Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier: O7K44dHUduZyqoDZP7+DzsjH+1t6RSlKjIp/F50g1l8=
Subject key identifier: 09:B9:9D:8C:32:E7:9E:20:B7:8F:41:A6:0C:4D:D1:D7:5A:6B:5A:57
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 019D2772E8AD0961BEB84C6FA8D486CE041C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 00:02:15 +0000
Manifest this update: Thu 26 Mar 2026 00:02:15 +0000
Manifest next update: Fri 27 Mar 2026 00:02:15 +0000
Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: eGDX0MfQ+RiLW+e1AzZA7t0C7aKtNvO149lX3rpTdOA=)
2: nad2__VH-nPmq_Iqmre5nLL_imw.roa (hash: ELA9kRHRklvIfsJMuSHF+76tgBdN55pzj5QMVhLOw9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:e8:ad:09:61:be:b8:4c:6f:a8:d4:86:ce:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Mar 26 00:02:15 2026 GMT
Not After : Mar 27 00:02:15 2026 GMT
Subject: CN=09b99d8c32e79e20b78f41a60c4dd1d75a6b5a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:35:c9:02:0c:53:fd:ac:b7:b7:f0:ed:7e:ee:
99:b4:72:aa:ed:f4:16:d5:f4:07:52:78:8a:f7:a5:
ea:cb:d4:82:de:20:61:09:a7:fb:fd:a8:48:77:6e:
aa:66:55:06:51:66:17:dd:41:a8:44:84:ed:fa:75:
04:45:1b:23:3b:f5:99:58:3c:4a:d6:c0:68:fb:20:
48:9d:0b:24:b5:fa:29:ce:d7:10:5d:86:7d:4f:43:
39:14:b0:d4:dc:e0:d4:5a:3b:6c:7c:0c:1a:8b:ff:
4e:2e:cb:50:34:42:8b:20:9e:ae:ac:2b:9c:8f:9c:
0a:24:ee:3a:b1:9d:9f:8e:ac:99:bb:2b:7b:ad:32:
a7:13:35:1d:4e:d9:07:15:35:22:44:bc:65:aa:b3:
2f:25:e1:7c:b8:e8:e8:cd:31:71:d3:48:1a:0f:37:
57:c3:85:93:b2:f6:83:2e:54:b5:5d:6e:bc:7d:a8:
c0:c6:af:5c:ed:8b:43:5e:32:de:f0:4d:bb:38:d0:
81:a4:a2:55:38:69:75:9e:11:2b:d3:69:ea:5a:06:
21:52:32:06:4b:d0:26:b7:3e:ef:17:be:a1:e8:cb:
30:01:3f:b0:41:62:d6:8b:c0:03:d6:89:30:30:9a:
17:04:14:62:2c:53:4d:a6:c7:91:3c:47:80:9c:28:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:9D:8C:32:E7:9E:20:B7:8F:41:A6:0C:4D:D1:D7:5A:6B:5A:57
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d4:87:fe:df:fe:83:ae:0b:27:32:8d:5a:bf:ba:7d:4b:8c:
99:54:f8:27:31:95:78:43:f4:d7:ba:1d:91:87:8f:e5:c2:bf:
95:f8:93:ea:e9:70:4a:1d:dc:48:8f:dc:b0:9c:6d:98:ef:fd:
bb:df:69:09:fd:c1:49:14:a2:35:3e:fa:51:9f:6f:14:04:5f:
31:dd:c9:cd:97:95:4e:aa:22:e8:d3:9a:23:2d:aa:e3:aa:26:
12:60:99:7f:0b:9c:b6:ac:9a:7b:e2:17:1e:34:fa:35:34:b7:
bb:0e:a9:a4:6c:7f:f0:73:e2:9b:90:04:3d:8a:d2:aa:8f:8e:
da:ed:0a:03:86:0e:65:f7:85:cb:3e:cc:ea:ce:9f:12:77:d1:
8d:32:d8:a8:06:84:23:ba:cd:ef:f1:d3:d6:4c:9b:8f:e6:39:
ce:0b:9a:49:b1:f0:ab:f6:25:ee:6b:8f:c9:21:8d:6f:9f:9a:
22:1d:5e:0a:77:a5:65:8b:0f:21:36:40:17:1d:c9:f7:6f:bc:
c9:08:02:b7:2d:ec:f5:90:8a:f0:70:5f:e1:b6:c6:66:e2:53:
d4:1c:ec:d1:99:de:3f:2c:fd:21:df:ef:a3:0b:12:99:d0:3b:
8a:ad:28:fd:dd:f4:d4:7d:cb:d6:ed:a3:04:37:f1:3a:d8:96:
81:5f:01:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncuitCWG+uExvqNSGzgQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTlhZTNmNDE3N2EzY2RkOTY2OGQwYzViOGE4OWY5MTg2
YjViZmMwHhcNMjYwMzI2MDAwMjE1WhcNMjYwMzI3MDAwMjE1WjAzMTEwLwYDVQQD
EygwOWI5OWQ4YzMyZTc5ZTIwYjc4ZjQxYTYwYzRkZDFkNzVhNmI1YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDXJAgxT/ay3t/Dtfu6ZtHKq7fQW
1fQHUniK96Xqy9SC3iBhCaf7/ahId26qZlUGUWYX3UGoRITt+nUERRsjO/WZWDxK
1sBo+yBInQsktfopztcQXYZ9T0M5FLDU3ODUWjtsfAwai/9OLstQNEKLIJ6urCuc
j5wKJO46sZ2fjqyZuyt7rTKnEzUdTtkHFTUiRLxlqrMvJeF8uOjozTFx00gaDzdX
w4WTsvaDLlS1XW68fajAxq9c7YtDXjLe8E27ONCBpKJVOGl1nhEr02nqWgYhUjIG
S9Amtz7vF76h6MswAT+wQWLWi8AD1okwMJoXBBRiLFNNpseRPEeAnCjhTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm5nYwy554gt49BpgxN0ddaa1pXMB8GA1UdIwQY
MBaAFIlZrj9Bd6PN2WaNDFuKifkYa1v8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEt
ZWU5ODJhNTEyZjQzLzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNGJhMjYtZjFiOS00Mjg1LWI3ZmEtZWU5ODJhNTEyZjQz
LzEvaVZtdVAwRjNvODNaWm8wTVc0cUotUmhyV193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9SH/t/+
g64LJzKNWr+6fUuMmVT4JzGVeEP017odkYeP5cK/lfiT6ulwSh3cSI/csJxtmO/9
u99pCf3BSRSiNT76UZ9vFARfMd3JzZeVTqoi6NOaIy2q46omEmCZfwuctqyae+IX
HjT6NTS3uw6ppGx/8HPim5AEPYrSqo+O2u0KA4YOZfeFyz7M6s6fEnfRjTLYqAaE
I7rN7/HT1kybj+Y5zguaSbHwq/Yl7muPySGNb5+aIh1eCnelZYsPITZAFx3J92+8
yQgCty3s9ZCK8HBf4bbGZuJT1Bzs0ZnePyz9Id/vowsSmdA7iq0o/d301H3L1u2j
BDfxOtiWgV8B+A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:05 2026 by rpki-client