Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: zwJLdgdR/IkHXgRHG3ZcHT7vjTpn78vmiwRJ7Yus2m8=
Subject key identifier: 42:04:FC:42:B2:6C:C5:A3:0B:9C:D3:5F:FF:05:AB:7F:5E:04:66:A6
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 019D389BB6BA922637A77CC6476E3FAB3CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 189E
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: EIlm2UOK4a43mkGzeWHWkYSMea0.roa (hash: +wMjOafG8Bh/qQ6ngEeSs6Schjv6y2L45oZoRJ0DZNo=)
2: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: Lo1BKqmlnT9jRWDVr8itu6aNGki1hiaRdSI+qF83Vyg=)
3: luGI1U_JMgcQZM65wInUiA4UdbA.roa (hash: ZyKZURW02DYdgFTMs0cmnkA3UVYypfPPFFRpyjWyugA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b6:ba:92:26:37:a7:7c:c6:47:6e:3f:ab:3c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=4204fc42b26cc5a30b9cd35fff05ab7f5e0466a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:33:55:4e:19:b7:b9:8d:d1:04:b0:71:42:
64:b0:e9:6a:71:cf:f3:8e:4b:de:9c:c6:3c:cb:f3:
71:61:c1:86:f6:6f:dd:d7:5f:d1:b9:43:c6:c4:b4:
95:1f:74:9c:3a:f7:9e:b5:aa:22:c7:ca:af:9d:b9:
a5:8d:7c:5d:cb:7a:12:f0:49:27:36:36:9a:eb:95:
b6:df:06:f2:46:44:db:4b:a9:ee:dd:34:f1:a5:8a:
4c:8f:4c:f8:b8:5b:20:ca:21:21:34:a7:a0:2b:fd:
e5:de:52:19:0c:89:71:91:a2:93:e6:88:36:34:54:
c7:6f:2d:1c:50:d4:0b:6a:18:62:e8:c8:e7:fe:5f:
62:cf:38:4d:d7:4b:fd:79:98:84:b6:2b:d8:7b:4f:
7b:93:07:fc:36:6e:fb:be:86:34:a4:dc:a0:07:62:
ce:2a:1f:0a:5a:00:22:69:c6:e6:25:10:f6:94:77:
52:dd:1b:37:5f:cb:3f:18:4b:05:12:54:60:e8:0b:
95:63:12:14:06:5c:2f:c8:ad:1b:f9:a0:79:f8:33:
19:61:e7:b1:ea:0c:3f:8a:81:5e:29:e2:1b:73:7b:
2e:b6:c7:f4:75:a4:a8:be:a2:1b:ae:18:38:15:f1:
33:99:b5:71:17:cc:1c:e9:29:ba:f1:e3:25:70:17:
77:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:04:FC:42:B2:6C:C5:A3:0B:9C:D3:5F:FF:05:AB:7F:5E:04:66:A6
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:68:59:cb:da:53:57:95:e3:b1:ab:58:e6:dc:48:e9:86:
36:95:0e:4c:2f:2f:ce:15:5d:04:7a:73:ae:09:0d:d7:54:64:
48:72:5f:3b:19:a0:5f:db:d6:06:21:1a:53:d2:7a:15:aa:06:
56:71:9a:e4:b6:19:71:f4:46:90:27:f7:44:f5:aa:e6:0d:47:
4d:2e:e0:13:e2:7c:90:08:f5:ea:a0:06:69:56:28:79:91:18:
6d:9c:c4:24:c6:46:b5:fb:3f:37:99:e8:96:8e:7d:6d:46:8c:
2b:37:0a:60:34:f0:2c:33:8b:6f:9d:e6:22:21:75:8a:ac:01:
14:6f:bc:a2:ab:ce:ac:b0:39:ba:de:54:66:d6:56:dd:fe:b9:
fe:42:96:89:3c:59:4a:a1:13:63:00:b2:b2:36:02:90:77:19:
1f:f8:52:21:6b:ee:b9:40:2e:37:ab:be:8c:7d:37:cf:89:c3:
56:6b:dd:48:6e:13:09:d9:17:1f:10:52:fe:fb:2a:1f:2b:ea:
8d:5a:21:80:e8:c7:a7:eb:95:ba:16:46:85:04:84:51:b2:77:
1c:33:3e:b8:bb:69:b6:11:6c:b7:28:34:81:ee:92:91:80:ad:
36:62:82:eb:ba:9a:ad:49:f1:ea:bc:db:7e:d4:4d:91:68:6f:
18:e1:9d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m7a6kiY3p3zGR24/qzy2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjYwMzI5MDgwMDIyWhcNMjYwMzMwMDgwMDIyWjAzMTEwLwYDVQQD
Eyg0MjA0ZmM0MmIyNmNjNWEzMGI5Y2QzNWZmZjA1YWI3ZjVlMDQ2NmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvszVU4Zt7mN0QSwcUJksOlqcc/z
jkvenMY8y/NxYcGG9m/d11/RuUPGxLSVH3ScOveetaoix8qvnbmljXxdy3oS8Ekn
Njaa65W23wbyRkTbS6nu3TTxpYpMj0z4uFsgyiEhNKegK/3l3lIZDIlxkaKT5og2
NFTHby0cUNQLahhi6Mjn/l9izzhN10v9eZiEtivYe097kwf8Nm77voY0pNygB2LO
Kh8KWgAiacbmJRD2lHdS3Rs3X8s/GEsFElRg6AuVYxIUBlwvyK0b+aB5+DMZYeex
6gw/ioFeKeIbc3sutsf0daSovqIbrhg4FfEzmbVxF8wc6Sm68eMlcBd35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIE/EKybMWjC5zTX/8Fq39eBGamMB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+ZoWcva
U1eV47GrWObcSOmGNpUOTC8vzhVdBHpzrgkN11RkSHJfOxmgX9vWBiEaU9J6FaoG
VnGa5LYZcfRGkCf3RPWq5g1HTS7gE+J8kAj16qAGaVYoeZEYbZzEJMZGtfs/N5no
lo59bUaMKzcKYDTwLDOLb53mIiF1iqwBFG+8oqvOrLA5ut5UZtZW3f65/kKWiTxZ
SqETYwCysjYCkHcZH/hSIWvuuUAuN6u+jH03z4nDVmvdSG4TCdkXHxBS/vsqHyvq
jVohgOjHp+uVuhZGhQSEUbJ3HDM+uLtpthFstyg0ge6SkYCtNmKC67qarUnx6rzb
ftRNkWhvGOGdWA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:28 2026 by rpki-client