Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: satUMjmIxGzW1LBTqIkaYHfNKi6ss4j89bctgoK9efY=
Subject key identifier: B6:64:E1:5E:97:39:A8:70:F9:A8:FB:B3:8F:F3:68:F9:A5:D7:B1:7C
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 019D371BB00EDFB60BA9FAF812785DC92543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 0711
Signing time: Sun 29 Mar 2026 01:00:54 +0000
Manifest this update: Sun 29 Mar 2026 01:00:54 +0000
Manifest next update: Mon 30 Mar 2026 01:00:54 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: 4KRUebi8WKnfWtJsxtAvTaeqwuI1raALN2Al0AEIXcE=)
2: oBg9GLd04rSGrEFacgZRWrxKe2o.roa (hash: qgYYBQiy/vwO/EgGIM4ixoYVfm4vaImrqtxG63hASRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b0:0e:df:b6:0b:a9:fa:f8:12:78:5d:c9:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Mar 29 01:00:54 2026 GMT
Not After : Mar 30 01:00:54 2026 GMT
Subject: CN=b664e15e9739a870f9a8fbb38ff368f9a5d7b17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:86:a2:3e:70:98:97:2c:b7:11:0b:b3:d0:
c8:36:db:c9:76:5c:b9:f2:09:dd:77:78:ba:4a:de:
2e:70:ac:40:54:b2:18:87:d7:fd:38:0e:b5:b7:3a:
a3:a5:2f:e1:b0:30:be:6a:be:ee:31:a9:f3:f4:b1:
6e:51:53:a0:30:9c:31:5a:0f:6e:f7:34:2a:65:bb:
3e:50:19:14:90:06:9c:2a:5b:f5:34:40:4e:2b:0c:
e6:70:95:bb:bc:3f:62:de:34:d1:a8:3a:1d:68:d7:
2a:ae:71:6d:b7:6e:da:a1:7f:27:4b:30:a2:28:52:
b0:c6:61:15:04:7e:6d:c1:6a:c4:f2:eb:43:3f:62:
7d:95:05:76:bf:38:d6:59:dc:26:af:ac:c0:29:59:
a8:34:f3:2f:6e:49:a3:be:ca:37:b5:fc:1f:a4:10:
f9:3c:22:21:3b:f9:bf:0e:bb:63:1c:02:71:99:c5:
1d:15:c0:a6:5c:fe:aa:bd:1f:b8:6a:79:6e:ab:86:
14:29:75:4e:19:85:b4:1e:fb:04:e6:c1:ff:86:21:
e0:90:a4:32:14:ad:5e:65:8a:86:93:ff:c9:30:a9:
91:77:57:d6:eb:8f:6c:31:3b:46:b6:0d:7c:b0:c7:
55:18:5d:6e:e6:6e:ae:49:1a:fd:22:23:a4:ca:27:
83:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:E1:5E:97:39:A8:70:F9:A8:FB:B3:8F:F3:68:F9:A5:D7:B1:7C
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:19:7b:a7:32:43:2b:7a:8d:e0:6d:71:41:4b:83:c8:61:
73:ee:a2:36:95:8b:24:38:7b:3f:86:cb:46:cd:78:38:ec:f3:
a6:8f:ab:33:fd:06:38:28:d7:9c:c2:07:06:81:49:9f:44:36:
e8:4d:96:32:11:8c:85:06:e8:05:cf:4d:34:b9:e9:ed:bf:21:
10:92:12:b2:53:df:88:a8:8b:09:95:de:88:2c:69:95:b8:6c:
cb:eb:67:3c:08:fc:95:55:3e:ea:6f:b6:01:05:d2:1f:1e:fb:
58:8b:9a:19:27:fc:7d:ec:78:1f:df:82:80:08:fa:bb:4e:63:
24:bd:51:ea:cc:9f:4a:3e:70:1e:56:68:0f:d7:48:45:cd:55:
d6:a6:c4:3f:f8:72:cf:64:96:9e:bc:3c:d6:cd:bf:88:63:50:
2c:46:c9:65:ec:bf:c5:11:a1:22:87:4b:dd:c2:00:16:48:7f:
65:7b:19:2f:ac:65:fe:eb:f2:0d:92:ea:e0:a8:56:e8:a8:16:
8c:8d:e5:75:b0:e2:0a:04:58:f0:94:b6:01:2a:97:95:34:a6:
cd:9d:eb:d3:5f:ff:bc:9f:51:e1:82:14:52:84:52:f6:c0:3e:
fc:61:f0:44:c5:83:eb:f9:22:bc:cf:f4:59:10:7d:de:d8:c4:
17:d0:00:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7AO37YLqfr4EnhdySVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDIzZTFkNzJiMTAzMDcwYmVkNTc5YzQwNTk3ZWQyMGI4
NGMxNmUwHhcNMjYwMzI5MDEwMDU0WhcNMjYwMzMwMDEwMDU0WjAzMTEwLwYDVQQD
EyhiNjY0ZTE1ZTk3MzlhODcwZjlhOGZiYjM4ZmYzNjhmOWE1ZDdiMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6WGoj5wmJcstxELs9DINtvJdly5
8gndd3i6St4ucKxAVLIYh9f9OA61tzqjpS/hsDC+ar7uManz9LFuUVOgMJwxWg9u
9zQqZbs+UBkUkAacKlv1NEBOKwzmcJW7vD9i3jTRqDodaNcqrnFtt27aoX8nSzCi
KFKwxmEVBH5twWrE8utDP2J9lQV2vzjWWdwmr6zAKVmoNPMvbkmjvso3tfwfpBD5
PCIhO/m/DrtjHAJxmcUdFcCmXP6qvR+4anluq4YUKXVOGYW0HvsE5sH/hiHgkKQy
FK1eZYqGk//JMKmRd1fW649sMTtGtg18sMdVGF1u5m6uSRr9IiOkyieDlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZk4V6XOahw+aj7s4/zaPml17F8MB8GA1UdIwQY
MBaAFItCPh1ysQMHC+1XnEBZftILhMFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5Yjgt
YjkwOWVkMjAyYjY0LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82NzU4YTAtM2JiMi00NzVlLWE5YjgtYjkwOWVkMjAyYjY0
LzEvaTBJLUhYS3hBd2NMN1ZlY1FGbC0wZ3VFd1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJoZe6cy
Qyt6jeBtcUFLg8hhc+6iNpWLJDh7P4bLRs14OOzzpo+rM/0GOCjXnMIHBoFJn0Q2
6E2WMhGMhQboBc9NNLnp7b8hEJISslPfiKiLCZXeiCxplbhsy+tnPAj8lVU+6m+2
AQXSHx77WIuaGSf8fex4H9+CgAj6u05jJL1R6syfSj5wHlZoD9dIRc1V1qbEP/hy
z2SWnrw81s2/iGNQLEbJZey/xRGhIodL3cIAFkh/ZXsZL6xl/uvyDZLq4KhW6KgW
jI3ldbDiCgRY8JS2ASqXlTSmzZ3r01//vJ9R4YIUUoRS9sA+/GHwRMWD6/kivM/0
WRB93tjEF9AASA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:57 2026 by rpki-client