Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File: iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier: wN7REzgTWOOee/VR3QIKBkPLDzY4eBEeq+egrMOK4SU=
Subject key identifier: B8:C7:58:99:D4:FA:67:DC:21:31:3B:55:03:AB:52:09:2B:EC:90:CE
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial: 019D3909A82FE29590B3B4E6F6B9BE6251CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number: 0577
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: 8DVQ-9ugCgky3pnqMNoEBWadgvs.roa (hash: 3usiPYnmDDCd45PFwwCGuxvoOoTqgdlnQ1RDqdrxlXg=)
2: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: QQWaWYvE6vjGh5HMek7Cz53/5Tw0Wcllq873bbpiO04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a8:2f:e2:95:90:b3:b4:e6:f6:b9:be:62:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=b8c75899d4fa67dc21313b5503ab52092bec90ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:8a:ab:fc:53:4b:fa:f9:62:61:b9:39:89:
b9:07:82:74:cc:c2:2c:b4:15:a0:ac:fe:90:f8:ff:
95:a2:7f:b0:fc:45:f4:fd:94:91:25:05:7d:5e:c5:
04:12:08:53:07:09:08:21:3c:b7:44:05:30:1f:16:
7b:57:31:55:82:1b:6f:99:38:e4:bc:b4:67:f6:97:
3d:b7:2b:c5:b3:3d:b8:1f:61:a2:44:0a:e8:d4:85:
b5:4d:67:1e:c0:f0:e5:a7:ce:78:92:45:4a:24:b3:
da:3d:01:e7:0c:cf:c2:ba:36:ba:77:75:8b:7d:9e:
1f:97:52:95:d6:ce:cc:8e:7f:ad:88:43:ce:e9:e7:
54:8b:37:27:35:b5:4d:9f:8d:07:03:83:04:6d:4c:
66:83:bd:05:e1:ba:d4:e2:b9:c1:0a:eb:b6:14:f9:
70:ce:b6:d7:f8:89:9d:bc:8b:b0:7b:ca:63:0c:21:
50:6e:d8:d1:95:cf:2b:cd:7f:05:b1:55:5f:9c:02:
b3:78:7e:f7:d7:e7:d9:f3:f5:92:eb:e4:fb:95:58:
22:e5:b6:f7:e8:89:19:00:39:17:0f:9d:d8:6a:d9:
70:ab:cb:8a:db:44:42:b0:b2:11:ce:b8:65:e3:95:
1a:ba:3a:53:b8:27:4e:a5:b6:5a:20:69:c7:59:30:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C7:58:99:D4:FA:67:DC:21:31:3B:55:03:AB:52:09:2B:EC:90:CE
X509v3 Authority Key Identifier:
keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f2:f5:5d:cf:f8:85:01:0a:75:4a:d2:c4:3c:53:bb:39:17:
2d:99:8b:b6:74:7f:b1:a7:93:bf:c4:5f:3f:a2:2b:f4:2a:f6:
85:fe:aa:46:d8:5d:ed:30:02:d5:12:4d:e1:67:0f:39:5f:01:
d4:9d:34:81:19:b2:3f:96:2a:60:34:3b:d8:b3:f3:fc:ae:da:
ae:33:39:99:07:c0:99:59:b4:8c:bd:6f:fa:3f:2b:3b:83:43:
34:67:cd:f5:7d:2d:e4:32:50:7c:8d:9e:49:79:2f:e4:84:93:
de:d8:cd:3b:f4:21:c3:37:64:b5:ff:12:50:cf:7c:7c:5c:16:
06:b1:47:9c:a8:84:1b:c6:88:4f:29:0e:b3:7f:04:dd:d2:83:
f6:55:70:e9:54:0d:b9:e5:0c:32:0f:4d:3b:81:94:af:44:76:
ce:47:4e:09:8c:a2:8a:fd:a5:24:f1:f2:c4:7e:42:bc:ad:bf:
70:93:40:29:27:23:aa:22:77:38:22:a4:50:46:db:42:3e:bf:
1e:9b:55:ef:d5:f7:73:9d:cf:f6:eb:5d:f1:8e:94:b4:fd:c9:
04:45:e5:b8:f8:70:e7:9b:5b:6d:ac:99:ed:01:b7:85:62:00:
d4:71:29:b2:70:31:7e:ca:00:4d:d5:b2:c5:8d:a0:88:f1:25:
e0:8d:33:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cagv4pWQs7Tm9rm+YlHLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Zjg0Y2RhM2YyYjlmOTY3ZDllOGE4NDg1ZDk5ZTZhMWI3
ZjdjNmUwHhcNMjYwMzI5MTAwMDI3WhcNMjYwMzMwMTAwMDI3WjAzMTEwLwYDVQQD
EyhiOGM3NTg5OWQ0ZmE2N2RjMjEzMTNiNTUwM2FiNTIwOTJiZWM5MGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppeKq/xTS/r5YmG5OYm5B4J0zMIs
tBWgrP6Q+P+Von+w/EX0/ZSRJQV9XsUEEghTBwkIITy3RAUwHxZ7VzFVghtvmTjk
vLRn9pc9tyvFsz24H2GiRAro1IW1TWcewPDlp854kkVKJLPaPQHnDM/Cuja6d3WL
fZ4fl1KV1s7Mjn+tiEPO6edUizcnNbVNn40HA4MEbUxmg70F4brU4rnBCuu2FPlw
zrbX+ImdvIuwe8pjDCFQbtjRlc8rzX8FsVVfnAKzeH731+fZ8/WS6+T7lVgi5bb3
6IkZADkXD53Yatlwq8uK20RCsLIRzrhl45UaujpTuCdOpbZaIGnHWTCG3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjHWJnU+mfcITE7VQOrUgkr7JDOMB8GA1UdIwQY
MBaAFIj4TNo/K5+WfZ6KhIXZnmobf3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAt
MzRkMzQxYzVlYjYxLzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mMjM4MzEtNmViNS00NDI3LTgxYjAtMzRkMzQxYzVlYjYx
LzEvaVBoTTJqOHJuNVo5bm9xRWhkbWVhaHRfZkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfL1Xc/4
hQEKdUrSxDxTuzkXLZmLtnR/saeTv8RfP6Ir9Cr2hf6qRthd7TAC1RJN4WcPOV8B
1J00gRmyP5YqYDQ72LPz/K7arjM5mQfAmVm0jL1v+j8rO4NDNGfN9X0t5DJQfI2e
SXkv5IST3tjNO/Qhwzdktf8SUM98fFwWBrFHnKiEG8aITykOs38E3dKD9lVw6VQN
ueUMMg9NO4GUr0R2zkdOCYyiiv2lJPHyxH5CvK2/cJNAKScjqiJ3OCKkUEbbQj6/
HptV79X3c53P9utd8Y6UtP3JBEXluPhw55tbbayZ7QG3hWIA1HEpsnAxfsoATdWy
xY2giPEl4I0z4Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:15 2026 by rpki-client