Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: zcvr5WqCKsNNnajSfwAqQulIPjAS8bmXEPtWuS19Bd0=
Subject key identifier: 35:EE:B2:A2:DF:8B:70:7E:69:05:2E:3D:AF:EC:D0:22:DF:0D:14:04
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019D284E141B08B6F5086D795C4566A563DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 114D
Signing time: Thu 26 Mar 2026 04:01:38 +0000
Manifest this update: Thu 26 Mar 2026 04:01:38 +0000
Manifest next update: Fri 27 Mar 2026 04:01:38 +0000
Files and hashes: 1: 8mKhApHYp_839P6yQXD0oAwm2qo.roa (hash: dEUbCXMVw9xAIsh0W5Y8ji1NQ46062f5dJUppcXKzCY=)
2: C3xZ11UfhI0GeWTbExlimKS-cZs.roa (hash: xhykIG9PAX9cR5qhXwtefG/7lrssloObCNE0+5PnTIg=)
3: ZQHzJnKmGMmYQF_x6i-pgoB3otk.roa (hash: y+ugl+hZqb559F4FeCaZ0WayeCgZERvzHW8L8s5FBBo=)
4: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: Dh5HFBkyJxZlL6rp+LbkhMqNzsCnedZw7VHQxBUMxoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:14:1b:08:b6:f5:08:6d:79:5c:45:66:a5:63:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Mar 26 04:01:38 2026 GMT
Not After : Mar 27 04:01:38 2026 GMT
Subject: CN=35eeb2a2df8b707e69052e3dafecd022df0d1404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:e7:e2:ff:4f:35:31:dd:12:5c:15:ba:cb:
70:28:b2:6b:cd:01:c6:5c:e6:2c:c7:2a:90:5e:4d:
d0:aa:08:88:18:b9:43:18:20:38:4a:6f:61:d7:25:
18:5a:8b:3f:b8:ef:47:34:ee:44:70:d1:29:90:84:
67:84:48:05:78:4e:72:f3:25:fb:98:0d:f5:b6:95:
8a:82:f0:68:3e:56:e6:73:f6:13:8e:3b:b2:70:9a:
8c:aa:62:55:0d:96:e5:76:7d:f9:09:27:fe:35:20:
dd:89:f5:aa:81:19:3b:ed:0e:64:cc:0d:54:0e:b1:
cb:01:68:47:52:6f:75:88:2c:a4:e4:2d:a2:60:54:
bd:06:17:31:67:29:30:23:cf:9f:4b:25:58:b3:d7:
aa:bb:9e:6f:e4:92:20:c1:d7:bf:18:aa:97:ba:37:
b2:4b:16:c0:1a:7c:81:10:5b:16:69:53:ea:45:e9:
45:9a:da:c9:d3:88:8e:c7:ed:42:b5:41:11:c6:06:
98:7d:24:53:ab:7f:be:bd:38:c4:ce:e0:27:1a:27:
b0:c1:9d:63:fa:34:1d:e3:6e:4f:86:a3:1d:60:45:
59:2c:a1:03:fa:7c:d8:15:10:b4:dc:c4:7a:ea:62:
39:f6:86:09:a8:e2:a3:db:fd:e5:ef:94:6d:f0:6d:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EE:B2:A2:DF:8B:70:7E:69:05:2E:3D:AF:EC:D0:22:DF:0D:14:04
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:d7:00:4b:9b:c2:18:49:bf:33:0d:38:a1:79:7a:bc:d9:
86:29:a7:c5:56:8e:83:49:8e:66:d2:f6:bf:87:80:25:23:5f:
a6:ae:7e:83:5f:a2:6f:8a:c0:30:bf:20:bd:6f:f7:7a:5d:22:
22:60:2a:cb:13:23:41:eb:b0:cd:33:7f:36:b7:b6:40:71:3c:
ea:4f:a7:6a:0f:19:59:ab:ed:92:af:89:bb:b4:a3:8a:0a:5f:
30:3b:92:b0:3f:27:7a:ff:5b:aa:25:ea:ed:10:46:0f:c9:a8:
19:b2:4c:fa:b8:0c:7c:c0:92:45:44:92:94:a9:07:a6:93:3f:
63:59:e2:4f:91:07:26:ea:9f:4d:bb:65:05:07:0f:4e:b4:8b:
1c:34:63:44:c6:30:d5:46:ad:c2:09:3d:79:61:68:23:4b:a0:
bc:aa:41:ff:d7:ba:fe:3b:87:8d:c8:ce:66:42:9f:ff:be:90:
09:ec:97:ae:52:f4:07:1d:74:28:1a:6b:b6:03:63:b6:53:30:
f5:8c:cc:1d:9a:09:15:8f:d3:02:b7:d0:3e:a2:51:1c:f4:e8:
a1:77:68:30:c6:4a:04:9d:c1:ce:ca:1c:86:4d:56:16:b2:ed:
a2:e9:34:67:9c:d1:6c:5b:07:f3:8c:52:68:63:1a:42:2f:e4:
93:71:3d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThQbCLb1CG15XEVmpWPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWJkMTQwMjkyNGVjMmE2NDRlOGY1NGU2OTk0Y2I0YWM4
ZTI0YTYwHhcNMjYwMzI2MDQwMTM4WhcNMjYwMzI3MDQwMTM4WjAzMTEwLwYDVQQD
EygzNWVlYjJhMmRmOGI3MDdlNjkwNTJlM2RhZmVjZDAyMmRmMGQxNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2bn4v9PNTHdElwVustwKLJrzQHG
XOYsxyqQXk3QqgiIGLlDGCA4Sm9h1yUYWos/uO9HNO5EcNEpkIRnhEgFeE5y8yX7
mA31tpWKgvBoPlbmc/YTjjuycJqMqmJVDZbldn35CSf+NSDdifWqgRk77Q5kzA1U
DrHLAWhHUm91iCyk5C2iYFS9BhcxZykwI8+fSyVYs9equ55v5JIgwde/GKqXujey
SxbAGnyBEFsWaVPqRelFmtrJ04iOx+1CtUERxgaYfSRTq3++vTjEzuAnGiewwZ1j
+jQd425PhqMdYEVZLKED+nzYFRC03MR66mI59oYJqOKj2/3l75Rt8G3yhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXusqLfi3B+aQUuPa/s0CLfDRQEMB8GA1UdIwQY
MBaAFIgb0UApJOwqZE6PVOaZTLSsjiSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMt
N2EwYjE0NWNmNjJiLzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kY2QzYjctN2NjMC00YzQ5LWJhYjMtN2EwYjE0NWNmNjJi
LzEvaUJ2UlFDa2s3Q3BrVG85VTVwbE10S3lPSktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5/XAEub
whhJvzMNOKF5erzZhimnxVaOg0mOZtL2v4eAJSNfpq5+g1+ib4rAML8gvW/3el0i
ImAqyxMjQeuwzTN/Nre2QHE86k+nag8ZWavtkq+Ju7SjigpfMDuSsD8nev9bqiXq
7RBGD8moGbJM+rgMfMCSRUSSlKkHppM/Y1niT5EHJuqfTbtlBQcPTrSLHDRjRMYw
1Uatwgk9eWFoI0ugvKpB/9e6/juHjcjOZkKf/76QCeyXrlL0Bx10KBprtgNjtlMw
9YzMHZoJFY/TArfQPqJRHPTooXdoMMZKBJ3Bzsochk1WFrLtouk0Z5zRbFsH84xS
aGMaQi/kk3E9rw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:16 2026 by rpki-client