Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
File: _IJp9C5GRBqx7ZlMifdHuqVU4yA.mft (raw, json)
Hash identifier: Bpdq2ypWGLvLTwFmUfEnAngglvAmd3/akCHzGtT3Kv0=
Subject key identifier: FD:28:A2:A0:38:0E:39:07:A1:81:0C:64:81:FA:7A:E3:9C:10:70:73
Authority key identifier: FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
Certificate issuer: /CN=fc8269f42e46441ab1ed994c89f747baa554e320
Certificate serial: 019D2A3C0095BFBF1A29DB724856D45A4860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:01:08 +0000
Manifest this update: Thu 26 Mar 2026 13:01:08 +0000
Manifest next update: Fri 27 Mar 2026 13:01:08 +0000
Files and hashes: 1: OA7ua6CV1NawowKipRihY67EFIg.roa (hash: xqJsWriHrPd8Qn5lT9pYETlcfFbLKXpXQUl+bRYJP2M=)
2: _IJp9C5GRBqx7ZlMifdHuqVU4yA.crl (hash: ktlX/oydhrF+VZCUDVrQUntgZhTWllip6LFTIk54XhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:00:95:bf:bf:1a:29:db:72:48:56:d4:5a:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8269f42e46441ab1ed994c89f747baa554e320
Validity
Not Before: Mar 26 13:01:08 2026 GMT
Not After : Mar 27 13:01:08 2026 GMT
Subject: CN=fd28a2a0380e3907a1810c6481fa7ae39c107073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:75:6b:a3:f3:a9:b8:05:6b:6e:79:fa:6f:
36:cf:59:d7:4d:02:d0:2a:e5:fa:4a:92:ad:97:94:
cd:c7:67:85:f3:d0:c6:21:3d:63:5b:c8:d1:95:2e:
0c:dd:d4:c1:a0:15:d7:2c:7a:c5:f1:bd:9b:f3:d7:
8e:c7:66:c4:24:04:ee:05:23:1e:66:d4:af:f7:26:
39:77:8e:11:a9:09:c6:d4:53:3e:6b:b7:65:ae:a3:
7d:22:95:8a:4b:7a:e2:f2:b6:dd:5b:c4:36:f5:d4:
c7:d0:64:e6:0b:ee:7e:a2:d2:b6:d4:d5:c4:94:40:
a8:4f:16:0c:21:1a:c5:ea:74:00:da:75:fa:85:8e:
4f:96:26:d8:c2:75:cf:5d:23:39:ca:73:a6:dd:4e:
5f:fd:a5:c7:4c:93:9b:53:99:b1:c1:12:74:0a:93:
bf:d6:7f:16:79:a4:26:ba:4c:a4:0c:34:ec:0f:55:
9c:2f:77:48:9b:1f:d6:22:91:79:f0:58:0a:c9:2c:
1d:b3:21:1c:3a:da:20:85:1a:cb:21:cf:7b:f8:2f:
cc:cd:bb:7e:e6:dd:92:ef:17:7f:eb:62:21:f2:7d:
65:c6:48:39:a8:ec:74:ea:97:6a:b5:c6:45:87:14:
5a:3b:c2:c2:80:47:5b:b9:1b:31:4b:b2:ee:4a:8d:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:28:A2:A0:38:0E:39:07:A1:81:0C:64:81:FA:7A:E3:9C:10:70:73
X509v3 Authority Key Identifier:
keyid:FC:82:69:F4:2E:46:44:1A:B1:ED:99:4C:89:F7:47:BA:A5:54:E3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IJp9C5GRBqx7ZlMifdHuqVU4yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/45c4fd-4294-4516-a74d-d6cd57287f9c/1/_IJp9C5GRBqx7ZlMifdHuqVU4yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0c:8e:ee:8f:a7:4e:53:f0:7f:b6:ca:94:d0:40:08:45:38:
07:6b:1d:56:6f:24:e4:69:f3:7c:b4:5d:15:1e:7b:1b:e6:46:
d6:7f:57:28:d5:4d:c1:92:e8:f8:5d:9a:6c:2c:f8:7e:3f:d4:
9c:81:15:29:91:75:1c:3b:3b:cb:55:79:79:53:70:d0:63:fe:
e3:e0:59:6a:b8:88:a8:3f:9e:cc:68:8f:81:7a:48:0c:4c:a9:
ca:88:61:9c:67:0c:bb:78:16:b3:a4:62:b7:63:8f:f8:b0:97:
94:b3:e4:cb:2f:30:b5:e2:a1:f3:58:b1:ea:7d:b2:d9:f8:c9:
ff:b0:13:66:81:d6:21:83:ca:08:aa:cf:58:e5:bc:38:16:16:
cf:65:4c:17:7d:f7:b3:55:eb:c2:8b:bb:27:74:9a:f8:27:65:
3e:d4:a7:86:59:3c:df:28:2c:72:f5:93:29:e5:46:3f:c5:68:
d0:82:2d:aa:07:5b:c5:f5:db:b8:2b:29:7c:ec:82:3f:5a:f5:
29:f0:15:13:5a:c6:79:41:54:19:6c:6b:0b:95:f7:06:0e:dc:
0a:06:53:d5:38:a6:7c:60:63:8e:46:30:c7:1b:36:59:36:9a:
b7:00:f1:42:64:2d:3d:d3:a2:11:dc:9d:af:f3:8e:53:48:e3:
ca:f6:e7:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qPACVv78aKdtySFbUWkhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODI2OWY0MmU0NjQ0MWFiMWVkOTk0Yzg5Zjc0N2JhYTU1
NGUzMjAwHhcNMjYwMzI2MTMwMTA4WhcNMjYwMzI3MTMwMTA4WjAzMTEwLwYDVQQD
EyhmZDI4YTJhMDM4MGUzOTA3YTE4MTBjNjQ4MWZhN2FlMzljMTA3MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgN1a6PzqbgFa255+m82z1nXTQLQ
KuX6SpKtl5TNx2eF89DGIT1jW8jRlS4M3dTBoBXXLHrF8b2b89eOx2bEJATuBSMe
ZtSv9yY5d44RqQnG1FM+a7dlrqN9IpWKS3ri8rbdW8Q29dTH0GTmC+5+otK21NXE
lECoTxYMIRrF6nQA2nX6hY5PlibYwnXPXSM5ynOm3U5f/aXHTJObU5mxwRJ0CpO/
1n8WeaQmukykDDTsD1WcL3dImx/WIpF58FgKySwdsyEcOtoghRrLIc97+C/Mzbt+
5t2S7xd/62Ih8n1lxkg5qOx06pdqtcZFhxRaO8LCgEdbuRsxS7LuSo1gMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0ooqA4DjkHoYEMZIH6euOcEHBzMB8GA1UdIwQY
MBaAFPyCafQuRkQase2ZTIn3R7qlVOMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80NWM0ZmQtNDI5NC00NTE2LWE3NGQt
ZDZjZDU3Mjg3ZjljLzEvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80NWM0ZmQtNDI5NC00NTE2LWE3NGQtZDZjZDU3Mjg3Zjlj
LzEvX0lKcDlDNUdSQnF4N1psTWlmZEh1cVZVNHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwyO7o+n
TlPwf7bKlNBACEU4B2sdVm8k5GnzfLRdFR57G+ZG1n9XKNVNwZLo+F2abCz4fj/U
nIEVKZF1HDs7y1V5eVNw0GP+4+BZariIqD+ezGiPgXpIDEypyohhnGcMu3gWs6Ri
t2OP+LCXlLPkyy8wteKh81ix6n2y2fjJ/7ATZoHWIYPKCKrPWOW8OBYWz2VMF333
s1Xrwou7J3Sa+CdlPtSnhlk83ygscvWTKeVGP8Vo0IItqgdbxfXbuCspfOyCP1r1
KfAVE1rGeUFUGWxrC5X3Bg7cCgZT1TimfGBjjkYwxxs2WTaatwDxQmQtPdOiEdyd
r/OOU0jjyvbnyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:20 2026 by rpki-client