Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
File: IxG6LbhgGYJqsQLhnyyoogkxaFI.mft (raw, json)
Hash identifier: 7/KFmmRwB3dXNCkbEblSfEVocNTVDs3G2dDHwFOAFNc=
Subject key identifier: 89:74:19:72:E5:E3:51:F7:F6:98:9F:6C:F7:E7:1B:C6:5E:EE:F4:F7
Authority key identifier: 23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
Certificate issuer: /CN=2311ba2db86019826ab102e19f2ca8a209316852
Certificate serial: 019D397771780A0C920556A291B89F56CA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
Manifest number: 038D
Signing time: Sun 29 Mar 2026 12:00:22 +0000
Manifest this update: Sun 29 Mar 2026 12:00:22 +0000
Manifest next update: Mon 30 Mar 2026 12:00:22 +0000
Files and hashes: 1: IxG6LbhgGYJqsQLhnyyoogkxaFI.crl (hash: LufSJftxJ4pLh8qGaXsFo3cmHIXe4cOXK2uctZK2Z8o=)
2: ths8OXX3QSMsj9e29cfZdF76uD8.roa (hash: aGHUmAejD8Fr+WhhhtcNvvY0gSQE1mI1EhqqEc3+N9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:71:78:0a:0c:92:05:56:a2:91:b8:9f:56:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2311ba2db86019826ab102e19f2ca8a209316852
Validity
Not Before: Mar 29 12:00:22 2026 GMT
Not After : Mar 30 12:00:22 2026 GMT
Subject: CN=89741972e5e351f7f6989f6cf7e71bc65eeef4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:d8:08:66:af:ed:ff:5a:01:c1:1f:22:f2:
d8:b0:03:ad:f3:10:4c:7f:27:83:a6:6a:9b:43:c5:
66:b9:a9:e4:87:13:bb:02:29:6c:d5:8e:e6:7d:cc:
31:60:df:ca:c0:6e:fe:d3:16:1a:55:fb:47:5d:39:
14:86:5f:9b:a0:fb:2a:0f:06:3c:41:d1:2a:4b:a5:
ed:3c:51:85:89:e2:aa:7e:7d:58:c5:7d:dc:2d:c9:
be:4d:b8:39:c3:b3:9e:ba:1d:0e:92:2a:40:71:0e:
6a:a2:39:3c:da:eb:e1:7e:47:e8:19:ee:fd:7d:13:
4b:d4:9f:d9:5b:1e:48:6b:fe:51:69:e4:a2:47:1e:
bf:25:70:71:29:53:f9:5a:51:a2:a2:fc:7d:80:c1:
d0:67:fc:ad:5a:b2:b1:16:c6:b8:85:d5:06:5c:8b:
40:43:17:19:17:89:7d:ff:b4:f0:c4:1b:de:41:e7:
3a:d4:bd:42:8b:92:a2:de:62:e7:6e:3b:ce:e1:25:
3e:50:66:aa:23:d7:47:91:9d:7c:0a:15:66:46:6b:
78:17:ec:99:b4:50:65:41:92:78:68:65:22:95:f9:
6b:d0:85:c3:75:e7:37:13:dd:55:b5:83:45:a1:c2:
61:0f:57:e3:61:0a:9d:cc:22:ce:48:22:e7:e1:8d:
e5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:19:72:E5:E3:51:F7:F6:98:9F:6C:F7:E7:1B:C6:5E:EE:F4:F7
X509v3 Authority Key Identifier:
keyid:23:11:BA:2D:B8:60:19:82:6A:B1:02:E1:9F:2C:A8:A2:09:31:68:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxG6LbhgGYJqsQLhnyyoogkxaFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6daeee-ed3b-4bf0-9468-2f1787bbf116/1/IxG6LbhgGYJqsQLhnyyoogkxaFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:c2:28:b8:e9:01:4b:7e:b4:a3:77:cd:ed:cc:ce:52:53:
5b:72:93:8d:0d:f3:5c:30:39:c3:b7:fb:5d:1d:3a:a6:f6:e1:
45:50:5b:01:f5:8f:10:12:c7:69:f1:46:3d:f5:c2:e4:44:18:
eb:05:fc:a0:c7:9d:9a:45:7e:97:02:1b:d8:b0:f7:ef:d0:47:
49:27:3f:cb:39:44:58:8e:78:d0:70:c9:0f:62:d5:6d:74:39:
d0:13:88:24:62:7d:84:a7:da:03:d4:98:03:71:5d:45:8e:c7:
b7:fc:17:b8:82:f0:db:17:60:99:e8:73:c3:2d:5f:e2:d5:51:
d4:26:db:47:65:c2:c1:e6:dc:9e:e4:ee:1f:34:94:49:fa:1d:
c1:0a:21:81:70:c2:dc:c2:06:6e:a6:21:ad:c7:11:bd:12:21:
93:72:db:fb:0b:06:0e:8e:c3:f6:8c:bb:01:df:1b:7f:27:3c:
37:40:39:4d:ad:b1:07:a0:27:62:dc:76:4e:e9:0d:1d:64:64:
77:0f:95:0b:82:c5:17:49:73:c2:64:a6:f8:4c:27:91:f4:69:
79:af:17:97:b4:b3:53:3a:28:2e:34:d0:f3:1c:bf:23:30:08:
8a:da:4b:38:1d:62:97:d0:d3:0d:5d:3a:73:98:ed:13:35:fd:
3d:a2:a7:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d3F4CgySBVaikbifVsqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTFiYTJkYjg2MDE5ODI2YWIxMDJlMTlmMmNhOGEyMDkz
MTY4NTIwHhcNMjYwMzI5MTIwMDIyWhcNMjYwMzMwMTIwMDIyWjAzMTEwLwYDVQQD
Eyg4OTc0MTk3MmU1ZTM1MWY3ZjY5ODlmNmNmN2U3MWJjNjVlZWVmNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT/YCGav7f9aAcEfIvLYsAOt8xBM
fyeDpmqbQ8VmuankhxO7Ails1Y7mfcwxYN/KwG7+0xYaVftHXTkUhl+boPsqDwY8
QdEqS6XtPFGFieKqfn1YxX3cLcm+Tbg5w7Oeuh0OkipAcQ5qojk82uvhfkfoGe79
fRNL1J/ZWx5Ia/5RaeSiRx6/JXBxKVP5WlGiovx9gMHQZ/ytWrKxFsa4hdUGXItA
QxcZF4l9/7TwxBveQec61L1Ci5Ki3mLnbjvO4SU+UGaqI9dHkZ18ChVmRmt4F+yZ
tFBlQZJ4aGUilflr0IXDdec3E91VtYNFocJhD1fjYQqdzCLOSCLn4Y3lsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl0GXLl41H39pifbPfnG8Ze7vT3MB8GA1UdIwQY
MBaAFCMRui24YBmCarEC4Z8sqKIJMWhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0Njgt
MmYxNzg3YmJmMTE2LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82ZGFlZWUtZWQzYi00YmYwLTk0NjgtMmYxNzg3YmJmMTE2
LzEvSXhHNkxiaGdHWUpxc1FMaG55eW9vZ2t4YUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID7CKLjp
AUt+tKN3ze3MzlJTW3KTjQ3zXDA5w7f7XR06pvbhRVBbAfWPEBLHafFGPfXC5EQY
6wX8oMedmkV+lwIb2LD379BHSSc/yzlEWI540HDJD2LVbXQ50BOIJGJ9hKfaA9SY
A3FdRY7Ht/wXuILw2xdgmehzwy1f4tVR1CbbR2XCwebcnuTuHzSUSfodwQohgXDC
3MIGbqYhrccRvRIhk3Lb+wsGDo7D9oy7Ad8bfyc8N0A5Ta2xB6AnYtx2TukNHWRk
dw+VC4LFF0lzwmSm+EwnkfRpea8Xl7SzUzooLjTQ8xy/IzAIitpLOB1il9DTDV06
c5jtEzX9PaKnXQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:13 2026 by rpki-client