f:a6:ad:83:97:0f:a8:e5:4f:38:72:
07:a1:33:ab:6c:f9:df:35:87:aa:74:73:d5:9b:59:
18:8a:7f:73:a9:1a:6f:ec:2a:d8:c6:b4:e8:d9:2b:
f0:b3:16:eb:c9:46:61:c6:5c:14:fb:76:c4:8d:da:
b9:81:b4:b6:58:26:93:dc:c7:8e:a8:40:90:12:5b:
9b:a4:76:b0:58:fb:1f:00:07:e8:36:1a:bc:be:fd:
16:60:be:46:89:38:1e:3d:a2:5c:92:aa:40:c6:e5:
46:9d:68:eb:82:a3:47:78:40:62:63:4d:46:76:8b:
51:eb:5d:42:ed:62:5e:26:b9:bd:61:a9:68:08:92:
0b:ae:55:22:5a:1b:82:ed:e4:29:7b:fb:36:5c:45:
97:45:7f:57:69:b2:13:17:85:6a:81:7b:86:95:d8:
de:a9:d7:ce:b9:4b:57:ec:87:8a:f5:8d:47:6b:dc:
81:f0:1b:08:f1:11:ed:62:cc:44:11:93:10:82:23:
50:86:08:3a:a9:5f:5b:ec:a8:39:28:bc:de:e1:45:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:5A:38:F3:96:E9:68:68:34:F6:0A:5A:13:F4:33:B4:90:56:10
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3b:9c:fe:18:cd:45:2c:4a:eb:4c:5c:17:85:f0:9e:e0:44:
45:1c:a8:24:93:82:7a:db:f7:c6:ff:6d:0d:11:e9:79:cf:f0:
f9:3b:6d:bb:f9:bd:e8:9f:a1:f8:06:2d:a0:92:2f:4c:73:b9:
e9:1b:91:2b:5f:e4:3c:14:7c:ce:9f:d2:67:74:7a:62:3f:f5:
45:f2:eb:c7:e7:08:27:16:01:12:63:3a:73:59:e0:0c:f5:a0:
6c:e9:f6:6d:d6:9a:97:52:53:02:bc:2f:f8:40:ec:b9:22:be:
69:1e:fa:d8:73:19:6b:ae:79:ec:70:5e:b3:2c:26:0b:c4:fe:
2e:94:3b:83:af:51:a5:31:b5:de:fd:d4:a1:ee:ad:02:9e:8a:
a1:d5:e2:b6:29:fe:58:2e:10:93:ca:bc:5b:c7:97:3e:5e:f4:
17:dd:35:19:bc:05:8a:3d:1f:9d:56:dd:84:ac:fa:ba:32:55:
f1:fa:93:0e:0a:e5:b2:47:9b:19:85:a9:01:4c:c1:43:f9:c8:
36:30:c0:8a:02:1f:e8:8b:30:96:11:f3:71:7d:16:da:65:86:
9d:a4:e7:3f:4f:dd:ec:2d:b1:77:5c:b2:8e:7e:20:be:12:ee:
48:34:be:24:48:78:1c:97:ee:7e:74:99:1d:71:fd:43:23:57:
3e:56:5b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKXmNQpJ97hC6qoCCXUrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTFmMDQwM2U5NzQ2NWEwMWRkMTQ1YmMxNTA3YmU1NjU3
MTBkNGUwHhcNMjYwMzI2MDgwMTE2WhcNMjYwMzI3MDgwMTE2WjAzMTEwLwYDVQQD
EygwYzRkNWEzOGYzOTZlOTY4NjgzNGY2MGE1YTEzZjQzM2I0OTA1NjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3by/7TXRkkj+jZfiahKm6A7hQS6G
G5tKFE6uMC2J8v7Zal6MZ2vgCiTBJoKiiBE9X6atg5cPqOVPOHIHoTOrbPnfNYeq
dHPVm1kYin9zqRpv7CrYxrTo2SvwsxbryUZhxlwU+3bEjdq5gbS2WCaT3MeOqECQ
ElubpHawWPsfAAfoNhq8vv0WYL5GiTgePaJckqpAxuVGnWjrgqNHeEBiY01GdotR
611C7WJeJrm9YaloCJILrlUiWhuC7eQpe/s2XEWXRX9XabITF4VqgXuGldjeqdfO
uUtX7IeK9Y1Ha9yB8BsI8RHtYsxEEZMQgiNQhgg6qV9b7Kg5KLze4UXIdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxNWjjzluloaDT2CloT9DO0kFYQMB8GA1UdIwQY
MBaAFCIR8EA+l0ZaAd0UW8FQe+VlcQ1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUt
MzE2YzdhOWNkNmI2LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUtMzE2YzdhOWNkNmI2
LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzuc/hjN
RSxK60xcF4XwnuBERRyoJJOCetv3xv9tDRHpec/w+Tttu/m96J+h+AYtoJIvTHO5
6RuRK1/kPBR8zp/SZ3R6Yj/1RfLrx+cIJxYBEmM6c1ngDPWgbOn2bdaal1JTArwv
+EDsuSK+aR762HMZa6557HBesywmC8T+LpQ7g69RpTG13v3Uoe6tAp6KodXitin+
WC4Qk8q8W8eXPl70F901GbwFij0fnVbdhKz6ujJV8fqTDgrlskebGYWpAUzBQ/nI
NjDAigIf6IswlhHzcX0W2mWGnaTnP0/d7C2xd1yyjn4gvhLuSDS+JEh4HJfufnSZ
HXH9QyNXPlZbKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:33 2026 by rpki-client