Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: ChjPV1HnP/VZFAbv/XNxWPTMOVg6ZoHg7eD96K5OLko=
Subject key identifier: A0:D4:06:EA:7E:EA:5C:CC:4B:D5:90:22:19:4B:95:55:DA:A6:C0:76
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019D277203709B4120DB3F95480696057A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 079A
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: 5xxcAEo_4vIQvQTZ11nCDFMgZo4.roa (hash: N8rxJgsy2l36Fd1o/jwhRwE3qaDQpQB4/meaBlVTHWs=)
2: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: T1LSiVtRjPPVmr353SsACaGbNGOKBVgFuacqGP/BL+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:03:70:9b:41:20:db:3f:95:48:06:96:05:7a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=a0d406ea7eea5ccc4bd59022194b9555daa6c076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:65:4a:ac:45:12:3f:d9:95:53:d5:54:73:
f7:d0:10:66:b9:99:94:eb:d3:db:b5:fb:2c:b5:06:
43:e7:1a:3e:07:a6:51:94:5f:e5:36:fe:47:48:58:
26:98:0e:d0:92:90:3a:07:77:c4:49:39:45:ad:c6:
09:6f:a5:7b:b3:c9:38:7c:e0:cd:2d:14:47:ad:d4:
78:cb:5c:0d:1a:93:f3:69:05:a0:5d:c2:46:d4:ea:
f2:70:ca:93:62:aa:04:4c:b5:6f:72:51:64:2f:06:
10:75:b3:7c:eb:c3:d7:9f:3f:3c:25:d4:27:c5:fd:
14:cd:8e:09:df:03:51:0d:9a:31:35:61:7f:74:12:
09:bc:b4:d2:f6:73:09:2c:1d:92:01:96:46:d0:88:
8b:a3:b1:e4:85:6f:c0:f4:37:90:7a:1a:17:9c:03:
69:7b:49:8c:cf:ef:cb:42:38:40:7f:24:18:66:53:
af:df:a5:9b:72:ac:0c:c8:9a:7a:29:99:03:50:46:
7b:8b:7e:08:9d:25:91:ea:e5:34:bc:e0:a5:e6:c6:
69:0a:24:dc:25:e0:bc:29:50:61:64:84:a0:76:19:
bf:b5:2f:22:16:0c:ed:52:c3:54:24:e1:f7:38:f4:
c9:93:ab:49:2b:e2:37:6e:fd:e0:98:5f:e3:93:7c:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:06:EA:7E:EA:5C:CC:4B:D5:90:22:19:4B:95:55:DA:A6:C0:76
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2d:dc:c3:5b:fb:f2:ab:c3:f2:83:1d:ab:57:22:30:7e:41:
60:5f:1d:25:72:34:ed:a0:2f:db:0d:53:83:42:49:70:a4:6e:
f7:81:69:3a:af:04:5a:f5:e7:43:18:a9:43:72:5d:35:c6:e2:
64:46:c0:27:03:62:60:9f:13:60:23:6d:48:0e:2a:6f:30:f1:
96:a9:0c:47:c3:af:ea:f2:69:e2:f0:65:64:fe:a7:35:49:ab:
1f:8b:23:2e:4d:1c:e1:50:09:c1:e5:7c:e8:f8:4b:dd:66:5d:
76:a7:ea:de:12:29:20:54:c0:1b:9d:ca:1b:61:dc:76:a5:c3:
45:55:12:ee:5e:79:c6:56:7d:bb:8f:83:90:02:08:95:22:52:
6b:a7:32:74:e2:b4:b3:f3:55:be:b9:af:db:34:5f:82:ba:22:
88:9e:f2:0d:19:8d:df:05:92:28:63:b7:10:13:dc:ea:7e:8d:
bf:dd:d2:ee:64:91:20:07:13:bd:2b:1d:fd:97:d0:68:95:02:
92:40:5f:3a:4b:f6:50:61:6b:91:a2:d4:eb:44:66:db:16:88:
4a:16:5b:27:d5:5e:89:7f:23:58:47:b6:c6:7a:09:5c:3b:f1:
c3:a2:84:b9:bc:53:20:81:54:a9:ab:ba:b4:f5:4f:f7:65:50:
e8:1f:61:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncgNwm0Eg2z+VSAaWBXpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZmVlZjM5MWYxNjMwMDE1N2JiNzhiMmVhZWEwNmQ2MWMy
MGM5NDUwHhcNMjYwMzI2MDAwMTE2WhcNMjYwMzI3MDAwMTE2WjAzMTEwLwYDVQQD
EyhhMGQ0MDZlYTdlZWE1Y2NjNGJkNTkwMjIxOTRiOTU1NWRhYTZjMDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+llSqxFEj/ZlVPVVHP30BBmuZmU
69PbtfsstQZD5xo+B6ZRlF/lNv5HSFgmmA7QkpA6B3fESTlFrcYJb6V7s8k4fODN
LRRHrdR4y1wNGpPzaQWgXcJG1OrycMqTYqoETLVvclFkLwYQdbN868PXnz88JdQn
xf0UzY4J3wNRDZoxNWF/dBIJvLTS9nMJLB2SAZZG0IiLo7HkhW/A9DeQehoXnANp
e0mMz+/LQjhAfyQYZlOv36WbcqwMyJp6KZkDUEZ7i34InSWR6uU0vOCl5sZpCiTc
JeC8KVBhZISgdhm/tS8iFgztUsNUJOH3OPTJk6tJK+I3bv3gmF/jk3x9lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDUBup+6lzMS9WQIhlLlVXapsB2MB8GA1UdIwQY
MBaAFCD+7zkfFjABV7t4surqBtYcIMlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODct
MjI2YjhkNGE1ZjYwLzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NDcyMmItMjk5NS00MGRlLThiODctMjI2YjhkNGE1ZjYw
LzEvSVA3dk9SOFdNQUZYdTNpeTZ1b0cxaHdneVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy3cw1v7
8qvD8oMdq1ciMH5BYF8dJXI07aAv2w1Tg0JJcKRu94FpOq8EWvXnQxipQ3JdNcbi
ZEbAJwNiYJ8TYCNtSA4qbzDxlqkMR8Ov6vJp4vBlZP6nNUmrH4sjLk0c4VAJweV8
6PhL3WZddqfq3hIpIFTAG53KG2HcdqXDRVUS7l55xlZ9u4+DkAIIlSJSa6cydOK0
s/NVvrmv2zRfgroiiJ7yDRmN3wWSKGO3EBPc6n6Nv93S7mSRIAcTvSsd/ZfQaJUC
kkBfOkv2UGFrkaLU60Rm2xaIShZbJ9VeiX8jWEe2xnoJXDvxw6KEubxTIIFUqau6
tPVP92VQ6B9hkg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:30 2026 by rpki-client