Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: sy5txf8KxRmNsIj+W1PXj+uDXDNWBy6WpdNnzwhcIW4=
Subject key identifier: 93:44:26:45:9D:92:29:7B:AD:8D:A7:A8:BE:BC:DE:62:5A:2F:5C:07
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 019D3A1C8C837A6B66FB6CC162BA381FA126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1598
Signing time: Sun 29 Mar 2026 15:00:42 +0000
Manifest this update: Sun 29 Mar 2026 15:00:42 +0000
Manifest next update: Mon 30 Mar 2026 15:00:42 +0000
Files and hashes: 1: JcXMDE3ebWSqfHBZs7VE5S6oxiE.roa (hash: qKO6wgBeY/Sj/PEf+kS+5gKnDMaY8bARW2HNfD5qpA0=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: JXrp8rS7Lo426h+cUqtfzhOqsqlLzfTLVHFeAZvnr3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:8c:83:7a:6b:66:fb:6c:c1:62:ba:38:1f:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Mar 29 15:00:42 2026 GMT
Not After : Mar 30 15:00:42 2026 GMT
Subject: CN=934426459d92297bad8da7a8bebcde625a2f5c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:9f:84:ad:e6:32:42:ee:e4:63:65:46:a3:
7e:39:ec:0f:b8:c2:24:ab:c5:47:e5:fe:5b:86:c5:
78:3a:00:65:29:47:d6:18:84:f0:77:6a:3e:e5:6b:
dd:b0:33:dd:5a:a7:73:d5:2d:3f:e8:f0:18:92:a7:
46:89:5b:42:25:8a:19:88:35:0a:9f:43:3d:5c:d2:
c7:50:a8:32:15:95:c4:0a:70:b1:fe:4f:8f:21:49:
2c:29:b6:14:57:ad:36:58:8f:43:73:cc:67:3d:8a:
68:d4:3b:3c:3b:33:50:88:26:bd:7d:19:ff:fc:f1:
28:74:0a:32:12:07:d5:57:bd:cc:c5:fe:cd:69:b2:
93:97:94:ca:81:73:23:e4:07:26:f2:29:43:3d:af:
14:01:a7:c3:34:32:26:08:63:65:65:91:8c:69:6e:
2a:3e:7b:79:3d:3f:1b:73:7b:28:81:bd:62:72:bf:
69:fe:c6:92:4b:67:d7:c8:22:67:a8:94:ae:36:9b:
8c:68:9c:f5:7a:42:a3:75:bf:01:98:47:28:95:82:
43:01:98:5e:a4:42:b3:01:2d:2c:ba:1a:ed:16:d0:
32:49:f2:36:d0:8f:29:30:48:01:e9:e2:ab:77:1e:
1e:8e:c0:0b:65:39:f7:37:2c:21:d3:85:37:67:31:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:26:45:9D:92:29:7B:AD:8D:A7:A8:BE:BC:DE:62:5A:2F:5C:07
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7d:95:87:73:76:3e:d2:bf:c7:2a:c5:7d:57:eb:44:f5:4e:
19:aa:e4:4e:ef:0a:42:1c:fa:c6:3d:60:c3:98:86:36:df:82:
47:ab:a3:d0:f0:0d:b2:c6:b6:f3:d9:ec:19:7a:4b:dd:37:de:
ea:62:dd:45:58:b8:a6:5c:e6:b0:7e:8e:01:7d:96:63:b7:c7:
cc:8d:24:3f:c6:ba:1b:43:87:b3:fc:00:98:30:4e:9c:c9:3c:
9b:ea:bc:c1:95:20:6f:18:73:a6:e0:17:90:57:5c:18:05:b9:
c0:bc:56:bd:29:e0:6e:cd:c2:d5:72:01:a5:5f:95:29:f9:2e:
53:3b:b2:56:ac:f7:e2:a8:aa:af:07:aa:a3:91:65:34:84:60:
88:1a:a9:18:5f:ee:e3:fe:34:d0:8a:2a:1e:a6:27:a4:a1:16:
71:c7:24:0a:a8:03:47:86:b7:02:58:ef:d0:f1:6e:e5:a4:5f:
99:fa:e3:33:2f:9d:63:6b:55:fe:3e:94:74:cc:1a:c2:e6:e0:
c2:1a:87:8a:10:4b:f7:0c:82:93:6b:91:2c:25:3f:65:cf:a9:
e7:d3:e5:7f:aa:78:0a:61:89:69:09:25:b8:7e:c1:e9:a8:ef:
95:b2:86:b9:bb:02:71:73:a9:b6:ec:74:89:48:48:d1:84:8f:
4e:e7:b5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HIyDemtm+2zBYro4H6EmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjI3YzM1ZjkyOGQ5YzhiOGZmN2MyNTcyMWVmZDQ3YTkw
ZGNiNjcwHhcNMjYwMzI5MTUwMDQyWhcNMjYwMzMwMTUwMDQyWjAzMTEwLwYDVQQD
Eyg5MzQ0MjY0NTlkOTIyOTdiYWQ4ZGE3YThiZWJjZGU2MjVhMmY1YzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWafhK3mMkLu5GNlRqN+OewPuMIk
q8VH5f5bhsV4OgBlKUfWGITwd2o+5WvdsDPdWqdz1S0/6PAYkqdGiVtCJYoZiDUK
n0M9XNLHUKgyFZXECnCx/k+PIUksKbYUV602WI9Dc8xnPYpo1Ds8OzNQiCa9fRn/
/PEodAoyEgfVV73Mxf7NabKTl5TKgXMj5Acm8ilDPa8UAafDNDImCGNlZZGMaW4q
Pnt5PT8bc3sogb1icr9p/saSS2fXyCJnqJSuNpuMaJz1ekKjdb8BmEcolYJDAZhe
pEKzAS0suhrtFtAySfI20I8pMEgB6eKrdx4ejsALZTn3Nywh04U3ZzF3OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNEJkWdkil7rY2nqL683mJaL1wHMB8GA1UdIwQY
MBaAFIoifDX5KNnIuP98JXIe/UepDctnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUt
MzdiMGEyYWIzY2Q2LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUtMzdiMGEyYWIzY2Q2
LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn32Vh3N2
PtK/xyrFfVfrRPVOGarkTu8KQhz6xj1gw5iGNt+CR6uj0PANssa289nsGXpL3Tfe
6mLdRVi4plzmsH6OAX2WY7fHzI0kP8a6G0OHs/wAmDBOnMk8m+q8wZUgbxhzpuAX
kFdcGAW5wLxWvSngbs3C1XIBpV+VKfkuUzuyVqz34qiqrweqo5FlNIRgiBqpGF/u
4/400IoqHqYnpKEWccckCqgDR4a3Aljv0PFu5aRfmfrjMy+dY2tV/j6UdMwawubg
whqHihBL9wyCk2uRLCU/Zc+p59Plf6p4CmGJaQkluH7B6ajvlbKGubsCcXOptux0
iUhI0YSPTue1MQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:29 2026 by rpki-client