Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
File: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft (raw, json)
Hash identifier: 2fRINnYBavHXdNpQvdtAxhYYSZmzAjbFs9k73R5W0NI=
Subject key identifier: AB:19:37:E3:00:9F:53:38:44:EB:9B:FF:69:D1:FB:36:69:C0:F7:C8
Authority key identifier: D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
Certificate issuer: /CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Certificate serial: 019D39415BE7FC9AC422D18394451125E65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
Manifest number: 023B
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: 1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl (hash: uuTwysvo6arCosjp4BH+alXj6bKMi+S0aasNuNziJAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5b:e7:fc:9a:c4:22:d1:83:94:45:11:25:e6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48f0c2b2ad19f8c06b4e12491d6129864471ca8
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=ab1937e3009f533844eb9bff69d1fb3669c0f7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:43:72:c4:6b:c9:88:79:bb:11:ab:1c:e0:
6f:de:ef:b6:ce:29:54:da:5c:ad:ed:7e:5b:55:fd:
0e:18:1b:94:e8:61:87:e6:f5:53:eb:f3:9e:80:01:
c1:28:fc:db:bd:65:52:87:2f:ea:09:34:54:7e:d9:
6b:f2:9c:38:6a:56:92:27:06:94:b5:36:ce:1c:66:
f3:49:07:92:75:3b:b4:71:f6:ef:49:8b:e5:ac:82:
f6:65:b4:9b:9d:0d:28:96:58:d8:e5:c6:03:e2:9e:
74:20:c1:6e:99:9c:8f:dd:4b:30:c5:38:57:bd:ce:
4b:8a:0d:65:51:1a:90:e8:7c:07:45:53:e9:77:17:
15:71:a8:c6:2f:e8:f2:57:c1:29:c2:83:90:60:18:
42:77:c2:46:16:cb:6f:ec:f8:d9:3b:d3:11:01:83:
5a:65:4a:3a:39:fc:1a:f2:d9:a6:ca:56:c6:ce:11:
20:59:8e:3f:4c:17:7f:62:58:23:94:2c:13:3b:86:
ee:d6:bf:54:4c:59:e7:ae:ce:61:78:6d:60:e8:d1:
43:10:30:7b:2c:fb:2b:e0:e7:af:71:b1:dc:76:7d:
6c:98:98:47:d9:33:15:ca:f2:5c:45:71:9e:7f:bb:
e7:55:19:1b:e0:9f:a1:ba:2e:37:a9:3c:ab:36:aa:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:37:E3:00:9F:53:38:44:EB:9B:FF:69:D1:FB:36:69:C0:F7:C8
X509v3 Authority Key Identifier:
keyid:D4:8F:0C:2B:2A:D1:9F:8C:06:B4:E1:24:91:D6:12:98:64:47:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1I8MKyrRn4wGtOEkkdYSmGRHHKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/305eda-f8ba-4691-8960-93619674a42e/1/1I8MKyrRn4wGtOEkkdYSmGRHHKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8a:d4:a7:47:f4:6c:c3:2f:14:d1:bb:34:c0:05:48:88:8c:
07:15:57:9a:73:8f:93:41:e6:03:5e:2f:ca:2d:b8:2c:36:d3:
49:05:e5:8a:cd:a5:21:d2:7b:fd:c5:c4:98:c9:0d:62:f6:07:
f1:ee:da:b9:7f:03:52:d5:03:c2:b9:06:61:48:9e:b2:ce:5a:
1c:11:a5:0e:d0:1d:0d:4b:73:24:03:dc:82:77:55:00:47:ce:
85:0d:ac:ad:72:65:f7:53:60:a3:5f:c0:de:4e:f1:c4:4e:4a:
a9:2c:31:77:ad:71:ba:36:db:3e:eb:03:5c:5f:96:5e:72:69:
22:8e:aa:8f:35:f9:cb:ae:1f:1d:03:43:46:e2:55:22:f9:e9:
29:34:6f:23:f9:4b:34:42:ff:57:8e:81:53:d6:e0:cd:31:73:
09:11:06:40:8d:f5:73:1a:1e:fd:f3:35:0c:97:06:f5:61:a0:
fd:70:c9:50:12:ed:62:5f:ae:ee:8f:73:92:7d:62:0e:6c:7e:
ff:06:97:4c:9e:d7:33:a1:ee:ca:75:4d:9f:66:2a:7a:06:8b:
cb:a1:07:05:93:33:5c:bd:ae:20:dc:b6:cf:ed:1c:1e:f8:4e:
3d:b7:05:86:d7:78:33:f3:7d:1a:5d:78:95:f3:b2:d1:02:bb:
5f:e9:8e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QVvn/JrEItGDlEURJeZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGYwYzJiMmFkMTlmOGMwNmI0ZTEyNDkxZDYxMjk4NjQ0
NzFjYTgwHhcNMjYwMzI5MTEwMTE3WhcNMjYwMzMwMTEwMTE3WjAzMTEwLwYDVQQD
EyhhYjE5MzdlMzAwOWY1MzM4NDRlYjliZmY2OWQxZmIzNjY5YzBmN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzNDcsRryYh5uxGrHOBv3u+2zilU
2lyt7X5bVf0OGBuU6GGH5vVT6/OegAHBKPzbvWVShy/qCTRUftlr8pw4alaSJwaU
tTbOHGbzSQeSdTu0cfbvSYvlrIL2ZbSbnQ0olljY5cYD4p50IMFumZyP3UswxThX
vc5Lig1lURqQ6HwHRVPpdxcVcajGL+jyV8EpwoOQYBhCd8JGFstv7PjZO9MRAYNa
ZUo6Ofwa8tmmylbGzhEgWY4/TBd/YlgjlCwTO4bu1r9UTFnnrs5heG1g6NFDEDB7
LPsr4OevcbHcdn1smJhH2TMVyvJcRXGef7vnVRkb4J+hui43qTyrNqrbFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsZN+MAn1M4ROub/2nR+zZpwPfIMB8GA1UdIwQY
MBaAFNSPDCsq0Z+MBrThJJHWEphkRxyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAt
OTM2MTk2NzRhNDJlLzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zMDVlZGEtZjhiYS00NjkxLTg5NjAtOTM2MTk2NzRhNDJl
LzEvMUk4TUt5clJuNHdHdE9Fa2tkWVNtR1JISEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4rUp0f0
bMMvFNG7NMAFSIiMBxVXmnOPk0HmA14vyi24LDbTSQXlis2lIdJ7/cXEmMkNYvYH
8e7auX8DUtUDwrkGYUiess5aHBGlDtAdDUtzJAPcgndVAEfOhQ2srXJl91Ngo1/A
3k7xxE5KqSwxd61xujbbPusDXF+WXnJpIo6qjzX5y64fHQNDRuJVIvnpKTRvI/lL
NEL/V46BU9bgzTFzCREGQI31cxoe/fM1DJcG9WGg/XDJUBLtYl+u7o9zkn1iDmx+
/waXTJ7XM6HuynVNn2YqegaLy6EHBZMzXL2uINy2z+0cHvhOPbcFhtd4M/N9Gl14
lfOy0QK7X+mOhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:38 2026 by rpki-client