Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.mft (raw, json)
Hash identifier: cckPb/7C3fZ8JYE24d04ELrA5VCTRYHNebcEu5X89ZA=
Subject key identifier: B1:EA:5A:56:D4:1E:59:A9:F1:78:ED:45:AB:83:1C:EB:4E:EE:B5:67
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019D26CCE6F6F90C544163A57AC81C883A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
Manifest number: 186B
Signing time: Wed 25 Mar 2026 21:00:55 +0000
Manifest this update: Wed 25 Mar 2026 21:00:55 +0000
Manifest next update: Thu 26 Mar 2026 21:00:55 +0000
Files and hashes: 1: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (hash: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw=)
2: ifTHhzt_6kn_brkNUCwdvDpfjDM.crl (hash: naKF3vu6DbodRnTg/NTD3xqe4YYPlO26eDgxmjuU3M8=)
3: jCfveam_XFqY1WaoDM8mc53l0-A.roa (hash: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:e6:f6:f9:0c:54:41:63:a5:7a:c8:1c:88:3a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Mar 25 21:00:55 2026 GMT
Not After : Mar 26 21:00:55 2026 GMT
Subject: CN=b1ea5a56d41e59a9f178ed45ab831ceb4eeeb567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:ae:4b:ac:cc:d5:05:85:9d:e5:59:b8:4c:
bd:7b:c1:a0:2d:ae:f1:4b:98:87:21:66:9a:5f:e1:
dd:11:f4:af:a9:fb:53:21:fa:2c:88:77:49:7f:06:
69:20:09:fa:30:61:64:a7:a2:15:07:00:b7:f9:46:
9a:c3:9e:49:e7:76:fe:a4:04:dc:4d:d2:78:d2:65:
56:29:fd:34:31:73:86:bd:61:22:59:a8:9e:bf:c4:
23:fd:79:1d:f3:47:83:28:c2:2d:8a:37:b5:80:b6:
d2:7c:29:61:ed:2d:9a:43:4b:01:d6:28:28:8c:33:
d6:b7:24:7a:7d:4a:ad:97:bb:c2:7f:4b:41:b7:d3:
5c:61:52:11:3c:ba:6f:07:fc:e0:5a:92:b5:99:e0:
48:5d:24:c1:5a:20:47:e0:f2:78:e7:ab:23:97:e5:
ca:7b:66:e8:88:6e:ae:5a:68:34:e5:c9:56:64:04:
c8:3d:39:82:15:7f:15:fd:81:c3:05:b8:5d:99:5f:
35:ff:bc:92:98:77:ef:88:a1:7a:03:0e:b3:af:fa:
50:72:81:dd:35:55:6c:ab:38:a5:33:62:10:8c:80:
c2:3e:9c:07:1f:23:f6:bc:1d:f0:fd:e8:fc:58:59:
b1:02:8e:34:c3:88:2e:1e:e9:b5:8b:45:7a:bb:88:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EA:5A:56:D4:1E:59:A9:F1:78:ED:45:AB:83:1C:EB:4E:EE:B5:67
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cf:06:6f:11:0a:8a:7c:0b:2d:db:ea:d5:36:34:3c:f7:f7:
32:1a:c3:1b:e5:0c:fc:fb:d9:d8:08:cf:cf:89:23:5b:01:1f:
18:48:df:74:d9:d5:e3:08:3f:be:f1:1b:cd:36:30:0d:05:b2:
86:7e:9b:b2:89:0d:ad:8a:8b:35:be:94:31:bb:33:fa:b2:36:
d0:fa:b3:3d:a6:dd:4b:54:f7:e2:77:10:a1:8e:8c:45:2d:33:
a1:8c:f1:a1:ac:ae:df:3b:14:8c:92:f4:44:13:c9:19:85:84:
fd:41:a4:4a:e1:9f:59:6c:50:dc:e6:35:63:65:e7:77:c8:ca:
48:f3:a1:a1:0a:5b:37:f8:bd:ad:eb:0a:bf:f1:e0:29:9d:12:
a8:31:e2:60:76:40:e5:7b:61:1b:e7:cb:ca:2c:4b:c7:7b:27:
46:3f:8f:7c:ad:2c:da:52:4c:0f:69:f2:f8:51:95:9c:2c:af:
f0:77:4e:5c:ab:a3:a4:d3:b3:aa:c3:0a:17:fd:2b:c0:3a:b0:
68:87:6a:c1:aa:55:c7:68:ec:82:92:29:36:ec:fe:e0:bb:32:
db:96:14:30:45:db:94:e4:4b:5e:5d:4c:ed:c2:56:a0:ca:60:
5a:4f:17:78:ab:1a:e7:a8:2c:fc:f9:1b:07:88:dd:fa:9a:82:
8e:1c:e2:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzOb2+QxUQWOlesgciDp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1
ZjhjMzMwHhcNMjYwMzI1MjEwMDU1WhcNMjYwMzI2MjEwMDU1WjAzMTEwLwYDVQQD
EyhiMWVhNWE1NmQ0MWU1OWE5ZjE3OGVkNDVhYjgzMWNlYjRlZWViNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5CuS6zM1QWFneVZuEy9e8GgLa7x
S5iHIWaaX+HdEfSvqftTIfosiHdJfwZpIAn6MGFkp6IVBwC3+Uaaw55J53b+pATc
TdJ40mVWKf00MXOGvWEiWaiev8Qj/Xkd80eDKMItije1gLbSfClh7S2aQ0sB1igo
jDPWtyR6fUqtl7vCf0tBt9NcYVIRPLpvB/zgWpK1meBIXSTBWiBH4PJ456sjl+XK
e2boiG6uWmg05clWZATIPTmCFX8V/YHDBbhdmV81/7ySmHfviKF6Aw6zr/pQcoHd
NVVsqzilM2IQjIDCPpwHHyP2vB3w/ej8WFmxAo40w4guHum1i0V6u4g0qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHqWlbUHlmp8XjtRauDHOtO7rVnMB8GA1UdIwQY
MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt
YmM1MTdlMTIxZDU0LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0
LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoc8GbxEK
inwLLdvq1TY0PPf3MhrDG+UM/PvZ2AjPz4kjWwEfGEjfdNnV4wg/vvEbzTYwDQWy
hn6bsokNrYqLNb6UMbsz+rI20PqzPabdS1T34ncQoY6MRS0zoYzxoayu3zsUjJL0
RBPJGYWE/UGkSuGfWWxQ3OY1Y2Xnd8jKSPOhoQpbN/i9resKv/HgKZ0SqDHiYHZA
5XthG+fLyixLx3snRj+PfK0s2lJMD2ny+FGVnCyv8HdOXKujpNOzqsMKF/0rwDqw
aIdqwapVx2jsgpIpNuz+4Lsy25YUMEXblORLXl1M7cJWoMpgWk8XeKsa56gs/Pkb
B4jd+pqCjhziWw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:19 2026 by rpki-client