Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: gNApVNaDP54SyffOp86ImqFqrPPFK8volAAr2vIyKUg=
Subject key identifier: 79:0B:EB:78:15:E4:F3:86:3C:08:4C:62:27:22:0E:FF:B2:2C:0F:FE
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 019D265FF31E95AA40B1AE9DAF2312F30943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 0959
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: Vu8vQBvE2yvERNsXbyacaGDIbLaNNH8jY83VvMjXO14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f3:1e:95:aa:40:b1:ae:9d:af:23:12:f3:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=790beb7815e4f3863c084c6227220effb22c0ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:a7:85:3f:8c:34:5b:57:99:fc:5b:f0:d3:
bc:8a:3c:37:6f:c4:e7:ba:ea:48:37:d1:93:a4:62:
09:cf:c3:ca:8d:39:6d:a5:2e:c0:86:f3:0b:d3:d6:
e0:72:74:6a:71:66:16:d3:25:4e:bc:8e:cf:a5:0a:
4b:90:e2:08:03:26:04:ab:71:fa:1a:b6:ac:1a:93:
8d:b1:cf:c9:67:a7:bb:a8:63:58:0d:9c:cd:93:bb:
c9:33:e7:a0:a0:e1:78:cd:6b:18:49:4b:44:d3:71:
81:b9:96:2b:ff:fa:92:81:3a:e2:c2:15:15:76:48:
2f:f1:a7:16:d3:2e:44:44:1a:0b:fd:6d:ba:a4:31:
ef:8c:a2:36:e5:15:70:2d:70:45:49:ae:ec:a2:20:
d0:a2:e7:d9:06:b5:00:91:16:dc:0e:96:8c:9b:50:
dc:12:fa:6b:8c:4b:67:0e:f3:cf:2b:dc:c4:36:87:
9d:78:d1:e2:02:52:b7:e5:88:1b:1a:83:91:24:45:
42:36:3e:fd:50:a1:99:f2:bb:2a:9c:68:a9:0f:c2:
bd:b1:be:e5:b0:58:88:49:be:31:09:37:b1:ac:9b:
6f:8a:03:e3:ee:4a:c3:7d:c9:b9:d6:8a:79:21:f4:
88:e3:79:5d:62:75:dd:0c:86:39:3f:88:ac:40:bd:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0B:EB:78:15:E4:F3:86:3C:08:4C:62:27:22:0E:FF:B2:2C:0F:FE
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:93:89:93:b0:5b:66:ee:21:51:d8:f4:f7:a2:79:a1:e0:
e5:72:3b:6c:c9:07:fa:90:b2:6d:cf:5d:9a:a5:2e:c2:f4:d8:
3f:92:b4:f3:8f:44:4d:30:7b:bb:fd:da:c7:19:9e:f6:a3:7c:
be:3a:a3:ad:59:fc:85:5f:82:4e:cb:4a:ae:48:3b:61:59:cb:
5e:96:cd:36:4e:58:7f:c9:bf:44:1a:83:bd:6b:22:e7:13:3c:
91:76:81:54:03:70:03:ca:fd:e6:df:a7:4a:0e:13:85:0b:89:
b4:f5:a0:3b:b3:bd:e6:40:93:78:c6:44:31:46:79:90:04:f9:
dc:f1:77:ee:42:45:1f:2f:12:d8:17:40:89:12:ea:47:72:4b:
ed:72:2b:69:9b:f1:1e:72:c5:d3:d1:bf:17:99:f8:a2:39:ac:
2e:90:b3:5c:c7:33:c7:52:25:b1:a2:aa:65:5b:f8:ee:30:1a:
b8:86:61:41:5d:7f:c5:f4:5a:d6:cd:88:13:7f:23:a1:a8:69:
3c:e3:5b:41:20:fd:57:02:de:2d:95:89:a3:b8:af:8f:d5:d6:
3f:29:f0:49:cd:7e:81:48:d2:25:7d:be:da:3c:3b:52:4e:e9:
c9:27:ac:3f:17:70:85:48:be:d1:77:e9:73:14:13:1a:df:a0:
24:e7:89:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX/MelapAsa6dryMS8wlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMTI0YjEyNDk0MmE1ZDdlYWQ2YmI3ZDM3YTY0ZTU4Yzdl
NmRhNDEwHhcNMjYwMzI1MTkwMTU1WhcNMjYwMzI2MTkwMTU1WjAzMTEwLwYDVQQD
Eyg3OTBiZWI3ODE1ZTRmMzg2M2MwODRjNjIyNzIyMGVmZmIyMmMwZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz2nhT+MNFtXmfxb8NO8ijw3b8Tn
uupIN9GTpGIJz8PKjTltpS7AhvML09bgcnRqcWYW0yVOvI7PpQpLkOIIAyYEq3H6
GrasGpONsc/JZ6e7qGNYDZzNk7vJM+egoOF4zWsYSUtE03GBuZYr//qSgTriwhUV
dkgv8acW0y5ERBoL/W26pDHvjKI25RVwLXBFSa7soiDQoufZBrUAkRbcDpaMm1Dc
EvprjEtnDvPPK9zENoedeNHiAlK35YgbGoORJEVCNj79UKGZ8rsqnGipD8K9sb7l
sFiISb4xCTexrJtvigPj7krDfcm51op5IfSI43ldYnXdDIY5P4isQL3wvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkL63gV5POGPAhMYiciDv+yLA/+MB8GA1UdIwQY
MBaAFIsSSxJJQqXX6ta7fTemTljH5tpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmIt
ZWI2NTkxYjg3N2FlLzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jNjU1M2UtOWVhYy00ZWFmLTg1ZmItZWI2NTkxYjg3N2Fl
LzEvaXhKTEVrbENwZGZxMXJ0OU42Wk9XTWZtMmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCeTiZOw
W2buIVHY9PeieaHg5XI7bMkH+pCybc9dmqUuwvTYP5K0849ETTB7u/3axxme9qN8
vjqjrVn8hV+CTstKrkg7YVnLXpbNNk5Yf8m/RBqDvWsi5xM8kXaBVANwA8r95t+n
Sg4ThQuJtPWgO7O95kCTeMZEMUZ5kAT53PF37kJFHy8S2BdAiRLqR3JL7XIraZvx
HnLF09G/F5n4ojmsLpCzXMczx1IlsaKqZVv47jAauIZhQV1/xfRa1s2IE38joahp
PONbQSD9VwLeLZWJo7ivj9XWPynwSc1+gUjSJX2+2jw7Uk7pySesPxdwhUi+0Xfp
cxQTGt+gJOeJmA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:00 2026 by rpki-client