Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: ii3WvZ6mnSkt1/MbWy2Kouzhgy8tfZ4F2QaNsLaI6Ck=
Subject key identifier: 23:7B:05:F4:3B:26:82:7A:C9:CA:12:A1:5E:74:29:A0:4A:A6:F1:AC
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019D39E5A8AB933D2CDE0C9A6C127C54952E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 15B5
Signing time: Sun 29 Mar 2026 14:00:45 +0000
Manifest this update: Sun 29 Mar 2026 14:00:45 +0000
Manifest next update: Mon 30 Mar 2026 14:00:45 +0000
Files and hashes: 1: 4nJD6h_AT_Jm3vuCDyt9q7O_3CQ.roa (hash: GQ/gs01dnRvZL+8O2A61zDdVjrGTgR7MaIk+wMIYhGg=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: ICCSOuLYwj28112iPNKuW2UorBgr0F8RfRngtMssERM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:a8:ab:93:3d:2c:de:0c:9a:6c:12:7c:54:95:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Mar 29 14:00:45 2026 GMT
Not After : Mar 30 14:00:45 2026 GMT
Subject: CN=237b05f43b26827ac9ca12a15e7429a04aa6f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:4a:1c:47:54:88:03:54:fb:3c:83:3d:2b:
1b:83:ec:b0:a4:b2:fc:29:16:63:1b:e1:fa:27:20:
bf:1d:bc:3b:a7:a4:82:e8:3b:eb:7b:e5:5d:2e:10:
d7:77:af:18:a2:14:b6:fa:30:c4:bd:86:fe:ae:92:
38:62:7b:53:48:b7:83:0c:60:95:21:5f:fb:02:76:
a0:13:91:c9:7b:8c:40:68:79:fe:af:35:68:db:d5:
dd:a4:5e:95:1b:1a:27:29:7c:7b:70:ad:7f:56:cb:
49:66:13:04:04:17:d7:74:07:81:b6:1c:68:e2:3a:
13:57:a7:71:bc:8b:8c:ec:d6:15:a1:aa:53:6b:d3:
e1:71:49:69:bd:7e:3c:de:ee:b8:09:e7:da:69:48:
db:78:7c:cf:0e:2a:35:40:8c:51:af:9a:29:38:d3:
65:c3:bc:b3:48:54:06:f2:da:0a:56:31:8e:dc:36:
b3:1a:44:c2:82:39:46:01:40:62:8c:77:71:73:0e:
c8:b2:aa:28:e2:f5:90:36:d4:e5:34:8f:a0:fe:02:
82:ff:48:77:42:46:af:09:3b:a9:e5:6d:d5:f0:55:
f3:87:6b:b1:e9:66:00:e9:18:2f:76:23:40:31:c8:
7e:ee:23:51:dd:ec:37:4c:31:3e:1b:de:00:81:c9:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7B:05:F4:3B:26:82:7A:C9:CA:12:A1:5E:74:29:A0:4A:A6:F1:AC
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:da:5a:06:76:1d:69:69:e5:da:a7:77:3d:95:ef:a2:26:
2e:66:b4:fc:c5:73:ab:7b:a7:88:f4:04:c9:92:51:a7:55:fa:
5f:1f:8b:d4:94:16:9e:49:b3:97:9a:67:82:12:c4:2e:8b:e1:
70:a7:48:b4:00:ec:75:dd:94:e4:5f:fc:43:fa:fe:58:70:45:
d1:73:7b:5b:a5:da:87:91:d7:0b:fb:58:e3:d4:f3:e3:56:af:
6c:e5:13:a4:5b:7d:c6:4a:7e:4e:39:3e:5a:d9:e4:d9:b6:4b:
68:eb:df:03:d7:cc:43:78:72:1c:e9:af:be:92:88:5d:07:f6:
cd:f3:b6:50:dd:93:e3:a9:59:bf:7f:55:5f:43:10:db:eb:0d:
af:7f:fb:d0:c5:24:29:86:6e:79:51:fa:e6:8a:0a:ca:5d:0b:
19:d4:a8:fe:8d:1a:d1:6d:da:f2:73:57:bc:38:c1:a6:f7:a6:
2f:51:39:b3:04:3e:31:ca:37:eb:e6:c7:a6:8b:1c:d5:b7:cc:
a2:65:c1:d6:30:1b:1f:b6:1b:18:4f:c8:3d:f8:7f:1c:63:43:
5c:79:f8:30:34:f9:c4:8f:b6:63:65:88:01:ba:12:bf:e4:e6:
2b:24:b4:4f:32:bc:54:06:c4:26:80:d1:ed:35:f5:51:02:65:
92:3b:ce:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055airkz0s3gyabBJ8VJUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NjUyZmU2NTI5NjZkNzI4YTUyN2FlZTZlNDNjNDg1YzY5
MzlmNDUwHhcNMjYwMzI5MTQwMDQ1WhcNMjYwMzMwMTQwMDQ1WjAzMTEwLwYDVQQD
EygyMzdiMDVmNDNiMjY4MjdhYzljYTEyYTE1ZTc0MjlhMDRhYTZmMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJKHEdUiANU+zyDPSsbg+ywpLL8
KRZjG+H6JyC/Hbw7p6SC6Dvre+VdLhDXd68YohS2+jDEvYb+rpI4YntTSLeDDGCV
IV/7AnagE5HJe4xAaHn+rzVo29XdpF6VGxonKXx7cK1/VstJZhMEBBfXdAeBthxo
4joTV6dxvIuM7NYVoapTa9PhcUlpvX483u64CefaaUjbeHzPDio1QIxRr5opONNl
w7yzSFQG8toKVjGO3DazGkTCgjlGAUBijHdxcw7Isqoo4vWQNtTlNI+g/gKC/0h3
QkavCTup5W3V8FXzh2ux6WYA6RgvdiNAMch+7iNR3ew3TDE+G94Agcn9dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCN7BfQ7JoJ6ycoSoV50KaBKpvGsMB8GA1UdIwQY
MBaAFIhlL+ZSlm1yilJ67m5DxIXGk59FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAt
NDk2ZjMwYWM1Mjc1LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAtNDk2ZjMwYWM1Mjc1
LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGraWgZ2
HWlp5dqndz2V76ImLma0/MVzq3uniPQEyZJRp1X6Xx+L1JQWnkmzl5pnghLELovh
cKdItADsdd2U5F/8Q/r+WHBF0XN7W6Xah5HXC/tY49Tz41avbOUTpFt9xkp+Tjk+
Wtnk2bZLaOvfA9fMQ3hyHOmvvpKIXQf2zfO2UN2T46lZv39VX0MQ2+sNr3/70MUk
KYZueVH65ooKyl0LGdSo/o0a0W3a8nNXvDjBpvemL1E5swQ+Mco36+bHposc1bfM
omXB1jAbH7YbGE/IPfh/HGNDXHn4MDT5xI+2Y2WIAboSv+TmKyS0TzK8VAbEJoDR
7TX1UQJlkjvOYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:07 2026 by rpki-client