Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
File: IKf8vlkxTDcraPIyIjgoseM6A-w.mft (raw, json)
Hash identifier: n1NDCb4/T9BYrjAyPH6QxkS33g7lXyQeW1TdO0nIfv0=
Subject key identifier: B8:9A:9A:AA:23:31:2C:F8:8C:C1:0F:50:4C:66:76:92:6F:3F:72:67
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 019D29294D4DBD44D30BF99A230D24E17B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
Manifest number: 14E7
Signing time: Thu 26 Mar 2026 08:01:05 +0000
Manifest this update: Thu 26 Mar 2026 08:01:05 +0000
Manifest next update: Fri 27 Mar 2026 08:01:05 +0000
Files and hashes: 1: 4ad3Sx3tHCKPvoySsJwPEN1dqk0.roa (hash: 9KW5traDiZ8b8YIka+3LA3dxjZd+hGHcIvyVnNUiXKg=)
2: IKf8vlkxTDcraPIyIjgoseM6A-w.crl (hash: yz2uhnd57e+I3ipivc+NzrDVbw5+vWu9iI+29PZfshY=)
3: k82VZQjPTfp29HOrsd4ebLlbLLQ.roa (hash: mCVrb2F3QQSAvERyzJs5ziCWnKSLVC3ur8XxDFUzHh0=)
4: w6ZIXPDpAeu5P7_mH6HZiqnkV9o.roa (hash: Yf1g7ljDU7te6N4XEGH4NkhfBi9rKgbfTnWehMLxzL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:4d:4d:bd:44:d3:0b:f9:9a:23:0d:24:e1:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Mar 26 08:01:05 2026 GMT
Not After : Mar 27 08:01:05 2026 GMT
Subject: CN=b89a9aaa23312cf88cc10f504c6676926f3f7267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:bc:f8:d0:11:a9:80:0d:d0:2c:9e:43:d7:
a6:86:bd:9c:56:b0:96:0c:47:99:68:fb:11:d1:6e:
1d:ab:1e:30:5c:12:34:24:e6:fe:0a:b7:50:64:b3:
ca:0e:d5:73:b5:ee:39:d4:52:44:d1:50:36:e6:f8:
4d:28:98:ac:0f:85:e2:b1:bc:c2:85:0e:d3:2a:56:
ee:ad:46:d9:33:92:d4:14:69:06:7a:67:43:d3:17:
77:3f:e7:72:d7:5a:be:42:ed:ff:cc:a3:5d:2e:e2:
af:68:e7:61:03:b7:35:04:03:22:8f:75:90:0a:43:
16:5b:bb:cb:17:eb:e3:2e:8d:4f:4d:a4:40:67:1a:
b3:3b:db:14:6b:a3:b3:18:c3:24:eb:b9:5c:47:e5:
de:b5:4b:5b:a0:d0:b1:f9:2e:28:c6:87:b2:28:87:
b5:3a:49:c4:d8:1f:7c:7d:62:b2:02:24:df:ac:4a:
bd:63:5c:4d:ff:ed:a7:75:63:5c:36:76:47:cc:e8:
37:92:40:e8:ac:ed:8c:08:a1:26:d1:ed:dd:e1:5f:
af:e6:52:c4:c7:36:75:3a:c6:36:de:a9:70:80:f8:
43:97:0a:aa:36:72:e4:df:d0:3b:2f:89:49:e8:8b:
66:f5:c5:f1:61:27:d3:05:34:99:c2:ed:cf:1e:83:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9A:9A:AA:23:31:2C:F8:8C:C1:0F:50:4C:66:76:92:6F:3F:72:67
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:f7:e9:96:de:98:91:bd:a4:3c:0b:fa:7f:e2:53:02:e7:50:
bb:c5:f0:b3:b2:81:7c:25:06:4d:53:dd:2c:68:06:a2:9d:e1:
74:04:a5:a3:11:91:8f:b3:c7:fe:c5:64:b0:e3:fb:78:b0:24:
c9:a2:3a:b6:e0:c0:94:05:0d:5e:0e:a4:32:13:b2:36:1b:94:
50:f2:c3:05:12:7d:c8:ca:ed:1f:6e:5f:39:c0:25:4d:3e:1f:
6d:37:55:28:e4:e7:bb:70:87:4d:77:c2:9c:3e:06:c4:f4:98:
ff:ab:dc:75:ee:eb:0c:a6:64:2d:d8:a3:1f:db:37:ef:e5:27:
86:02:08:50:70:1c:88:1a:41:fd:ec:d3:9f:ef:35:6e:5f:10:
d3:48:03:c2:53:0d:c2:c1:84:8f:13:bf:c7:a0:48:bc:2f:1f:
c3:40:a3:8d:8b:4f:63:b4:8b:ff:f4:dd:98:34:e5:9d:f7:42:
66:7d:be:b0:af:0f:ef:b2:b2:db:05:24:e8:7d:3e:3c:5d:89:
c4:6a:fa:2a:51:26:05:8c:33:ea:3a:12:e7:73:4c:27:24:86:
4c:da:e9:bb:3e:44:8e:e8:09:9e:0c:c5:27:cb:82:ce:00:26:
34:3a:c7:11:b3:b3:f1:0f:a9:8a:54:69:49:41:d2:89:fd:be:
f4:c1:bc:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKU1NvUTTC/maIw0k4XuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYTdmY2JlNTkzMTRjMzcyYjY4ZjIzMjIyMzgyOGIxZTMz
YTAzZWMwHhcNMjYwMzI2MDgwMTA1WhcNMjYwMzI3MDgwMTA1WjAzMTEwLwYDVQQD
EyhiODlhOWFhYTIzMzEyY2Y4OGNjMTBmNTA0YzY2NzY5MjZmM2Y3MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfS8+NARqYAN0CyeQ9emhr2cVrCW
DEeZaPsR0W4dqx4wXBI0JOb+CrdQZLPKDtVzte451FJE0VA25vhNKJisD4XisbzC
hQ7TKlburUbZM5LUFGkGemdD0xd3P+dy11q+Qu3/zKNdLuKvaOdhA7c1BAMij3WQ
CkMWW7vLF+vjLo1PTaRAZxqzO9sUa6OzGMMk67lcR+XetUtboNCx+S4oxoeyKIe1
OknE2B98fWKyAiTfrEq9Y1xN/+2ndWNcNnZHzOg3kkDorO2MCKEm0e3d4V+v5lLE
xzZ1OsY23qlwgPhDlwqqNnLk39A7L4lJ6Itm9cXxYSfTBTSZwu3PHoOvJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiamqojMSz4jMEPUExmdpJvP3JnMB8GA1UdIwQY
MBaAFCCn/L5ZMUw3K2jyMiI4KLHjOgPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTIt
NDI2MDM5Nzg4OTE5LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9jMzk4OGUtODY1NC00MzExLTgyOTItNDI2MDM5Nzg4OTE5
LzEvSUtmOHZsa3hURGNyYVBJeUlqZ29zZU02QS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyffplt6Y
kb2kPAv6f+JTAudQu8Xws7KBfCUGTVPdLGgGop3hdASloxGRj7PH/sVksOP7eLAk
yaI6tuDAlAUNXg6kMhOyNhuUUPLDBRJ9yMrtH25fOcAlTT4fbTdVKOTnu3CHTXfC
nD4GxPSY/6vcde7rDKZkLdijH9s37+UnhgIIUHAciBpB/ezTn+81bl8Q00gDwlMN
wsGEjxO/x6BIvC8fw0CjjYtPY7SL//TdmDTlnfdCZn2+sK8P77Ky2wUk6H0+PF2J
xGr6KlEmBYwz6joS53NMJySGTNrpuz5EjugJngzFJ8uCzgAmNDrHEbOz8Q+pilRp
SUHSif2+9MG8og==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:53 2026 by rpki-client