Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: uJBXajAEH52H1ypId8Y3/nIMKhT4mI8MDxYsGPKVgNY=
Subject key identifier: 2D:E7:99:6C:27:08:D4:AC:04:45:38:22:70:0B:60:89:92:7F:33:53
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 019D2B4E8144CBEA02B61D0BF05BBE338FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 0336
Signing time: Thu 26 Mar 2026 18:00:58 +0000
Manifest this update: Thu 26 Mar 2026 18:00:58 +0000
Manifest next update: Fri 27 Mar 2026 18:00:58 +0000
Files and hashes: 1: 2KUHS5LVkDhMjwhw1VzfC6cPGAc.roa (hash: 1jH7/SA5/GdwWT+Ps3WcqV+9OYqbYvLUuoLuw+3ezww=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: rid3bcilXiAoSgOzy48vH6ixcwnEu70UXini0vhBri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:81:44:cb:ea:02:b6:1d:0b:f0:5b:be:33:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Mar 26 18:00:58 2026 GMT
Not After : Mar 27 18:00:58 2026 GMT
Subject: CN=2de7996c2708d4ac04453822700b6089927f3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:8b:f6:4d:98:95:46:f1:15:fc:f3:23:f8:
6e:8d:21:c2:a2:3b:e0:62:48:fa:97:70:94:1e:8e:
c3:25:72:6b:45:6f:40:31:fc:0d:46:d9:d7:ef:32:
a5:34:8d:5d:12:0c:6e:28:2d:b9:42:61:6e:44:dc:
c0:4b:85:8d:68:0c:b1:a6:cf:d7:52:30:2c:12:03:
90:32:71:35:a7:e9:5e:f8:ca:12:b9:80:d6:b4:cf:
b6:10:e1:3f:36:64:b6:26:94:cf:01:d0:5a:13:3d:
07:df:07:8c:0e:29:02:d7:90:8b:39:40:68:36:d6:
cd:0c:7f:42:9f:68:7c:80:c8:2f:6f:ec:65:28:d1:
e4:82:eb:1b:7e:d9:1a:fc:a3:f3:b3:38:c4:e8:4f:
a4:37:11:66:ef:c6:76:14:dd:f0:f2:ac:7c:d3:7a:
61:25:dc:ef:73:6a:57:e3:c3:e8:fe:7b:e4:22:f6:
83:a1:84:36:8e:9e:61:28:8c:3d:d1:b7:eb:de:16:
67:9c:68:01:e2:4a:e4:6c:e7:81:e0:d3:a1:a1:f0:
23:30:67:b6:c6:ef:07:f6:54:16:ff:44:7e:78:08:
6b:a3:4d:91:32:30:47:61:0f:1b:ea:a0:5d:c8:7a:
3f:ef:30:c2:b7:11:30:5c:f2:f7:c4:68:1e:85:70:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E7:99:6C:27:08:D4:AC:04:45:38:22:70:0B:60:89:92:7F:33:53
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:c1:ef:b4:36:10:1c:7a:c0:11:7e:35:8a:3d:22:e1:a3:
c5:2e:5b:60:76:eb:f0:d9:bf:df:20:f7:87:c6:02:71:4c:06:
da:c3:ba:b3:f8:c9:05:41:53:34:cf:ef:49:c7:9c:ed:6d:5c:
8c:34:ea:e1:75:a9:e1:af:83:bf:36:80:63:9a:ed:48:c5:0c:
68:ce:cf:93:da:97:34:23:17:be:fe:ae:2b:05:5a:6a:a5:6b:
a2:eb:f4:9f:35:1c:f7:9e:a0:75:41:e3:14:7d:11:9c:39:da:
d3:4f:1d:e1:f5:31:00:98:c9:22:8c:b2:60:80:a3:ef:e2:ab:
5e:3e:fa:2f:0b:51:c0:c0:75:bd:da:0c:52:7e:5d:ad:94:52:
2c:47:9b:ec:73:99:db:a0:4c:43:33:c6:2c:ba:69:d3:32:b5:
84:15:b2:e0:0c:c0:93:c3:c0:dd:53:3e:fc:d2:db:4c:13:c5:
0a:22:c6:24:11:8c:ba:69:fe:62:81:be:c1:94:c0:ae:a0:c1:
fe:61:1f:62:a4:fa:82:54:f1:4c:37:98:23:25:ab:4c:4b:24:
f7:8e:10:33:61:fe:2d:28:13:78:60:93:db:e5:95:36:da:11:
51:b0:3c:d3:b7:bb:ca:e9:0b:4c:16:b9:61:80:c8:b0:27:3f:
61:ce:ce:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rToFEy+oCth0L8Fu+M4/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNGRiODdhNDk3YTE1YmE3OWE3MDZkMTJlZTkwNGM0NDQ5
ZDFiNTUwHhcNMjYwMzI2MTgwMDU4WhcNMjYwMzI3MTgwMDU4WjAzMTEwLwYDVQQD
EygyZGU3OTk2YzI3MDhkNGFjMDQ0NTM4MjI3MDBiNjA4OTkyN2YzMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiOL9k2YlUbxFfzzI/hujSHCojvg
Ykj6l3CUHo7DJXJrRW9AMfwNRtnX7zKlNI1dEgxuKC25QmFuRNzAS4WNaAyxps/X
UjAsEgOQMnE1p+le+MoSuYDWtM+2EOE/NmS2JpTPAdBaEz0H3weMDikC15CLOUBo
NtbNDH9Cn2h8gMgvb+xlKNHkgusbftka/KPzszjE6E+kNxFm78Z2FN3w8qx803ph
Jdzvc2pX48Po/nvkIvaDoYQ2jp5hKIw90bfr3hZnnGgB4krkbOeB4NOhofAjMGe2
xu8H9lQW/0R+eAhro02RMjBHYQ8b6qBdyHo/7zDCtxEwXPL3xGgehXBH4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3nmWwnCNSsBEU4InALYImSfzNTMB8GA1UdIwQY
MBaAFItNuHpJehW6eacG0S7pBMREnRtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYt
MTYwMWQ0MWZkYzFmLzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kODE0YjQtMDJiMS00ZmIzLWFjZWYtMTYwMWQ0MWZkYzFm
LzEvaTAyNGVrbDZGYnA1cHdiUkx1a0V4RVNkRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUjB77Q2
EBx6wBF+NYo9IuGjxS5bYHbr8Nm/3yD3h8YCcUwG2sO6s/jJBUFTNM/vScec7W1c
jDTq4XWp4a+DvzaAY5rtSMUMaM7Pk9qXNCMXvv6uKwVaaqVrouv0nzUc956gdUHj
FH0RnDna008d4fUxAJjJIoyyYICj7+KrXj76LwtRwMB1vdoMUn5drZRSLEeb7HOZ
26BMQzPGLLpp0zK1hBWy4AzAk8PA3VM+/NLbTBPFCiLGJBGMumn+YoG+wZTArqDB
/mEfYqT6glTxTDeYIyWrTEsk944QM2H+LSgTeGCT2+WVNtoRUbA807e7yukLTBa5
YYDIsCc/Yc7OGA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:19 2026 by rpki-client