Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: VZEGYFN6U00jGkVRXEfL88nGgXFzTUiA8LtK6h54w94=
Subject key identifier: 68:22:EF:32:8F:04:F9:EA:59:96:38:C1:05:89:5E:64:79:C3:1B:75
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019D254C523FB5EAEE4F8685C445446E6465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 14:00:51 +0000
Manifest this update: Wed 25 Mar 2026 14:00:51 +0000
Manifest next update: Thu 26 Mar 2026 14:00:51 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: xN7xzJvQYeuYqCYWAryjBZYp6xaiaaMDe9/smJOEjQw=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:52:3f:b5:ea:ee:4f:86:85:c4:45:44:6e:64:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Mar 25 14:00:51 2026 GMT
Not After : Mar 26 14:00:51 2026 GMT
Subject: CN=6822ef328f04f9ea599638c105895e6479c31b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:a4:a0:71:8f:8c:ac:c5:e6:d2:62:60:9a:
d0:99:c0:3e:5d:77:46:16:56:84:13:cb:73:41:9b:
55:a1:7d:25:17:e7:a3:47:bd:c8:22:92:b3:51:1e:
33:3c:d4:73:a1:ab:e5:73:da:2a:a0:25:bd:9b:62:
37:ec:ff:aa:1d:ae:8b:62:b7:6d:92:52:ac:d6:d6:
7a:f8:0e:c2:db:1b:c5:66:94:99:4c:c1:24:18:36:
75:a6:f8:a3:c0:1f:f2:bf:4e:b2:e5:4f:00:d6:e9:
06:24:5a:df:11:4d:bb:64:9c:34:2d:68:4b:83:aa:
5e:39:36:cc:2a:28:ef:a0:a6:48:f8:ff:5d:f5:24:
b7:6d:3e:4b:ee:10:00:b5:c8:22:f3:74:dc:30:5b:
d0:ba:b4:1d:cb:3c:6c:f3:c2:db:38:8e:18:da:64:
4d:1c:fd:7c:64:a5:0c:08:d2:93:f3:6d:4f:7e:03:
f7:72:92:5c:1a:b7:a2:39:de:94:23:f5:b6:f9:88:
92:54:75:50:37:51:ba:1f:b7:f7:74:ac:3f:79:5e:
c3:41:77:ff:1d:a6:81:00:d9:74:96:4c:57:88:91:
a9:54:6f:54:24:e0:5b:bf:ab:7a:6d:40:85:fe:18:
63:56:f0:86:d9:91:fc:35:f2:7f:3a:67:d4:3a:43:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:22:EF:32:8F:04:F9:EA:59:96:38:C1:05:89:5E:64:79:C3:1B:75
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:19:e3:0f:e5:eb:70:9d:d0:10:09:8c:36:60:bd:09:d9:e0:
69:cd:50:f2:0c:1e:32:58:f6:34:06:be:0d:87:05:52:13:aa:
80:00:b4:19:43:e0:ad:cb:f8:b0:ff:70:dc:4d:3e:21:d4:54:
a0:fb:17:80:6d:c6:9a:8f:ba:a9:d0:86:34:99:e7:6c:2a:93:
d9:1b:5c:b5:62:68:0e:59:8a:30:4e:d9:82:1e:a6:c7:b3:88:
c7:a7:75:a7:e3:d5:3e:c8:10:86:39:94:48:98:0d:34:e9:64:
9e:3c:af:0f:11:a6:d6:23:eb:d5:4a:9a:1f:ca:38:ac:99:5e:
da:4b:25:a5:74:1d:58:5a:74:48:ac:aa:8c:02:42:50:bf:a1:
6a:71:4d:3c:32:ab:0f:0a:72:80:6a:00:31:64:74:cf:e9:a1:
7e:98:45:22:cf:3d:dd:fb:43:b8:eb:84:b0:f2:66:82:4e:be:
d3:5f:26:c2:dd:86:92:5e:cc:7e:09:71:7e:ea:aa:e2:ad:63:
de:7c:35:d0:ea:6d:0c:0c:cd:30:56:58:83:03:eb:f2:82:c7:
c2:d4:26:5a:f3:fd:55:01:88:96:5a:4f:a7:9e:23:1a:c2:32:
25:7e:9d:2b:3c:93:d0:7c:06:5d:a2:ac:7f:4f:98:cd:58:61:
f1:77:ce:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lTFI/teruT4aFxEVEbmRlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4
NzE1NTQwHhcNMjYwMzI1MTQwMDUxWhcNMjYwMzI2MTQwMDUxWjAzMTEwLwYDVQQD
Eyg2ODIyZWYzMjhmMDRmOWVhNTk5NjM4YzEwNTg5NWU2NDc5YzMxYjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0omkoHGPjKzF5tJiYJrQmcA+XXdG
FlaEE8tzQZtVoX0lF+ejR73IIpKzUR4zPNRzoavlc9oqoCW9m2I37P+qHa6LYrdt
klKs1tZ6+A7C2xvFZpSZTMEkGDZ1pvijwB/yv06y5U8A1ukGJFrfEU27ZJw0LWhL
g6peOTbMKijvoKZI+P9d9SS3bT5L7hAAtcgi83TcMFvQurQdyzxs88LbOI4Y2mRN
HP18ZKUMCNKT821PfgP3cpJcGreiOd6UI/W2+YiSVHVQN1G6H7f3dKw/eV7DQXf/
HaaBANl0lkxXiJGpVG9UJOBbv6t6bUCF/hhjVvCG2ZH8NfJ/OmfUOkNCWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgi7zKPBPnqWZY4wQWJXmR5wxt1MB8GA1UdIwQY
MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt
Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4
LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchnjD+Xr
cJ3QEAmMNmC9Cdngac1Q8gweMlj2NAa+DYcFUhOqgAC0GUPgrcv4sP9w3E0+IdRU
oPsXgG3Gmo+6qdCGNJnnbCqT2RtctWJoDlmKME7Zgh6mx7OIx6d1p+PVPsgQhjmU
SJgNNOlknjyvDxGm1iPr1UqaH8o4rJle2kslpXQdWFp0SKyqjAJCUL+hanFNPDKr
DwpygGoAMWR0z+mhfphFIs893ftDuOuEsPJmgk6+018mwt2Gkl7Mfglxfuqq4q1j
3nw10OptDAzNMFZYgwPr8oLHwtQmWvP9VQGIllpPp54jGsIyJX6dKzyT0HwGXaKs
f0+YzVhh8XfO9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:20 2026 by rpki-client