Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: Uxkm2iCdPpibymciPX7Ud2VRKllJ+4ZSEnmjgquLA58=
Subject key identifier: 08:96:17:5E:78:01:3C:E5:FD:31:04:1C:59:8C:C0:2C:F4:4B:53:F7
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 019D25F1C7CC4F7DB6F916E1FC3913475A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 074A
Signing time: Wed 25 Mar 2026 17:01:35 +0000
Manifest this update: Wed 25 Mar 2026 17:01:35 +0000
Manifest next update: Thu 26 Mar 2026 17:01:35 +0000
Files and hashes: 1: 0ID-AnVUhFUiMemh1sbAkCtku7k.roa (hash: AbzQcdesjBBWIHYWJC9zLMR7O1b0U/MWLPaNjpcLcdw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: afOE2TkwSxq5uTDDvO1WjoXtD2I7L95WL/bx8PQcefc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:c7:cc:4f:7d:b6:f9:16:e1:fc:39:13:47:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Mar 25 17:01:35 2026 GMT
Not After : Mar 26 17:01:35 2026 GMT
Subject: CN=0896175e78013ce5fd31041c598cc02cf44b53f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:1d:ea:34:46:0a:1e:b9:7c:b5:c2:1d:d7:
11:03:e8:d0:cb:8d:bc:2f:05:42:61:92:67:67:5e:
5b:f8:48:33:60:e9:ea:2a:0d:ca:27:4d:c5:0a:e5:
31:2f:ec:52:bc:f9:11:7e:34:cd:08:15:0a:5d:f8:
05:bd:31:89:6a:4e:61:29:eb:50:f1:f2:a0:19:1d:
bb:9f:ed:95:62:f9:6d:b2:b3:97:64:73:ff:da:db:
56:00:58:27:63:0a:63:48:26:c1:0d:51:21:bc:46:
f9:e9:f2:eb:96:41:ec:f5:46:94:78:1e:92:78:9f:
59:00:3d:67:25:21:10:5e:03:6c:8c:2c:aa:48:94:
11:36:e3:e6:5a:01:eb:5f:d2:2a:3d:49:be:2b:50:
5e:c0:79:7a:fe:e9:0f:05:cd:7b:13:5e:ff:5c:ba:
58:32:17:38:eb:fc:c0:db:5f:2b:22:bb:17:cb:d7:
c4:3c:7a:83:9e:5f:e2:d1:43:9f:d4:52:f7:be:ee:
e1:a0:a2:69:0a:40:ee:e4:3d:44:11:00:0a:e8:f1:
10:c9:aa:11:9a:b1:bd:9f:97:c7:86:53:5a:fa:d0:
1a:4a:6f:e9:e7:9e:82:d9:03:ba:ca:26:9e:f3:af:
6b:9d:2a:63:db:c1:ec:02:ee:5f:b6:2f:38:bd:76:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:17:5E:78:01:3C:E5:FD:31:04:1C:59:8C:C0:2C:F4:4B:53:F7
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:91:4f:7e:26:77:df:bb:23:d4:60:1a:22:e3:b4:a5:4b:
eb:fb:b7:3b:7c:ab:05:ab:4c:bc:de:a9:54:b9:49:50:69:d6:
1b:7f:64:38:e3:16:81:d6:f7:28:e0:9c:cf:ba:81:ae:8c:21:
38:22:6c:c8:09:70:ba:17:37:2b:1b:de:00:23:1b:f6:cb:df:
dd:be:f5:29:0a:12:1d:50:8d:91:58:fd:1f:b0:7c:8d:ee:54:
0a:f8:c2:b7:ce:f5:47:16:fe:47:33:28:a5:de:2e:e0:31:7e:
fa:36:fa:e2:ca:51:04:8d:a5:90:67:64:1a:55:1d:fb:46:d8:
09:a6:8d:6c:61:3a:8b:e6:4f:ee:6a:1d:aa:00:8b:60:cb:cc:
9a:17:9f:c7:59:a1:8e:c8:16:bb:42:1f:5d:5d:d2:96:47:14:
ca:0f:1a:b2:03:70:76:08:66:f0:e6:f7:ff:dd:1b:bf:71:36:
e5:d3:21:bf:7f:a8:25:46:ef:3f:30:52:27:f0:41:48:cb:79:
63:f0:a0:74:58:49:cd:ec:7c:b2:61:11:36:50:1f:4e:f0:b7:
16:fc:fb:40:a6:ab:8c:39:d9:85:12:2b:85:77:1c:11:0c:80:
7d:b1:22:0a:04:20:88:3f:7e:51:07:36:d5:3b:b3:02:7b:bc:
a6:60:29:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8cfMT322+Rbh/DkTR1pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh
ZjQ4NjEwHhcNMjYwMzI1MTcwMTM1WhcNMjYwMzI2MTcwMTM1WjAzMTEwLwYDVQQD
EygwODk2MTc1ZTc4MDEzY2U1ZmQzMTA0MWM1OThjYzAyY2Y0NGI1M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYcd6jRGCh65fLXCHdcRA+jQy428
LwVCYZJnZ15b+EgzYOnqKg3KJ03FCuUxL+xSvPkRfjTNCBUKXfgFvTGJak5hKetQ
8fKgGR27n+2VYvltsrOXZHP/2ttWAFgnYwpjSCbBDVEhvEb56fLrlkHs9UaUeB6S
eJ9ZAD1nJSEQXgNsjCyqSJQRNuPmWgHrX9IqPUm+K1BewHl6/ukPBc17E17/XLpY
Mhc46/zA218rIrsXy9fEPHqDnl/i0UOf1FL3vu7hoKJpCkDu5D1EEQAK6PEQyaoR
mrG9n5fHhlNa+tAaSm/p556C2QO6yiae869rnSpj28HsAu5fti84vXZbOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiWF154ATzl/TEEHFmMwCz0S1P3MB8GA1UdIwQY
MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt
MTg0NTg2NjAyODg3LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3
LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnduRT34m
d9+7I9RgGiLjtKVL6/u3O3yrBatMvN6pVLlJUGnWG39kOOMWgdb3KOCcz7qBrowh
OCJsyAlwuhc3KxveACMb9svf3b71KQoSHVCNkVj9H7B8je5UCvjCt871Rxb+RzMo
pd4u4DF++jb64spRBI2lkGdkGlUd+0bYCaaNbGE6i+ZP7modqgCLYMvMmhefx1mh
jsgWu0IfXV3SlkcUyg8asgNwdghm8Ob3/90bv3E25dMhv3+oJUbvPzBSJ/BBSMt5
Y/CgdFhJzex8smERNlAfTvC3Fvz7QKarjDnZhRIrhXccEQyAfbEiCgQgiD9+UQc2
1TuzAnu8pmApYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:23 2026 by rpki-client