Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
File: kI7SZXsDRI2ii8JIwvfsSXPabjs.mft (raw, json)
Hash identifier: OwNEvEjhD4iSM4BTuxKPoicXfpb62drr9tVkUiiKwTw=
Subject key identifier: 0B:16:43:E1:D2:C9:CC:92:40:4B:83:F6:A2:91:7F:76:0C:69:04:2A
Authority key identifier: 90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
Certificate issuer: /CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Certificate serial: 019D262829721C1E660BE47ED10C8CBCFCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
Manifest number: 018C
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: EQxEyPQDuCTR078fV9h6v3Km5Cw.roa (hash: Lt5RUH9y8xxH2z3qvvXHmC8kiqcqvY/49BCxeZKNAOc=)
2: kI7SZXsDRI2ii8JIwvfsSXPabjs.crl (hash: wfuHDQhxfXUKH1fnn6ZrlxM6+rnAzarUA3YWmmNmNnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:29:72:1c:1e:66:0b:e4:7e:d1:0c:8c:bc:fc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908ed2657b03448da28bc248c2f7ec4973da6e3b
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=0b1643e1d2c9cc92404b83f6a2917f760c69042a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:e5:60:29:2e:50:b8:23:5e:3e:f3:b8:f9:
34:cc:92:8d:75:05:b5:9e:eb:39:6f:6e:78:7d:4e:
5a:6a:c7:7d:da:b2:80:c6:3d:e7:c1:12:b9:d4:ec:
d6:9a:ad:d3:13:05:54:89:e2:64:05:5b:2d:3a:2c:
e9:d1:84:6d:c5:bf:4b:81:b2:11:18:33:cb:f0:2e:
fb:42:7f:60:52:60:12:d2:56:c7:ef:0b:6d:01:e5:
4e:63:ef:b4:67:b3:0f:e7:e6:7b:01:28:1d:b2:ff:
1f:e9:00:f8:18:63:b9:dd:8e:95:a9:d5:ed:3f:8a:
c4:02:5f:d6:99:b5:cb:ce:7f:8e:f7:e5:0c:80:db:
18:55:5c:bb:19:c1:81:dc:54:58:a1:6f:f1:48:79:
6c:53:cc:00:84:22:e8:04:c2:6b:39:13:89:5a:55:
46:8b:c0:fe:1e:53:b5:67:c6:3b:59:7f:ad:8d:0a:
c4:9a:32:13:75:5c:7a:7c:30:4e:f1:b1:16:5c:b0:
f8:3e:62:b5:7f:42:58:af:60:8d:ff:66:9a:c4:ef:
b2:67:e7:25:77:2f:af:a0:3e:b0:84:14:83:e4:37:
f2:c7:5a:4b:bc:39:c1:0d:6a:40:d6:93:e0:4b:45:
27:a0:1d:c3:ae:bf:16:2d:1e:f3:c9:f4:c4:49:04:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:16:43:E1:D2:C9:CC:92:40:4B:83:F6:A2:91:7F:76:0C:69:04:2A
X509v3 Authority Key Identifier:
keyid:90:8E:D2:65:7B:03:44:8D:A2:8B:C2:48:C2:F7:EC:49:73:DA:6E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI7SZXsDRI2ii8JIwvfsSXPabjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d19549-31b8-4a1e-b6d5-6a17e21ca6c7/1/kI7SZXsDRI2ii8JIwvfsSXPabjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:3d:18:4a:f7:45:63:c4:d3:df:c7:8c:76:81:0a:b4:85:b7:
57:8c:93:bc:36:e0:6e:a2:4d:12:12:91:c4:cb:80:09:7a:ce:
d0:41:5e:de:6c:a3:fb:1f:25:1d:8d:56:0c:c3:5e:dd:4c:e5:
47:73:e8:ff:99:fb:de:20:9f:2d:76:eb:90:39:04:86:2d:ed:
93:b9:83:7f:e6:a6:cb:4f:d8:0e:dd:89:3a:5f:85:5c:eb:78:
04:8a:f1:05:f8:7c:65:20:4e:f0:53:e9:f5:8f:55:d0:75:98:
cd:76:cb:1a:50:03:cb:98:0e:3f:e8:46:02:52:3e:eb:db:4f:
33:9c:9e:a2:68:92:33:bc:d5:1f:fe:57:b1:a7:c5:0e:a6:4d:
4f:66:71:0b:fc:7f:ff:7e:c9:2b:d6:5f:8f:50:58:80:ae:a2:
51:90:f6:79:f7:6c:ab:96:dc:55:2f:58:cb:a5:b9:7e:3c:77:
ad:52:b7:ea:44:46:90:69:ce:9e:37:32:16:45:19:c2:2f:8f:
db:31:33:11:05:cc:a1:6e:3d:8b:c6:63:7b:9b:fe:5b:4f:98:
e5:c2:36:3f:fd:87:cd:4c:4e:29:83:c6:df:68:cc:e8:1c:66:
fe:9d:54:3a:02:ca:ff:d0:1a:79:4a:0c:a9:96:6d:9d:ab:de:
75:73:b4:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKClyHB5mC+R+0QyMvPyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGVkMjY1N2IwMzQ0OGRhMjhiYzI0OGMyZjdlYzQ5NzNk
YTZlM2IwHhcNMjYwMzI1MTgwMDU5WhcNMjYwMzI2MTgwMDU5WjAzMTEwLwYDVQQD
EygwYjE2NDNlMWQyYzljYzkyNDA0YjgzZjZhMjkxN2Y3NjBjNjkwNDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOblYCkuULgjXj7zuPk0zJKNdQW1
nus5b254fU5aasd92rKAxj3nwRK51OzWmq3TEwVUieJkBVstOizp0YRtxb9LgbIR
GDPL8C77Qn9gUmAS0lbH7wttAeVOY++0Z7MP5+Z7ASgdsv8f6QD4GGO53Y6VqdXt
P4rEAl/WmbXLzn+O9+UMgNsYVVy7GcGB3FRYoW/xSHlsU8wAhCLoBMJrOROJWlVG
i8D+HlO1Z8Y7WX+tjQrEmjITdVx6fDBO8bEWXLD4PmK1f0JYr2CN/2aaxO+yZ+cl
dy+voD6whBSD5Dfyx1pLvDnBDWpA1pPgS0UnoB3Drr8WLR7zyfTESQRvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsWQ+HSycySQEuD9qKRf3YMaQQqMB8GA1UdIwQY
MBaAFJCO0mV7A0SNoovCSML37Elz2m47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUt
NmExN2UyMWNhNmM3LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9kMTk1NDktMzFiOC00YTFlLWI2ZDUtNmExN2UyMWNhNmM3
LzEva0k3U1pYc0RSSTJpaThKSXd2ZnNTWFBhYmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz0YSvdF
Y8TT38eMdoEKtIW3V4yTvDbgbqJNEhKRxMuACXrO0EFe3myj+x8lHY1WDMNe3Uzl
R3Po/5n73iCfLXbrkDkEhi3tk7mDf+amy0/YDt2JOl+FXOt4BIrxBfh8ZSBO8FPp
9Y9V0HWYzXbLGlADy5gOP+hGAlI+69tPM5yeomiSM7zVH/5XsafFDqZNT2ZxC/x/
/37JK9Zfj1BYgK6iUZD2efdsq5bcVS9Yy6W5fjx3rVK36kRGkGnOnjcyFkUZwi+P
2zEzEQXMoW49i8Zje5v+W0+Y5cI2P/2HzUxOKYPG32jM6Bxm/p1UOgLK/9AaeUoM
qZZtnavedXO0aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:36:52 2026 by rpki-client