Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: 2HwcOB8tpiwzLTYdMQxFkxGMZoQMqKTUouNZLFpjbv8=
Subject key identifier: 99:0D:AA:B7:7E:1D:F2:11:13:96:15:AF:9B:36:30:63:76:42:56:51
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 019D27E07F8A46F405B6CFEE028AEA9DE34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0DB0
Signing time: Thu 26 Mar 2026 02:01:57 +0000
Manifest this update: Thu 26 Mar 2026 02:01:57 +0000
Manifest next update: Fri 27 Mar 2026 02:01:57 +0000
Files and hashes: 1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: xsLJPAbOhxPbDmaeED5slLr1Ff4HEKo2X2oMFRkkAPw=)
3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7f:8a:46:f4:05:b6:cf:ee:02:8a:ea:9d:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Mar 26 02:01:57 2026 GMT
Not After : Mar 27 02:01:57 2026 GMT
Subject: CN=990daab77e1df211139615af9b36306376425651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:d5:47:55:75:8c:36:85:94:6f:11:7f:35:
cc:9e:b3:95:5a:85:ae:2f:08:09:38:fa:ad:ec:fb:
34:56:d7:1f:1b:be:eb:af:41:4f:80:47:4f:2e:8b:
b6:c8:12:ff:4c:8c:b2:7a:a8:e1:bc:89:45:c7:00:
fa:22:67:a7:51:05:31:ed:50:88:d8:e3:69:95:8a:
c3:b6:b8:a1:a8:e2:c3:3a:db:45:7b:ab:d3:9e:5e:
df:1c:79:2a:e6:38:a9:d2:22:d4:5d:bf:ee:07:e6:
10:4d:65:d6:f6:93:e5:88:bf:06:23:88:8d:d4:69:
0f:d3:e9:99:45:a0:80:a3:5b:c2:5a:b2:ad:df:b4:
03:3f:2c:82:2f:cc:f1:8c:ec:a2:af:ab:25:7e:08:
dc:61:50:2f:5f:4d:bd:be:ea:57:bf:21:f7:0f:d3:
6e:83:78:19:42:f4:10:e3:60:4b:d3:60:15:dc:1a:
07:91:8b:79:c9:f6:60:6b:89:d7:00:e0:ce:b6:ee:
d7:5e:37:0c:66:77:63:4f:8e:65:64:8a:b0:e2:ae:
ac:b9:5a:4b:b8:ef:6b:a6:30:8b:08:13:8e:80:b8:
35:1c:1b:c2:ea:97:4c:bd:8c:7c:1b:3c:f0:f5:db:
d8:ef:09:91:e8:1a:ff:94:7e:9a:31:04:5c:01:44:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:AA:B7:7E:1D:F2:11:13:96:15:AF:9B:36:30:63:76:42:56:51
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c4:12:64:da:d8:e3:6d:3e:c7:6e:5f:6b:13:c3:50:3e:e4:
11:4c:c3:c1:d8:2b:f9:6e:69:52:b8:99:c0:ae:8c:bc:22:7e:
0e:08:0b:8d:cb:b9:34:fd:93:14:a2:e2:cb:2a:80:3a:b5:1d:
bf:2e:bb:b6:4c:89:be:6d:d7:63:ef:34:59:f8:d9:84:46:09:
43:20:65:2b:46:c1:33:8c:82:52:f2:f6:30:59:e4:1a:48:cc:
15:ca:6c:45:66:7b:48:51:c5:f5:1c:03:aa:a4:3a:85:c2:0e:
ea:07:62:58:9b:02:b7:50:04:ad:61:fd:1f:86:54:09:87:9f:
e4:35:02:e5:4a:b1:80:fe:6a:d4:a9:60:0a:f0:10:63:79:02:
86:ed:5c:f2:dd:10:3d:a5:19:fb:63:60:1f:cc:03:04:9a:77:
c7:c9:28:f6:dc:b7:cf:de:27:b5:3b:95:d3:0d:2c:ed:6d:43:
49:7a:9f:80:0b:3d:dc:db:3d:f6:b5:56:9a:ea:e9:05:5f:e8:
c4:22:1d:54:8f:df:99:f8:3b:ca:38:bd:75:2d:2c:67:ff:13:
24:19:c3:e1:e4:cb:32:a1:f6:6b:15:56:35:ee:a1:83:77:a5:
81:2c:e6:43:fa:13:da:ed:25:0d:e5:d8:3b:da:f0:03:51:b9:
02:7e:84:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4H+KRvQFts/uAorqneNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTU0NzgwZGIyNWIyNDNjMGEyZDM2MTk3OWIxMzBhN2Yx
M2M2MGQwHhcNMjYwMzI2MDIwMTU3WhcNMjYwMzI3MDIwMTU3WjAzMTEwLwYDVQQD
Eyg5OTBkYWFiNzdlMWRmMjExMTM5NjE1YWY5YjM2MzA2Mzc2NDI1NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo/VR1V1jDaFlG8RfzXMnrOVWoWu
LwgJOPqt7Ps0VtcfG77rr0FPgEdPLou2yBL/TIyyeqjhvIlFxwD6ImenUQUx7VCI
2ONplYrDtrihqOLDOttFe6vTnl7fHHkq5jip0iLUXb/uB+YQTWXW9pPliL8GI4iN
1GkP0+mZRaCAo1vCWrKt37QDPyyCL8zxjOyir6slfgjcYVAvX029vupXvyH3D9Nu
g3gZQvQQ42BL02AV3BoHkYt5yfZga4nXAODOtu7XXjcMZndjT45lZIqw4q6suVpL
uO9rpjCLCBOOgLg1HBvC6pdMvYx8Gzzw9dvY7wmR6Br/lH6aMQRcAUSdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkNqrd+HfIRE5YVr5s2MGN2QlZRMB8GA1UdIwQY
MBaAFIlVR4DbJbJDwKLTYZebEwp/E8YNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGIt
ZGJhNGM5Yjg3MDZiLzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zZTIwNzctYmMxMC00NjIxLWFiMGItZGJhNGM5Yjg3MDZi
LzEvaVZWSGdOc2xza1BBb3ROaGw1c1RDbjhUeGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcQSZNrY
420+x25faxPDUD7kEUzDwdgr+W5pUriZwK6MvCJ+DggLjcu5NP2TFKLiyyqAOrUd
vy67tkyJvm3XY+80WfjZhEYJQyBlK0bBM4yCUvL2MFnkGkjMFcpsRWZ7SFHF9RwD
qqQ6hcIO6gdiWJsCt1AErWH9H4ZUCYef5DUC5UqxgP5q1KlgCvAQY3kChu1c8t0Q
PaUZ+2NgH8wDBJp3x8ko9ty3z94ntTuV0w0s7W1DSXqfgAs93Ns99rVWmurpBV/o
xCIdVI/fmfg7yji9dS0sZ/8TJBnD4eTLMqH2axVWNe6hg3elgSzmQ/oT2u0lDeXY
O9rwA1G5An6Elw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:09 2026 by rpki-client