Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: xOw4rE6lrynk5JH/ZL7R29lgFA8imxUTY3OTyN20P8E=
Subject key identifier: 9F:D4:A6:55:77:D0:DB:96:C6:CE:22:75:FE:3C:A1:79:AC:C6:54:CC
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019D390A3A9220B9ACF4BEA0FE570548414C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 17E8
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: nO3/vTX9y+xWOnusU9aWeR9Wnru1CGwSMrFBhMUwUoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3a:92:20:b9:ac:f4:be:a0:fe:57:05:48:41:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=9fd4a65577d0db96c6ce2275fe3ca179acc654cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:bb:97:d9:9a:f4:6d:ee:a4:ff:5a:37:0e:
13:74:61:03:77:6b:6e:57:71:46:dc:14:92:58:30:
31:2b:bd:a6:79:23:94:0a:dd:15:a1:66:d9:31:ba:
51:9c:8c:bf:f4:1c:c7:e3:bf:97:99:51:e7:29:ac:
0b:98:3c:34:26:73:27:9e:bd:07:e3:ba:22:28:49:
6a:db:15:0f:d5:f2:64:0b:c2:89:08:68:0d:bb:fc:
d7:c0:e4:28:53:59:c0:94:b9:a5:0d:44:d6:58:ea:
6a:65:4b:d9:29:c3:1b:77:db:ce:24:e6:ac:1f:03:
69:95:8a:60:bb:58:52:e6:4f:83:e2:61:da:30:82:
f5:4c:cc:b2:33:9e:15:e5:12:db:99:31:55:d2:97:
5e:c0:fe:b3:30:e5:48:be:8b:58:d0:60:a3:b0:c3:
30:c1:22:74:0a:14:e0:45:fc:c7:2a:34:f3:77:21:
4f:5a:29:a4:2c:98:5a:2a:67:2b:2f:d2:56:b1:a5:
d9:c2:66:1a:8a:dd:75:65:81:ae:c1:bd:f9:31:a5:
cc:64:71:a6:74:bc:83:9f:91:8d:a4:08:a4:e7:69:
01:fe:b6:1d:0f:77:fd:66:fa:9a:52:8d:cb:04:4f:
bb:e8:0f:88:33:25:94:74:4d:85:82:e1:d2:c1:26:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:A6:55:77:D0:DB:96:C6:CE:22:75:FE:3C:A1:79:AC:C6:54:CC
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:21:7b:76:a9:fe:1f:73:cc:be:99:72:7a:80:e6:23:4c:57:
d3:48:f0:cc:b1:b7:7d:ea:08:fe:eb:d7:2e:fc:97:44:a0:2a:
ec:93:b2:00:db:a5:9b:b5:ad:36:9f:93:12:be:45:35:2f:31:
2f:cb:71:e9:56:19:c6:11:10:bb:7e:3b:c5:25:83:f3:a1:41:
eb:4d:ce:ac:ea:d4:45:92:a3:1b:d9:4d:4d:c9:57:a9:77:43:
b9:f9:49:e8:58:9a:be:4f:82:91:ba:1f:33:6f:9f:7f:f5:c1:
b0:af:23:fe:b4:19:e4:fe:03:47:2d:d3:0a:d8:56:b8:f3:6a:
0a:d9:76:a0:77:e8:8a:5d:79:19:61:da:90:30:4a:a9:ee:67:
f4:59:8f:40:1d:08:ab:aa:b5:3a:91:d2:e6:50:40:a1:33:d2:
a9:2b:d3:45:98:cc:25:2a:b4:59:aa:20:a2:c4:50:91:8c:f7:
b9:e0:83:63:c3:6d:2f:b1:c5:c4:65:48:65:11:34:9b:8d:67:
f8:71:52:1f:69:e5:b8:9a:b0:73:3b:1a:d7:31:66:d0:c9:d0:
0a:86:53:99:df:d2:ab:ae:21:8d:47:6f:d2:be:c5:97:3f:22:
7b:20:42:ce:06:5a:d3:c4:07:5e:00:39:a9:f3:5b:0c:e8:5e:
fd:15:4d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CjqSILms9L6g/lcFSEFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5
YjQ2NTEwHhcNMjYwMzI5MTAwMTA0WhcNMjYwMzMwMTAwMTA0WjAzMTEwLwYDVQQD
Eyg5ZmQ0YTY1NTc3ZDBkYjk2YzZjZTIyNzVmZTNjYTE3OWFjYzY1NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApru7l9ma9G3upP9aNw4TdGEDd2tu
V3FG3BSSWDAxK72meSOUCt0VoWbZMbpRnIy/9BzH47+XmVHnKawLmDw0JnMnnr0H
47oiKElq2xUP1fJkC8KJCGgNu/zXwOQoU1nAlLmlDUTWWOpqZUvZKcMbd9vOJOas
HwNplYpgu1hS5k+D4mHaMIL1TMyyM54V5RLbmTFV0pdewP6zMOVIvotY0GCjsMMw
wSJ0ChTgRfzHKjTzdyFPWimkLJhaKmcrL9JWsaXZwmYait11ZYGuwb35MaXMZHGm
dLyDn5GNpAik52kB/rYdD3f9ZvqaUo3LBE+76A+IMyWUdE2FguHSwSbq/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/UplV30NuWxs4idf48oXmsxlTMMB8GA1UdIwQY
MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt
MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1
LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyF7dqn+
H3PMvplyeoDmI0xX00jwzLG3feoI/uvXLvyXRKAq7JOyANulm7WtNp+TEr5FNS8x
L8tx6VYZxhEQu347xSWD86FB603OrOrURZKjG9lNTclXqXdDuflJ6Fiavk+Ckbof
M2+ff/XBsK8j/rQZ5P4DRy3TCthWuPNqCtl2oHfoil15GWHakDBKqe5n9FmPQB0I
q6q1OpHS5lBAoTPSqSvTRZjMJSq0WaogosRQkYz3ueCDY8NtL7HFxGVIZRE0m41n
+HFSH2nluJqwczsa1zFm0MnQCoZTmd/Sq64hjUdv0r7Flz8ieyBCzgZa08QHXgA5
qfNbDOhe/RVNpg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:46 2026 by rpki-client