Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: QwfZbKJ+pJG67KtFxbKZWx7VMpVfk1+v3G3Q448Ow4M=
Subject key identifier: BD:49:DE:50:BC:4A:5C:E0:FF:CE:91:4E:24:52:86:E4:93:7F:4E:A8
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 019D3307B08B6E599806CF7B801B19606624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 12A9
Signing time: Sat 28 Mar 2026 06:00:35 +0000
Manifest this update: Sat 28 Mar 2026 06:00:35 +0000
Manifest next update: Sun 29 Mar 2026 06:00:35 +0000
Files and hashes: 1: 3kj2IZUmhg4c3fn_vDNshjS1bYM.roa (hash: F1j+Rw7AK0w/RfaxR+vC5zwL/WwgyQ05RgO+QAvekpY=)
2: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: b7pbU0xeBZZrrA7Xm7lXxhExakwdFGVDtUntrqD/p7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:07:b0:8b:6e:59:98:06:cf:7b:80:1b:19:60:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Mar 28 06:00:35 2026 GMT
Not After : Mar 29 06:00:35 2026 GMT
Subject: CN=bd49de50bc4a5ce0ffce914e245286e4937f4ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:42:f1:36:c8:f7:8c:6c:07:bf:57:42:0c:
26:74:15:59:07:fa:2d:0a:00:ab:fd:3c:c7:9d:a8:
06:17:b4:74:f0:31:ad:42:fa:e5:46:bf:75:22:e7:
9e:b1:5f:49:00:3d:2a:95:47:ee:be:b4:9b:ea:eb:
17:93:61:53:e4:63:5f:b2:f8:9d:f6:56:8c:31:99:
61:75:50:2d:f2:63:c0:cc:80:7c:ec:79:9c:74:4d:
7b:60:66:08:c0:c0:2a:fe:30:96:cd:b7:39:f6:37:
75:11:3f:51:b0:73:87:52:b0:16:81:16:32:11:83:
3d:78:3c:ee:90:74:cc:5b:24:75:57:11:43:1b:a7:
47:3d:d4:31:ab:24:c6:17:c7:eb:42:2e:a6:59:42:
99:00:c4:0e:30:67:05:b4:50:a5:6a:11:00:96:d6:
32:e4:da:41:d9:71:f0:8c:cc:09:62:0e:56:f4:c7:
18:57:b6:41:60:ff:db:2c:ed:8b:4c:74:c2:7e:54:
96:16:1f:26:b0:11:53:ab:5c:6c:1e:b6:a0:b7:0c:
40:05:2e:01:b5:9c:32:a4:1d:59:97:e7:a5:49:ca:
d9:2f:9b:16:15:b5:33:8a:e1:91:09:8a:99:39:f7:
24:dd:61:28:67:68:95:f8:e0:00:fb:c1:21:ac:db:
ae:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:DE:50:BC:4A:5C:E0:FF:CE:91:4E:24:52:86:E4:93:7F:4E:A8
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:57:33:8e:13:06:e3:ea:d4:b5:96:1e:95:7f:cd:69:8d:43:
68:71:df:03:e9:d0:53:89:f3:48:42:55:d5:d2:b3:a0:8a:fa:
6a:dc:9f:be:8d:eb:a6:34:98:2f:c0:ce:23:da:d2:ff:96:66:
03:11:af:a8:eb:82:a3:09:47:e7:b1:c6:98:4c:18:5b:ea:fa:
38:1d:d9:b1:21:03:b3:97:b5:45:54:60:c5:d4:cc:b4:f7:8e:
e5:30:60:6f:a0:45:7b:c9:d1:77:30:00:32:4f:ff:2d:ef:b6:
86:c4:fc:04:ff:56:85:3a:2c:71:4c:e5:27:07:cb:bf:64:6d:
8c:21:7f:e1:79:49:0b:a4:e9:e0:4c:2e:bc:ab:a0:f2:44:bd:
b8:97:c8:90:73:ef:ed:e7:e9:61:5b:67:d6:d0:b9:b1:e1:da:
6c:ba:3e:d4:9a:78:78:0e:a5:ce:42:af:1f:65:f2:91:27:15:
07:da:98:c0:2b:dd:9a:75:ec:ff:ad:f5:e4:7e:6d:df:ba:64:
9f:d6:71:28:bc:ed:11:9d:de:65:58:d4:0d:6c:76:2f:7e:e5:
03:a0:90:b8:9b:5c:3d:14:56:45:a7:0b:87:af:24:61:25:f4:
51:cb:29:48:e9:6f:24:72:07:e7:37:7a:eb:10:67:77:af:bd:
33:d3:7a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB7CLblmYBs97gBsZYGYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGQzMTFmYzE5NDYzZmRkMzBhZGVjYzkxN2I1ZjAyOTg3
NDFiNDQwHhcNMjYwMzI4MDYwMDM1WhcNMjYwMzI5MDYwMDM1WjAzMTEwLwYDVQQD
EyhiZDQ5ZGU1MGJjNGE1Y2UwZmZjZTkxNGUyNDUyODZlNDkzN2Y0ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi81C8TbI94xsB79XQgwmdBVZB/ot
CgCr/TzHnagGF7R08DGtQvrlRr91IueesV9JAD0qlUfuvrSb6usXk2FT5GNfsvid
9laMMZlhdVAt8mPAzIB87HmcdE17YGYIwMAq/jCWzbc59jd1ET9RsHOHUrAWgRYy
EYM9eDzukHTMWyR1VxFDG6dHPdQxqyTGF8frQi6mWUKZAMQOMGcFtFClahEAltYy
5NpB2XHwjMwJYg5W9McYV7ZBYP/bLO2LTHTCflSWFh8msBFTq1xsHragtwxABS4B
tZwypB1Zl+elScrZL5sWFbUziuGRCYqZOfck3WEoZ2iV+OAA+8EhrNuuZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1J3lC8Slzg/86RTiRShuSTf06oMB8GA1UdIwQY
MBaAFCMNMR/BlGP90wrezJF7XwKYdBtEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjIt
MWJlY2I1ZGNkN2FhLzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8yODFkZmItMzI5My00YmFiLWJhMjItMWJlY2I1ZGNkN2Fh
LzEvSXcweEg4R1VZXzNUQ3Q3TWtYdGZBcGgwRzBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVczjhMG
4+rUtZYelX/NaY1DaHHfA+nQU4nzSEJV1dKzoIr6atyfvo3rpjSYL8DOI9rS/5Zm
AxGvqOuCowlH57HGmEwYW+r6OB3ZsSEDs5e1RVRgxdTMtPeO5TBgb6BFe8nRdzAA
Mk//Le+2hsT8BP9WhToscUzlJwfLv2RtjCF/4XlJC6Tp4EwuvKug8kS9uJfIkHPv
7efpYVtn1tC5seHabLo+1Jp4eA6lzkKvH2XykScVB9qYwCvdmnXs/6315H5t37pk
n9ZxKLztEZ3eZVjUDWx2L37lA6CQuJtcPRRWRacLh68kYSX0UcspSOlvJHIH5zd6
6xBnd6+9M9N6TQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 08:44:25 2026 by rpki-client