Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: xZWSVu7v9BAh8ge3ITqYir1YjpUctHNsYsrKSQXGLMA=
Subject key identifier: AA:DA:65:B6:16:5B:EE:AF:5B:18:C3:FE:F0:BA:EF:DE:CE:C0:C0:0A
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 019D26281F6ABD6492237B833FDB5BA03C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 18:00:56 +0000
Manifest this update: Wed 25 Mar 2026 18:00:56 +0000
Manifest next update: Thu 26 Mar 2026 18:00:56 +0000
Files and hashes: 1: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: jYZo/P6KksI2vCzRwe/qcNt9S71jc31LWhkOTmKiFnk=)
2: mY4Ps2ODyoJOR0xKvF6KJHBSMik.roa (hash: UmvKuUUkINXoOW+jyUXuOgnlOY9eMq6JudtGUkNm/Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1f:6a:bd:64:92:23:7b:83:3f:db:5b:a0:3c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Mar 25 18:00:56 2026 GMT
Not After : Mar 26 18:00:56 2026 GMT
Subject: CN=aada65b6165beeaf5b18c3fef0baefdecec0c00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:0e:c7:bd:fa:3b:14:b5:db:3c:89:78:8a:
4a:38:28:6a:00:af:f6:ff:8a:67:8d:4b:1f:2f:7d:
19:3a:d0:b6:f2:6b:69:ea:05:ea:70:4b:88:0e:f3:
16:10:64:d9:d8:dd:08:93:a7:07:7b:9d:4b:1c:c0:
31:7c:aa:ad:03:8a:57:83:0a:95:97:5d:74:8f:f1:
fc:53:60:d5:ff:cf:cf:85:94:f1:c9:60:4e:aa:e7:
87:43:4d:c2:98:36:06:43:6d:03:a3:52:48:74:17:
33:52:74:d4:9c:d6:a8:c1:ab:d1:d4:37:dd:3a:d4:
78:54:c2:ce:e9:34:cc:71:85:2f:46:61:9a:7e:81:
25:33:c4:7d:6f:2c:e4:49:c0:32:24:e6:c7:4f:33:
e9:29:6f:29:3e:65:ef:8f:3f:e4:84:d7:63:e8:96:
1e:43:c6:84:26:12:52:7b:05:cc:00:81:fa:dd:4f:
65:d3:8b:84:5f:f7:e2:65:38:73:ca:12:6a:b1:0e:
6a:ee:63:5f:bc:39:ce:d6:0d:6b:df:fc:5b:5c:87:
32:9b:37:6f:26:5e:5f:61:f8:de:64:0d:65:0a:84:
21:f1:c6:69:f0:ad:27:de:05:84:7b:15:0b:43:30:
01:70:05:ee:54:29:50:33:26:0d:40:7f:cf:b2:4f:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DA:65:B6:16:5B:EE:AF:5B:18:C3:FE:F0:BA:EF:DE:CE:C0:C0:0A
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c5:22:ac:41:4a:8e:64:e8:41:c3:ec:41:0d:00:27:a3:e1:
0d:93:51:02:13:e2:2f:db:31:9a:c3:e0:f1:6c:ea:e2:9e:7b:
5f:f2:1f:b6:0c:68:5c:bd:62:50:91:f4:1d:1b:98:b9:71:38:
b5:43:b6:d4:d5:52:6e:30:da:6f:ba:92:f5:9f:1d:14:82:83:
9f:e2:96:f5:a0:43:87:eb:5c:30:6e:e6:a6:4d:b9:7c:5e:bc:
63:24:f9:61:bf:be:ed:3d:bf:39:a8:0b:cd:e8:0f:51:0d:e4:
5f:01:91:55:16:d2:1e:fd:c6:42:0c:dd:47:2a:54:44:63:0f:
c5:58:9e:1d:4f:ef:bb:2f:e5:7d:42:a2:98:96:74:18:c5:c3:
7e:fd:81:0b:4a:61:80:c4:d4:28:64:59:8d:9a:65:e3:48:50:
f4:70:ed:35:07:6d:a7:65:57:15:ad:50:f0:29:7c:1b:f8:fa:
77:8e:e3:1b:89:94:ec:cd:46:a8:a7:e1:20:dc:c4:ad:1c:cd:
3e:c4:17:6c:77:5b:e3:df:c4:5a:e0:81:be:f7:7b:d0:be:73:
41:45:94:39:7d:2d:f8:ae:92:fa:42:e4:ad:7b:0b:6d:7e:ac:
ae:08:8b:c7:dc:9b:b5:ca:4d:9b:89:2f:f9:12:db:73:a5:cc:
26:e3:ed:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKB9qvWSSI3uDP9tboDwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzZiZDhmYWQzOTNlNTEzMWEwMjM3MjkzMTViMzU2MDE0
ZTY2MzcwHhcNMjYwMzI1MTgwMDU2WhcNMjYwMzI2MTgwMDU2WjAzMTEwLwYDVQQD
EyhhYWRhNjViNjE2NWJlZWFmNWIxOGMzZmVmMGJhZWZkZWNlYzBjMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uEOx736OxS12zyJeIpKOChqAK/2
/4pnjUsfL30ZOtC28mtp6gXqcEuIDvMWEGTZ2N0Ik6cHe51LHMAxfKqtA4pXgwqV
l110j/H8U2DV/8/PhZTxyWBOqueHQ03CmDYGQ20Do1JIdBczUnTUnNaowavR1Dfd
OtR4VMLO6TTMcYUvRmGafoElM8R9byzkScAyJObHTzPpKW8pPmXvjz/khNdj6JYe
Q8aEJhJSewXMAIH63U9l04uEX/fiZThzyhJqsQ5q7mNfvDnO1g1r3/xbXIcymzdv
Jl5fYfjeZA1lCoQh8cZp8K0n3gWEexULQzABcAXuVClQMyYNQH/Psk/DnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKraZbYWW+6vWxjD/vC6797OwMAKMB8GA1UdIwQY
MBaAFIg2vY+tOT5RMaAjcpMVs1YBTmY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzIt
MTJmOWNiMGEyMTE4LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xMjlhNWItYjdmNi00OWQwLTk1YzItMTJmOWNiMGEyMTE4
LzEvaURhOWo2MDVQbEV4b0NOeWt4V3pWZ0ZPWmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScUirEFK
jmToQcPsQQ0AJ6PhDZNRAhPiL9sxmsPg8Wzq4p57X/IftgxoXL1iUJH0HRuYuXE4
tUO21NVSbjDab7qS9Z8dFIKDn+KW9aBDh+tcMG7mpk25fF68YyT5Yb++7T2/OagL
zegPUQ3kXwGRVRbSHv3GQgzdRypURGMPxVieHU/vuy/lfUKimJZ0GMXDfv2BC0ph
gMTUKGRZjZpl40hQ9HDtNQdtp2VXFa1Q8Cl8G/j6d47jG4mU7M1GqKfhINzErRzN
PsQXbHdb49/EWuCBvvd70L5zQUWUOX0t+K6S+kLkrXsLbX6srgiLx9ybtcpNm4kv
+RLbc6XMJuPtDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:23 2026 by rpki-client