Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
File: iSKxgxmji3UEi7etiaeLo303RcY.mft (raw, json)
Hash identifier: P8L15Mv+Ur2xEhugWof2L1fjfgIn0CR0UEAPuxOGNrQ=
Subject key identifier: B8:71:FF:FC:F5:0E:07:68:0E:2C:3D:1F:5F:27:D4:04:D3:62:63:C7
Authority key identifier: 89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
Certificate issuer: /CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Certificate serial: 019D25F1EB67F32D80EC58C3E70296CA92CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
Manifest number: 86
Signing time: Wed 25 Mar 2026 17:01:44 +0000
Manifest this update: Wed 25 Mar 2026 17:01:44 +0000
Manifest next update: Thu 26 Mar 2026 17:01:44 +0000
Files and hashes: 1: UTmSNHW_h1OEtIHiOMz9m7RdXcQ.asa (hash: 2JMO3R8vQ9ztrTHPM06LK7EXviAp0gW+oBxKpsmJcSY=)
2: iSKxgxmji3UEi7etiaeLo303RcY.crl (hash: bN++QzzL1Y1517qYrRA2lbmTGSERJy1sI1YpoHr/x+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:eb:67:f3:2d:80:ec:58:c3:e7:02:96:ca:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8922b18319a38b75048bb7ad89a78ba37d3745c6
Validity
Not Before: Mar 25 17:01:44 2026 GMT
Not After : Mar 26 17:01:44 2026 GMT
Subject: CN=b871fffcf50e07680e2c3d1f5f27d404d36263c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:48:3a:70:2b:ba:e5:dc:ee:84:bf:cd:a6:
a7:eb:59:29:17:6a:c9:a5:cc:2c:4d:5f:78:74:84:
88:f7:11:fc:79:6f:c3:ae:85:dd:be:da:7d:20:6d:
b7:55:b8:f1:1a:b7:7d:b8:03:61:93:97:30:dc:e2:
b2:ee:30:06:54:14:9c:14:cd:a1:46:32:fa:07:61:
0d:e9:02:e7:5b:84:b3:0b:38:08:db:a8:1f:f2:32:
67:5e:9c:24:98:7b:9c:62:1c:88:c4:b7:30:7a:83:
f4:4b:9d:e2:61:6a:a4:5f:9e:ea:40:2f:cf:75:56:
fd:82:cc:00:81:af:96:fd:be:49:08:66:ce:61:22:
f8:75:f5:c5:7e:06:5a:0b:59:8c:1d:a5:b9:d8:15:
00:64:9d:5a:f4:a7:09:94:5f:c0:d4:6a:59:5d:4f:
f7:24:32:1d:72:0f:26:66:22:e6:32:4c:92:6b:76:
b4:31:59:35:36:21:56:61:70:0e:b5:72:f4:a0:b8:
7f:9d:01:65:20:43:ce:7a:0e:6b:8e:7a:b2:db:c6:
57:64:e0:56:b5:57:f2:8d:d8:7e:f4:4e:5d:98:0b:
cd:f3:4e:1d:eb:0d:02:03:03:7c:ee:1e:8e:0b:df:
cb:95:84:65:ff:cc:4e:0f:d5:9c:ce:11:65:6f:7e:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:FF:FC:F5:0E:07:68:0E:2C:3D:1F:5F:27:D4:04:D3:62:63:C7
X509v3 Authority Key Identifier:
keyid:89:22:B1:83:19:A3:8B:75:04:8B:B7:AD:89:A7:8B:A3:7D:37:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSKxgxmji3UEi7etiaeLo303RcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6b554b-e6df-41b4-a0d3-bd23ae1ed292/1/iSKxgxmji3UEi7etiaeLo303RcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:be:7e:07:5d:b2:a7:4c:06:e9:ef:a1:6b:bd:f1:f7:bb:16:
1e:b8:74:56:e4:d0:47:d3:7a:e6:07:e1:e7:6e:67:46:c0:84:
16:f9:81:d8:fc:da:0c:70:f5:ef:9e:56:6d:77:c8:f6:6c:b8:
3e:34:4c:7e:dc:dd:f4:67:08:a9:ce:7d:c7:69:3a:ec:4d:e0:
3a:8f:60:03:86:a6:da:9d:bf:bf:3c:9e:2d:b4:1d:4b:2a:bb:
39:55:d5:3d:00:db:28:30:51:cd:6d:bf:f4:fc:6c:c2:5c:31:
8c:ac:e2:bb:f3:26:ab:82:6b:c5:7b:3b:a0:b1:18:3a:7f:26:
fd:94:cc:3d:46:a9:28:54:44:9d:d4:16:07:2a:68:68:e6:57:
15:5f:75:62:b5:d5:1c:02:52:0a:5b:0a:ab:7d:cd:a4:d3:30:
c5:8a:38:b8:8b:4c:8f:36:89:dc:5f:2e:6d:b8:6f:08:b4:fd:
25:ee:f8:44:c2:87:1b:bf:05:cd:e3:1d:7f:f9:c2:5f:15:52:
1f:b5:f0:ff:f9:b9:72:b8:be:e0:b8:65:af:dc:0d:a4:10:17:
18:9d:a8:f0:1e:31:58:ae:89:21:63:31:16:67:90:21:08:99:
91:84:d6:2a:03:8e:a6:0f:12:3e:28:ea:7a:1b:15:72:0a:7a:
81:a5:e5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8etn8y2A7FjD5wKWypLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjJiMTgzMTlhMzhiNzUwNDhiYjdhZDg5YTc4YmEzN2Qz
NzQ1YzYwHhcNMjYwMzI1MTcwMTQ0WhcNMjYwMzI2MTcwMTQ0WjAzMTEwLwYDVQQD
EyhiODcxZmZmY2Y1MGUwNzY4MGUyYzNkMWY1ZjI3ZDQwNGQzNjI2M2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd1IOnAruuXc7oS/zaan61kpF2rJ
pcwsTV94dISI9xH8eW/DroXdvtp9IG23VbjxGrd9uANhk5cw3OKy7jAGVBScFM2h
RjL6B2EN6QLnW4SzCzgI26gf8jJnXpwkmHucYhyIxLcweoP0S53iYWqkX57qQC/P
dVb9gswAga+W/b5JCGbOYSL4dfXFfgZaC1mMHaW52BUAZJ1a9KcJlF/A1GpZXU/3
JDIdcg8mZiLmMkySa3a0MVk1NiFWYXAOtXL0oLh/nQFlIEPOeg5rjnqy28ZXZOBW
tVfyjdh+9E5dmAvN804d6w0CAwN87h6OC9/LlYRl/8xOD9WczhFlb36YKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhx//z1DgdoDiw9H18n1ATTYmPHMB8GA1UdIwQY
MBaAFIkisYMZo4t1BIu3rYmni6N9N0XGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNLeGd4bWppM1VFaTdldGlhZUxvMzAzUmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82YjU1NGItZTZkZi00MWI0LWEwZDMt
YmQyM2FlMWVkMjkyLzEvaVNLeGd4bWppM1VFaTdldGlhZUxvMzAzUmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82YjU1NGItZTZkZi00MWI0LWEwZDMtYmQyM2FlMWVkMjky
LzEvaVNLeGd4bWppM1VFaTdldGlhZUxvMzAzUmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXL5+B12y
p0wG6e+ha73x97sWHrh0VuTQR9N65gfh525nRsCEFvmB2PzaDHD1755WbXfI9my4
PjRMftzd9GcIqc59x2k67E3gOo9gA4am2p2/vzyeLbQdSyq7OVXVPQDbKDBRzW2/
9PxswlwxjKziu/Mmq4JrxXs7oLEYOn8m/ZTMPUapKFREndQWBypoaOZXFV91YrXV
HAJSClsKq33NpNMwxYo4uItMjzaJ3F8ubbhvCLT9Je74RMKHG78FzeMdf/nCXxVS
H7Xw//m5cri+4Lhlr9wNpBAXGJ2o8B4xWK6JIWMxFmeQIQiZkYTWKgOOpg8SPijq
ehsVcgp6gaXlsA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:02 2026 by rpki-client