Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: CYs4Y6uNDAac5y3oRVe6GN1HRNCtoZXmmXpJil+a1xQ=
Subject key identifier: 1F:90:B9:39:DD:7B:76:53:68:59:37:7B:5A:10:54:1E:29:DB:8E:1E
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 019D265F5E3BF051D702E2CFF38895931376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 0394
Signing time: Wed 25 Mar 2026 19:01:17 +0000
Manifest this update: Wed 25 Mar 2026 19:01:17 +0000
Manifest next update: Thu 26 Mar 2026 19:01:17 +0000
Files and hashes: 1: QZEL4d0SfEFoVacqVFYZirUZF0c.roa (hash: L9KDQaVkcUjKs2cT9P0W49YAOlVadQY6gzwYQcZwv2E=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: KWGY/71/P3dEOBZrwAwjcw9LgmmGEqf6pq64v8CP1LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:5e:3b:f0:51:d7:02:e2:cf:f3:88:95:93:13:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Mar 25 19:01:17 2026 GMT
Not After : Mar 26 19:01:17 2026 GMT
Subject: CN=1f90b939dd7b76536859377b5a10541e29db8e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:16:54:79:5a:fe:9c:cf:3e:15:b3:95:fe:
3f:53:58:7d:23:ab:23:e4:34:dd:45:8e:38:40:2f:
8b:91:89:1d:ea:92:db:cb:b7:95:b9:34:ff:78:2a:
6b:5f:86:1b:f3:ea:69:4d:28:d2:57:fa:4b:31:41:
ab:bf:e0:4b:f2:a3:04:17:f7:dd:80:e7:4e:84:b3:
12:62:23:de:ef:22:1d:3e:cd:96:b4:9f:6f:1f:43:
b0:d7:b9:03:68:b7:91:91:9f:00:cf:aa:3f:42:a4:
38:a7:5c:a9:a7:cc:3b:cf:80:b2:1a:bb:6f:0b:2e:
3e:8b:13:85:b4:95:28:e5:eb:cb:12:0b:15:c6:18:
1f:82:95:b3:da:22:fa:f0:ba:14:ab:7e:6e:28:70:
7c:7d:90:1b:78:1e:d6:f6:8d:00:11:9f:88:60:87:
30:ba:85:9e:c6:87:86:de:67:1c:39:73:f2:c8:a9:
e5:42:fb:fd:55:74:32:8b:c3:77:d0:9c:28:e8:fd:
4c:0c:ef:07:8b:11:a6:97:56:a1:d1:8d:40:79:9f:
20:f2:a2:f6:6c:ee:ff:22:31:94:f1:ed:7a:6a:35:
17:64:ca:55:1b:42:97:6c:b4:95:82:5c:f7:4f:58:
1f:f4:39:d5:b6:c2:c2:81:29:02:97:46:7a:7e:17:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:B9:39:DD:7B:76:53:68:59:37:7B:5A:10:54:1E:29:DB:8E:1E
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:59:10:ff:56:43:f6:3f:a2:72:86:e9:2e:3d:62:9f:6a:4d:
3e:4a:d1:1c:83:62:15:2f:cd:24:4b:26:b9:df:fb:91:c0:b1:
25:d9:80:93:88:b7:a7:7b:56:fa:a2:d4:55:eb:72:3a:c6:c4:
0e:98:24:d3:74:f6:d2:37:0b:2e:ac:d8:41:e2:e9:31:7a:58:
12:e4:be:cc:e0:2c:43:78:e8:3c:2a:b8:80:37:aa:20:6a:27:
a1:e7:b2:93:81:1d:e6:c6:b9:20:e4:40:f3:9d:dd:71:7b:ad:
83:39:0e:06:48:d8:83:5f:72:74:c6:f8:a7:61:95:31:31:5c:
c2:5f:8c:98:1a:a4:3e:3c:de:7e:ca:bc:3e:b9:16:b0:36:f6:
5d:20:35:cf:41:a9:b0:a0:06:3a:ee:34:5f:78:8a:49:ff:aa:
c2:c4:1f:69:68:ee:af:11:f7:04:4e:86:3a:8a:c1:d2:23:04:
a0:f0:f0:4d:64:b1:05:91:75:7f:70:fc:f0:63:f2:34:35:5d:
28:e3:bf:89:bc:2c:15:e3:09:15:6c:28:dc:1a:c0:db:c4:1b:
a9:4e:68:06:dc:23:94:a3:0a:c8:bc:42:66:15:0f:99:08:87:
ec:9e:25:5e:d4:fc:f4:ca:46:d0:54:af:98:f6:f9:f4:37:f8:
14:7a:6a:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX1478FHXAuLP84iVkxN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YTQzODllOWY0ZDVjYzhjNDg2ZDY4MjJiZWYxZjQ0ZWY3
Y2VkNDIwHhcNMjYwMzI1MTkwMTE3WhcNMjYwMzI2MTkwMTE3WjAzMTEwLwYDVQQD
EygxZjkwYjkzOWRkN2I3NjUzNjg1OTM3N2I1YTEwNTQxZTI5ZGI4ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ygWVHla/pzPPhWzlf4/U1h9I6sj
5DTdRY44QC+LkYkd6pLby7eVuTT/eCprX4Yb8+ppTSjSV/pLMUGrv+BL8qMEF/fd
gOdOhLMSYiPe7yIdPs2WtJ9vH0Ow17kDaLeRkZ8Az6o/QqQ4p1ypp8w7z4CyGrtv
Cy4+ixOFtJUo5evLEgsVxhgfgpWz2iL68LoUq35uKHB8fZAbeB7W9o0AEZ+IYIcw
uoWexoeG3mccOXPyyKnlQvv9VXQyi8N30Jwo6P1MDO8HixGml1ah0Y1AeZ8g8qL2
bO7/IjGU8e16ajUXZMpVG0KXbLSVglz3T1gf9DnVtsLCgSkCl0Z6fhddFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+QuTnde3ZTaFk3e1oQVB4p244eMB8GA1UdIwQY
MBaAFImkOJ6fTVzIxIbWgivvH0TvfO1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEt
MjEzNDg0ODRmZjFiLzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lNjBhMzEtMWQ3Ni00ZDlmLTgwMGEtMjEzNDg0ODRmZjFi
LzEvaWFRNG5wOU5YTWpFaHRhQ0stOGZSTzk4N1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFkQ/1ZD
9j+icobpLj1in2pNPkrRHINiFS/NJEsmud/7kcCxJdmAk4i3p3tW+qLUVetyOsbE
Dpgk03T20jcLLqzYQeLpMXpYEuS+zOAsQ3joPCq4gDeqIGonoeeyk4Ed5sa5IORA
853dcXutgzkOBkjYg19ydMb4p2GVMTFcwl+MmBqkPjzefsq8PrkWsDb2XSA1z0Gp
sKAGOu40X3iKSf+qwsQfaWjurxH3BE6GOorB0iMEoPDwTWSxBZF1f3D88GPyNDVd
KOO/ibwsFeMJFWwo3BrA28QbqU5oBtwjlKMKyLxCZhUPmQiH7J4lXtT89MpG0FSv
mPb59Df4FHpqRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:32 2026 by rpki-client