Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: wE8rsIRCfvwDSpw1Mt7MZo8RLu9gEFl+43v4KGO/Qkk=
Subject key identifier: 46:13:4D:5B:03:26:EA:CA:95:6B:1B:9B:EF:39:57:93:02:D6:5D:94
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 019D284DB0BB965837E375BCEE5F248B8FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 0845
Signing time: Thu 26 Mar 2026 04:01:13 +0000
Manifest this update: Thu 26 Mar 2026 04:01:13 +0000
Manifest next update: Fri 27 Mar 2026 04:01:13 +0000
Files and hashes: 1: H8HSputPSN9Cls2-aaHKk-qMV3c.roa (hash: BonRmDJ9cgpRsYMcsSITVW9rPDB5KlfByqpBGb76lfA=)
2: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: aLuhy9jT106uAzJPUvK/OdDjfe0cFXwzCluU6DtMvjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b0:bb:96:58:37:e3:75:bc:ee:5f:24:8b:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Mar 26 04:01:13 2026 GMT
Not After : Mar 27 04:01:13 2026 GMT
Subject: CN=46134d5b0326eaca956b1b9bef39579302d65d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:fc:f1:5b:24:ee:11:6d:da:ca:74:5d:72:
b5:bd:ec:f9:00:3d:9c:5a:41:ad:47:cc:20:d2:86:
4f:f0:b1:e9:87:bc:3d:ca:d7:c5:cc:63:c8:93:e3:
46:17:84:6f:21:2d:78:ef:cf:56:3b:b8:80:58:5a:
68:7b:fd:88:5d:e7:0d:fd:8f:a0:14:da:01:da:b6:
eb:e0:91:15:8a:7f:58:39:ed:1f:82:15:45:38:23:
a9:44:49:22:64:42:6a:5a:44:04:3d:63:04:01:30:
d7:4f:a6:49:ba:85:8d:77:13:42:6e:87:07:d9:28:
74:81:fc:73:1a:b1:70:40:3e:df:97:63:97:05:64:
9f:99:f1:93:c4:08:b9:be:d8:b9:cf:76:ca:00:4d:
77:47:9c:52:72:54:53:f5:70:01:0b:36:bb:f0:5e:
e7:9e:b7:3f:eb:c4:26:10:de:84:1a:d8:c2:cc:22:
3c:4b:3c:4d:a8:f5:26:a8:f9:d4:2a:78:c6:4b:93:
28:a2:3c:ca:f2:7b:21:82:cc:45:17:31:10:a2:fa:
aa:e4:56:73:f0:13:9f:61:58:84:8b:8c:fe:7a:bb:
7a:7a:9d:10:30:7d:f2:53:56:2e:17:8f:36:db:e1:
20:35:ce:cf:b3:e9:67:e8:99:8f:dc:f6:d8:d5:d8:
48:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:13:4D:5B:03:26:EA:CA:95:6B:1B:9B:EF:39:57:93:02:D6:5D:94
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:13:3c:db:47:fb:42:8d:e1:f3:b8:ea:02:86:e4:5a:4f:
d0:d3:01:c9:e0:8c:ef:15:b0:34:ba:b5:9c:da:3b:34:cc:3f:
98:24:0b:ee:0f:09:5f:9e:55:8b:37:7b:74:37:d2:b6:f4:ee:
47:f8:fd:09:c9:bc:b7:10:56:b4:e7:75:06:18:9b:37:10:52:
d9:00:cc:67:fc:4d:67:73:97:58:1c:33:7f:84:8a:90:55:27:
6b:63:9f:39:a8:9c:0c:18:69:3c:74:25:68:2b:ca:ae:ff:3b:
25:70:80:fc:8d:ce:c3:d1:d6:5b:9f:b0:e9:67:46:49:59:60:
e9:8c:cf:8a:1c:0a:94:93:ee:70:14:90:4f:b8:90:66:d1:e2:
b6:d0:f7:b1:01:73:23:e5:e0:bd:fb:69:7d:2c:21:6c:d8:7b:
25:0c:34:0b:49:a2:a2:36:73:83:15:84:30:73:12:81:dc:63:
44:92:cf:20:ad:31:58:61:25:4d:01:67:ae:81:37:f8:0a:d3:
29:c7:63:35:cc:d9:37:7e:03:6c:49:0a:ea:95:2f:1e:ac:97:
d8:57:ab:ca:12:2e:95:34:13:44:11:a1:b7:dd:85:83:54:d9:
48:09:20:39:13:3b:cd:32:a7:97:19:23:6f:ca:ea:5d:01:bd:
3f:fe:08:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTbC7llg343W87l8ki4/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWM1MmVmOTdlM2Q1NTc5OGVmZTgzNDc0ZDIwMzAwODJi
OWIzYTIwHhcNMjYwMzI2MDQwMTEzWhcNMjYwMzI3MDQwMTEzWjAzMTEwLwYDVQQD
Eyg0NjEzNGQ1YjAzMjZlYWNhOTU2YjFiOWJlZjM5NTc5MzAyZDY1ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//88Vsk7hFt2sp0XXK1vez5AD2c
WkGtR8wg0oZP8LHph7w9ytfFzGPIk+NGF4RvIS14789WO7iAWFpoe/2IXecN/Y+g
FNoB2rbr4JEVin9YOe0fghVFOCOpREkiZEJqWkQEPWMEATDXT6ZJuoWNdxNCbocH
2Sh0gfxzGrFwQD7fl2OXBWSfmfGTxAi5vti5z3bKAE13R5xSclRT9XABCza78F7n
nrc/68QmEN6EGtjCzCI8SzxNqPUmqPnUKnjGS5MoojzK8nshgsxFFzEQovqq5FZz
8BOfYViEi4z+ert6ep0QMH3yU1YuF4822+EgNc7Ps+ln6JmP3PbY1dhIUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYTTVsDJurKlWsbm+85V5MC1l2UMB8GA1UdIwQY
MBaAFCFcUu+X49VXmO/oNHTSAwCCubOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTct
N2FlZWUzYWQ3NDM2LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTctN2FlZWUzYWQ3NDM2
LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1QTPNtH
+0KN4fO46gKG5FpP0NMByeCM7xWwNLq1nNo7NMw/mCQL7g8JX55Vizd7dDfStvTu
R/j9Ccm8txBWtOd1BhibNxBS2QDMZ/xNZ3OXWBwzf4SKkFUna2OfOaicDBhpPHQl
aCvKrv87JXCA/I3Ow9HWW5+w6WdGSVlg6YzPihwKlJPucBSQT7iQZtHittD3sQFz
I+XgvftpfSwhbNh7JQw0C0miojZzgxWEMHMSgdxjRJLPIK0xWGElTQFnroE3+ArT
KcdjNczZN34DbEkK6pUvHqyX2FeryhIulTQTRBGht92Fg1TZSAkgORM7zTKnlxkj
b8rqXQG9P/4ITw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:29 2026 by rpki-client