Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: yhE8u/BIlUw9QbUkTP8ILzZfRnkgO/2GKNNKeMqYLVY=
Subject key identifier: 06:B6:46:0B:DB:42:B4:AA:36:28:1F:6A:34:BB:29:51:63:64:A6:5C
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 019D37C01973717615DC341FDCF871D9422C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: 7Zy43octt9nYqMwVy63Q6ywVaXJnFcKvSplhlIF3a/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:19:73:71:76:15:dc:34:1f:dc:f8:71:d9:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=06b6460bdb42b4aa36281f6a34bb29516364a65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:db:e3:b5:be:3f:11:ce:44:c9:5d:27:d5:
eb:68:2f:12:e3:30:33:7d:de:4e:c5:00:d9:be:3a:
1e:f4:bb:13:ee:8d:02:8f:7a:d7:7c:7f:01:d9:4b:
82:25:e4:40:56:5f:5a:b5:2b:ea:e5:69:47:ba:af:
ff:21:ed:9e:09:64:ac:7d:b9:47:35:32:89:00:c1:
eb:7c:10:ad:e7:49:92:2c:ec:20:b0:b0:55:37:e2:
c4:a7:e9:2e:ec:98:12:93:e3:0a:ac:ce:03:92:a9:
d5:96:58:fb:bf:b5:43:ad:bc:96:e4:99:6c:09:2f:
bf:16:87:88:4c:27:8c:ff:1b:e0:82:8f:7e:c8:c5:
ac:93:46:ca:55:f0:e3:8a:e4:aa:16:26:e3:dd:30:
e1:06:69:d8:f0:44:6a:61:32:a5:64:de:26:0b:92:
76:08:c4:22:dc:5d:1b:db:25:a0:80:45:8b:42:f9:
4f:f3:9b:7d:8d:1b:21:d7:0d:8f:a8:4d:c5:a8:f0:
3c:86:10:2a:4b:1b:28:a5:26:62:9f:8e:50:96:39:
e3:d9:f4:a3:b8:42:15:42:fd:98:f2:59:2e:1d:7b:
66:3f:05:47:c1:6e:bb:bc:ba:ca:ae:f3:7f:91:98:
81:ed:40:cc:04:8a:ff:72:75:d4:e5:d7:3d:2a:3d:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B6:46:0B:DB:42:B4:AA:36:28:1F:6A:34:BB:29:51:63:64:A6:5C
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:87:3a:7d:b9:e3:a1:0f:3f:68:9a:98:2c:ec:d7:23:3f:06:
7b:66:26:cc:28:89:e4:67:f0:cd:f1:67:cd:0e:62:65:92:d3:
a2:9b:2a:f2:e0:85:6b:88:15:bc:de:3c:c2:ab:5d:30:71:b5:
89:29:56:3f:79:57:c7:ff:8c:96:24:b5:81:05:da:9c:e1:a5:
97:11:08:8e:43:f0:1b:5d:98:19:e6:cb:68:c7:d8:72:2b:91:
e6:a6:7d:10:de:27:4e:eb:89:3b:c7:39:82:7c:7b:d2:81:83:
f7:63:17:53:9c:08:b5:63:40:c0:d7:70:5a:7e:a7:e6:7a:ed:
58:f5:95:27:ce:cf:2c:63:a8:08:a1:c6:97:e8:fa:b0:16:68:
74:59:c4:d3:c4:e2:18:66:70:64:40:55:41:25:22:4d:db:df:
6e:b5:4b:18:ae:34:ae:49:3a:fe:a5:db:5e:27:e0:ff:98:25:
13:e3:38:2b:64:e8:89:09:8d:19:bf:e0:22:53:b7:21:50:e9:
46:0f:a3:23:79:e2:fc:88:d5:e4:3e:7b:f1:5f:4a:0f:a3:34:
5d:d2:77:75:4b:a8:2b:1f:4e:ef:70:d0:0b:b1:11:d1:cc:56:
e7:85:97:bb:55:62:fa:17:b7:de:d3:d6:e5:80:02:f9:e7:30:
67:ea:ea:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wBlzcXYV3DQf3Phx2UIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjg5ZjU3ZDA3Mjg0OWUwY2FiMjE5NWNkMGJhZjI1NTc5
MzVlYTAwHhcNMjYwMzI5MDQwMDI5WhcNMjYwMzMwMDQwMDI5WjAzMTEwLwYDVQQD
EygwNmI2NDYwYmRiNDJiNGFhMzYyODFmNmEzNGJiMjk1MTYzNjRhNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymHb47W+PxHORMldJ9XraC8S4zAz
fd5OxQDZvjoe9LsT7o0Cj3rXfH8B2UuCJeRAVl9atSvq5WlHuq//Ie2eCWSsfblH
NTKJAMHrfBCt50mSLOwgsLBVN+LEp+ku7JgSk+MKrM4DkqnVllj7v7VDrbyW5Jls
CS+/FoeITCeM/xvggo9+yMWsk0bKVfDjiuSqFibj3TDhBmnY8ERqYTKlZN4mC5J2
CMQi3F0b2yWggEWLQvlP85t9jRsh1w2PqE3FqPA8hhAqSxsopSZin45Qljnj2fSj
uEIVQv2Y8lkuHXtmPwVHwW67vLrKrvN/kZiB7UDMBIr/cnXU5dc9Kj3u4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa2RgvbQrSqNigfajS7KVFjZKZcMB8GA1UdIwQY
MBaAFCP4n1fQcoSeDKshlc0LryVXk16gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTIt
MmVhNmY1ZWZiMjdmLzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTItMmVhNmY1ZWZiMjdm
LzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIc6fbnj
oQ8/aJqYLOzXIz8Ge2YmzCiJ5GfwzfFnzQ5iZZLTopsq8uCFa4gVvN48wqtdMHG1
iSlWP3lXx/+MliS1gQXanOGllxEIjkPwG12YGebLaMfYciuR5qZ9EN4nTuuJO8c5
gnx70oGD92MXU5wItWNAwNdwWn6n5nrtWPWVJ87PLGOoCKHGl+j6sBZodFnE08Ti
GGZwZEBVQSUiTdvfbrVLGK40rkk6/qXbXifg/5glE+M4K2ToiQmNGb/gIlO3IVDp
Rg+jI3ni/IjV5D578V9KD6M0XdJ3dUuoKx9O73DQC7ER0cxW54WXu1Vi+he33tPW
5YAC+ecwZ+rqXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:24 2026 by rpki-client