Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
File: IytwMInjgA2e0pEkcx7LpOmrRU8.mft (raw, json)
Hash identifier: jwWIxDSXcjfSB3GYyNJRqJOXFMoNM7cVqZ5hlOzuOpI=
Subject key identifier: C5:59:47:7E:C9:28:CF:62:04:8D:0B:F3:A7:45:C9:F8:5D:C5:08:73
Authority key identifier: 23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F
Certificate issuer: /CN=232b703089e3800d9ed29124731ecba4e9ab454f
Certificate serial: 019D38D2E6D997B12F11E315478F5B1975AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
Manifest number: 014D
Signing time: Sun 29 Mar 2026 09:00:38 +0000
Manifest this update: Sun 29 Mar 2026 09:00:38 +0000
Manifest next update: Mon 30 Mar 2026 09:00:38 +0000
Files and hashes: 1: IytwMInjgA2e0pEkcx7LpOmrRU8.crl (hash: zBOYOMOaGEwEUwskPgkMc+CUei2euDplcFt4Bl+5UTY=)
2: k-VO8ggs_LH1_UGXAjJl2qu3xAk.roa (hash: jtFttJWKX2PthCP7kr0cHeX5j6ZBysryPnwLyQmABY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e6:d9:97:b1:2f:11:e3:15:47:8f:5b:19:75:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b703089e3800d9ed29124731ecba4e9ab454f
Validity
Not Before: Mar 29 09:00:38 2026 GMT
Not After : Mar 30 09:00:38 2026 GMT
Subject: CN=c559477ec928cf62048d0bf3a745c9f85dc50873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:8a:a2:36:c9:52:b2:da:16:8b:5e:98:bf:
14:20:7e:63:62:74:56:d6:38:d0:45:f1:7a:96:b0:
d3:bd:68:69:05:16:ee:e2:53:e4:99:67:87:4d:08:
59:a9:df:ec:6b:16:ed:24:6d:c9:01:c5:bc:11:5b:
1d:06:9d:07:b6:e4:19:55:1b:5c:45:18:d5:ed:2b:
4a:63:cd:21:0b:7d:ec:3a:74:42:ce:a5:c5:00:5f:
ae:57:f6:71:54:a6:e0:f4:00:87:a0:71:83:ab:93:
7b:4d:e4:f1:8e:e6:fd:bb:a0:ce:7b:9c:06:9a:9f:
eb:ff:e6:a6:16:6a:5d:0f:1e:1d:2f:06:e9:99:67:
6e:91:c8:48:2f:de:cb:9d:7b:ca:b2:5b:e3:82:24:
ca:70:de:c4:c1:99:cf:24:53:97:cb:27:22:9b:a4:
f0:32:51:3a:e7:81:8d:2a:e4:9e:bf:b2:a1:34:5f:
90:b2:b1:c3:7e:1e:e8:b7:47:2a:09:bb:d0:27:4a:
f8:a7:99:19:22:41:b0:5e:a3:a5:c4:f0:53:a4:68:
f3:c6:9d:e7:21:79:05:db:3a:a2:06:15:c9:b9:ed:
ff:7f:7d:37:1c:99:33:12:a3:56:e4:1d:88:92:b0:
64:74:e4:ce:72:e2:1d:7d:21:62:d7:17:53:be:03:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:59:47:7E:C9:28:CF:62:04:8D:0B:F3:A7:45:C9:F8:5D:C5:08:73
X509v3 Authority Key Identifier:
keyid:23:2B:70:30:89:E3:80:0D:9E:D2:91:24:73:1E:CB:A4:E9:AB:45:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IytwMInjgA2e0pEkcx7LpOmrRU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/59cf71-9dce-4d54-aca7-c06d0360e114/1/IytwMInjgA2e0pEkcx7LpOmrRU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ed:20:00:22:36:ab:f6:38:cd:bc:90:4a:ee:8c:ca:08:26:
92:03:33:e2:cd:49:45:fb:00:23:5b:ca:4e:a9:d8:19:35:1a:
ff:51:81:09:8e:bf:fe:c1:43:ac:f8:f7:fc:d6:f8:68:c9:f9:
90:12:9b:96:24:51:b1:a6:d5:d8:f0:e1:38:83:26:f5:01:9d:
db:39:90:40:d2:a3:e3:11:36:ec:e7:96:e0:38:86:98:a8:6c:
ec:0e:cf:25:63:ab:12:cc:b6:0e:a9:40:07:4a:38:aa:bf:3f:
fa:7e:2c:d4:fd:4f:3d:04:dd:c2:c6:5b:15:2c:7b:03:36:e8:
3f:fd:73:03:76:a1:48:9a:af:7c:3b:af:9d:5d:49:ba:01:f4:
96:97:42:93:d6:b4:e4:5c:bb:f4:1b:a8:e8:1c:1f:4f:35:e7:
d1:f5:b2:82:9e:3e:3d:e4:47:17:33:3a:b4:53:39:37:34:0e:
4f:da:cf:51:74:7e:30:33:fb:06:50:91:c3:a2:91:46:7b:60:
ba:38:98:f8:27:76:77:dc:fd:5f:e6:fd:ce:88:c7:d7:1b:2c:
f0:11:fa:fe:f8:e9:43:ff:e4:61:e6:66:cb:cb:93:41:83:e0:
89:45:0d:86:4e:d3:49:f8:89:12:d9:c7:ca:2c:56:d5:c4:59:
dc:0e:b0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040ubZl7EvEeMVR49bGXWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMmI3MDMwODllMzgwMGQ5ZWQyOTEyNDczMWVjYmE0ZTlh
YjQ1NGYwHhcNMjYwMzI5MDkwMDM4WhcNMjYwMzMwMDkwMDM4WjAzMTEwLwYDVQQD
EyhjNTU5NDc3ZWM5MjhjZjYyMDQ4ZDBiZjNhNzQ1YzlmODVkYzUwODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSqKojbJUrLaFotemL8UIH5jYnRW
1jjQRfF6lrDTvWhpBRbu4lPkmWeHTQhZqd/saxbtJG3JAcW8EVsdBp0HtuQZVRtc
RRjV7StKY80hC33sOnRCzqXFAF+uV/ZxVKbg9ACHoHGDq5N7TeTxjub9u6DOe5wG
mp/r/+amFmpdDx4dLwbpmWdukchIL97LnXvKslvjgiTKcN7EwZnPJFOXyycim6Tw
MlE654GNKuSev7KhNF+QsrHDfh7ot0cqCbvQJ0r4p5kZIkGwXqOlxPBTpGjzxp3n
IXkF2zqiBhXJue3/f303HJkzEqNW5B2IkrBkdOTOcuIdfSFi1xdTvgMJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVZR37JKM9iBI0L86dFyfhdxQhzMB8GA1UdIwQY
MBaAFCMrcDCJ44ANntKRJHMey6Tpq0VPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTct
YzA2ZDAzNjBlMTE0LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81OWNmNzEtOWRjZS00ZDU0LWFjYTctYzA2ZDAzNjBlMTE0
LzEvSXl0d01JbmpnQTJlMHBFa2N4N0xwT21yUlU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQO0gACI2
q/Y4zbyQSu6MyggmkgMz4s1JRfsAI1vKTqnYGTUa/1GBCY6//sFDrPj3/Nb4aMn5
kBKbliRRsabV2PDhOIMm9QGd2zmQQNKj4xE27OeW4DiGmKhs7A7PJWOrEsy2DqlA
B0o4qr8/+n4s1P1PPQTdwsZbFSx7AzboP/1zA3ahSJqvfDuvnV1JugH0lpdCk9a0
5Fy79Buo6BwfTzXn0fWygp4+PeRHFzM6tFM5NzQOT9rPUXR+MDP7BlCRw6KRRntg
ujiY+Cd2d9z9X+b9zojH1xss8BH6/vjpQ//kYeZmy8uTQYPgiUUNhk7TSfiJEtnH
yixW1cRZ3A6wKA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:38 2026 by rpki-client