Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: DJ0z/2dVN4JG2eGildiEWwo9QY+NBHXEGKDopoNWUAo=
Subject key identifier: C3:B5:5B:66:B6:37:EE:E6:09:CD:72:60:F8:8C:D1:12:85:67:7D:29
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 019D26CD830BD47B08F59EDD829D2F7D1401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 1534
Signing time: Wed 25 Mar 2026 21:01:35 +0000
Manifest this update: Wed 25 Mar 2026 21:01:35 +0000
Manifest next update: Thu 26 Mar 2026 21:01:35 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: VRivvP/Qf2HGku7AjKL2Dt//wclyUVcFY8n8AXFUvmY=)
2: UKQ5Gx_xeBxacDeIbWDFvI2sD3w.roa (hash: QrqhBBMsTTwSodsla3NMIT0+aTJqntAImLif4CjmD3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:83:0b:d4:7b:08:f5:9e:dd:82:9d:2f:7d:14:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Mar 25 21:01:35 2026 GMT
Not After : Mar 26 21:01:35 2026 GMT
Subject: CN=c3b55b66b637eee609cd7260f88cd11285677d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:d0:0f:ec:02:1d:8b:77:7c:7d:2e:82:4b:
ba:9a:12:4a:6d:54:53:21:6d:5d:31:fb:74:ed:6b:
82:bd:e7:be:9a:5c:37:0d:96:4e:ef:87:b3:74:9f:
da:2c:63:8d:52:60:41:c2:c7:6d:0e:99:52:b0:9b:
c4:c7:7d:0e:d8:3b:6f:dd:29:a9:83:9d:f4:18:5d:
d2:c4:b8:89:c8:c2:95:b4:49:89:64:08:7a:08:53:
67:bc:79:84:85:17:ab:69:df:93:65:41:90:9f:af:
00:22:96:79:cf:83:3e:fc:6a:22:90:5d:a2:3e:7b:
51:1b:7f:67:34:ac:af:66:d5:38:59:6f:7c:d1:c0:
2e:30:d4:1d:73:2b:36:a4:ee:ab:20:68:97:8c:fb:
cc:53:1d:12:16:23:0d:e7:ac:c8:e7:ee:f3:d4:02:
3f:6c:ab:8c:81:4d:a5:7a:be:44:9b:6a:8a:0a:72:
96:c0:23:ff:56:5e:14:53:42:e8:4d:bc:ef:42:83:
42:33:98:f3:de:99:84:56:c1:b9:e5:f5:63:95:0f:
ae:ec:90:af:45:42:f6:4c:15:b7:9c:e6:15:21:10:
2b:80:3b:d8:2c:05:e9:45:32:da:5d:61:22:8a:80:
28:25:48:96:ea:d6:27:f5:af:9d:0b:45:3a:5c:0b:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:5B:66:B6:37:EE:E6:09:CD:72:60:F8:8C:D1:12:85:67:7D:29
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e3:eb:e0:58:cf:7b:5b:80:1d:a1:b9:35:9e:5c:26:e6:44:
d4:6b:3d:d5:25:27:ea:a5:cd:3a:7d:de:14:d8:cd:41:37:ff:
64:2a:bd:49:61:97:2f:82:1d:bc:4d:2b:4a:f9:ec:f4:eb:c1:
61:5c:2b:09:fd:8e:c6:39:96:e1:4f:94:17:c4:04:12:ad:91:
bd:27:eb:73:a6:8f:9a:4b:a9:8e:f0:71:45:1c:ee:f1:bc:ee:
d3:06:d1:28:99:e7:e3:cf:b8:e0:39:c9:fc:ac:41:02:66:1b:
de:5c:ed:91:4d:86:b8:2c:29:d3:e7:f9:25:6a:bd:64:d4:47:
74:62:0e:34:38:f6:39:35:27:b5:93:4d:87:9d:c0:a2:8a:39:
3e:81:51:92:d3:74:de:d6:40:15:d0:12:0a:0f:c3:0f:f8:a7:
be:b5:c5:dc:4f:e2:ce:50:ba:6b:db:9a:fb:31:e3:d8:50:19:
a9:29:f1:90:2d:55:a0:81:19:07:11:a1:b1:82:33:18:11:28:
58:3c:0e:94:f0:e9:e9:01:75:08:a9:9a:6f:f9:d2:35:0b:e9:
be:cd:40:b0:13:f5:4c:ab:31:de:ed:74:58:e6:06:09:46:6f:
5a:e7:16:ff:e2:62:fe:25:b2:78:d9:de:87:82:62:30:60:ee:
0e:86:8e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzYML1HsI9Z7dgp0vfRQBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzM2UzODI4NDExYmFmYWIwMDZlNzVmZDBkZDVmNWY5ZWY1
NWVjMjUwHhcNMjYwMzI1MjEwMTM1WhcNMjYwMzI2MjEwMTM1WjAzMTEwLwYDVQQD
EyhjM2I1NWI2NmI2MzdlZWU2MDljZDcyNjBmODhjZDExMjg1Njc3ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFrQD+wCHYt3fH0ugku6mhJKbVRT
IW1dMft07WuCvee+mlw3DZZO74ezdJ/aLGONUmBBwsdtDplSsJvEx30O2Dtv3Smp
g530GF3SxLiJyMKVtEmJZAh6CFNnvHmEhRerad+TZUGQn68AIpZ5z4M+/GoikF2i
PntRG39nNKyvZtU4WW980cAuMNQdcys2pO6rIGiXjPvMUx0SFiMN56zI5+7z1AI/
bKuMgU2ler5Em2qKCnKWwCP/Vl4UU0LoTbzvQoNCM5jz3pmEVsG55fVjlQ+u7JCv
RUL2TBW3nOYVIRArgDvYLAXpRTLaXWEiioAoJUiW6tYn9a+dC0U6XAso0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMO1W2a2N+7mCc1yYPiM0RKFZ30pMB8GA1UdIwQY
MBaAFCM+OChBG6+rAG51/Q3V9fnvVewlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYt
YTE1ZjBlNzhhNWE5LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNmNmZmMtYmU2NC00ZDA4LTk0YTYtYTE1ZjBlNzhhNWE5
LzEvSXo0NEtFRWJyNnNBYm5YOURkWDEtZTlWN0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+Pr4FjP
e1uAHaG5NZ5cJuZE1Gs91SUn6qXNOn3eFNjNQTf/ZCq9SWGXL4IdvE0rSvns9OvB
YVwrCf2OxjmW4U+UF8QEEq2RvSfrc6aPmkupjvBxRRzu8bzu0wbRKJnn48+44DnJ
/KxBAmYb3lztkU2GuCwp0+f5JWq9ZNRHdGIONDj2OTUntZNNh53Aooo5PoFRktN0
3tZAFdASCg/DD/invrXF3E/izlC6a9ua+zHj2FAZqSnxkC1VoIEZBxGhsYIzGBEo
WDwOlPDp6QF1CKmab/nSNQvpvs1AsBP1TKsx3u10WOYGCUZvWucW/+Ji/iWyeNne
h4JiMGDuDoaOkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:25 2026 by rpki-client