Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: vSktjVwWaz+5n1eZCgDLVUGXZgHLAlJjZ9F9Vzab+iI=
Subject key identifier: 39:B2:74:A9:7A:50:62:4F:1C:2E:F6:99:4B:6A:80:39:34:DE:9F:8E
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 019D382EA0177709AF4C7CD86674A6EAE9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: 0QLEjWJctmJxIIQ5XO/y0e8YCL5EGK2gZfoAv5uf+pM=)
2: oKbMR38c6g5Sb8f_q8_DP98D8vc.roa (hash: QbHsSOABpHInSeNj8NMGYtmUXI4ZAi0ELzxa77Y6VMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a0:17:77:09:af:4c:7c:d8:66:74:a6:ea:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=39b274a97a50624f1c2ef6994b6a803934de9f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:a5:f3:7d:4c:81:6d:98:e4:e5:5e:0a:d9:
79:f6:8a:83:17:36:e1:00:8b:fc:f5:91:f6:2f:a9:
18:49:59:eb:3d:e1:6f:d7:eb:6e:0b:78:02:5d:3c:
70:07:af:5f:59:18:34:d5:eb:bc:a7:58:57:74:38:
09:c2:23:be:2e:76:11:f9:1a:5b:31:76:26:5d:c0:
37:7d:33:ad:a0:b1:31:bd:f5:40:a9:ec:10:dc:4c:
68:2b:ed:f2:26:f1:f7:9d:4a:96:06:5e:54:cf:d0:
0a:ff:58:07:3d:ad:3a:76:cc:0d:69:94:89:92:fb:
11:2e:aa:9f:b3:d8:49:34:c5:fc:6e:fc:3d:74:ea:
a1:f2:66:8d:37:ac:28:76:51:85:82:7d:44:e1:3e:
9b:c6:86:54:13:ed:de:b3:50:b1:ae:0d:62:1a:84:
dc:5e:a1:f4:20:17:c9:37:ce:8e:39:a6:42:17:e1:
ad:64:5c:6c:b3:0d:cb:82:1a:2a:64:57:85:e9:0b:
bb:84:55:16:61:b5:a8:7e:5a:2a:73:36:4a:86:02:
e0:8e:7e:29:c1:78:f3:f5:d0:d6:3a:c1:ca:ae:c5:
da:f0:0e:ba:cd:93:70:9b:a8:fb:a8:ea:bd:68:77:
99:ef:e0:3e:fc:28:b5:ba:3f:ef:bb:e1:89:e7:11:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B2:74:A9:7A:50:62:4F:1C:2E:F6:99:4B:6A:80:39:34:DE:9F:8E
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8d:be:a9:f3:00:45:af:cf:5b:73:c4:a4:cd:18:20:8a:c3:
15:29:64:4b:72:80:18:52:c9:14:de:6e:3b:50:16:60:d0:cd:
ff:26:dc:46:b7:bc:e9:a1:ca:c9:cb:3b:04:27:f7:31:01:3b:
6a:ab:a9:a4:fe:0b:8a:20:f1:d3:ef:8e:e4:40:a9:2f:53:08:
aa:5d:3e:ef:32:60:ad:ad:88:e4:31:6b:29:29:0e:0a:c1:dd:
06:62:76:f2:00:e4:25:60:ca:ae:7e:e2:5a:4a:0b:44:2d:23:
75:9f:fe:00:42:5f:7e:59:40:79:16:1e:be:41:08:9e:dd:65:
2c:ae:b3:e8:cb:3a:54:6d:35:60:32:dd:2c:f7:a5:06:d0:20:
ab:6a:d7:5b:50:3c:b5:a1:4b:19:76:48:a7:9b:1a:ca:80:a9:
fe:b0:4f:ca:8e:78:58:10:d1:88:01:86:6a:2e:3e:03:33:d6:
52:79:14:9b:32:c3:2e:26:8e:5f:c3:53:90:ca:a8:69:2a:56:
e5:f5:3e:43:66:7a:a5:19:6a:2a:d8:49:8d:b4:c9:0b:ad:3b:
7f:d0:7b:6b:65:2e:5e:84:ad:e2:bd:9b:ad:18:27:b3:cd:46:
44:1f:29:a4:34:da:b4:c6:fe:c4:69:c7:42:8c:3c:23:15:bb:
f4:c6:2b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LqAXdwmvTHzYZnSm6undMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMzA4N2IzMzdmNzQ3NmM4ZDYzMDRhZWIwOGNlZTA1N2Y0
YmY2OTEwHhcNMjYwMzI5MDYwMTEyWhcNMjYwMzMwMDYwMTEyWjAzMTEwLwYDVQQD
EygzOWIyNzRhOTdhNTA2MjRmMWMyZWY2OTk0YjZhODAzOTM0ZGU5ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY2l831MgW2Y5OVeCtl59oqDFzbh
AIv89ZH2L6kYSVnrPeFv1+tuC3gCXTxwB69fWRg01eu8p1hXdDgJwiO+LnYR+Rpb
MXYmXcA3fTOtoLExvfVAqewQ3ExoK+3yJvH3nUqWBl5Uz9AK/1gHPa06dswNaZSJ
kvsRLqqfs9hJNMX8bvw9dOqh8maNN6wodlGFgn1E4T6bxoZUE+3es1Cxrg1iGoTc
XqH0IBfJN86OOaZCF+GtZFxssw3LghoqZFeF6Qu7hFUWYbWofloqczZKhgLgjn4p
wXjz9dDWOsHKrsXa8A66zZNwm6j7qOq9aHeZ7+A+/Ci1uj/vu+GJ5xGvawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmydKl6UGJPHC72mUtqgDk03p+OMB8GA1UdIwQY
MBaAFCIwh7M390dsjWMErrCM7gV/S/aRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMt
YzUxMjUxNDJhZTU4LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iYzk0ZmEtMDUxZS00OGQ1LWFjZDMtYzUxMjUxNDJhZTU4
LzEvSWpDSHN6ZjNSMnlOWXdTdXNJenVCWDlMOXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI2+qfMA
Ra/PW3PEpM0YIIrDFSlkS3KAGFLJFN5uO1AWYNDN/ybcRre86aHKycs7BCf3MQE7
aquppP4LiiDx0++O5ECpL1MIql0+7zJgra2I5DFrKSkOCsHdBmJ28gDkJWDKrn7i
WkoLRC0jdZ/+AEJffllAeRYevkEInt1lLK6z6Ms6VG01YDLdLPelBtAgq2rXW1A8
taFLGXZIp5sayoCp/rBPyo54WBDRiAGGai4+AzPWUnkUmzLDLiaOX8NTkMqoaSpW
5fU+Q2Z6pRlqKthJjbTJC607f9B7a2UuXoSt4r2brRgns81GRB8ppDTatMb+xGnH
Qow8IxW79MYr9A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:35 2026 by rpki-client