Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
File: iWxjRnXxe_ak81-hi7hVYBoYpbU.mft (raw, json)
Hash identifier: ozO9aMQJvMpzAymRvpPWqdkQf2Rh2UR9VUr9fgebiM0=
Subject key identifier: CC:99:84:CF:9F:55:5F:D9:1B:FF:4C:10:36:8D:2E:F2:92:69:CA:A5
Authority key identifier: 89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
Certificate issuer: /CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Certificate serial: 019D378994F0D7C418FB82F698C746E3267F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
Manifest number: 0241
Signing time: Sun 29 Mar 2026 03:00:56 +0000
Manifest this update: Sun 29 Mar 2026 03:00:56 +0000
Manifest next update: Mon 30 Mar 2026 03:00:56 +0000
Files and hashes: 1: YR3MJhayMOIcEgDa7WoFB8LAJdE.roa (hash: DbVHQlQH+oPthovWmJ2MpgFJQxLVITiApa5PfX6MwT0=)
2: iWxjRnXxe_ak81-hi7hVYBoYpbU.crl (hash: /X3z72QYzTwEaP1et59E3MbJ9DqrVhIPVtKZpyWGtDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:94:f0:d7:c4:18:fb:82:f6:98:c7:46:e3:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896c634675f17bf6a4f35fa18bb855601a18a5b5
Validity
Not Before: Mar 29 03:00:56 2026 GMT
Not After : Mar 30 03:00:56 2026 GMT
Subject: CN=cc9984cf9f555fd91bff4c10368d2ef29269caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:62:85:82:e5:12:3e:cf:d0:95:44:2b:3a:
c9:56:90:f6:41:bf:04:2e:cb:ad:c3:52:4c:95:84:
0f:9a:27:e7:ee:a5:6f:92:f7:a7:54:b0:2c:e4:eb:
ea:29:41:f6:2f:34:d6:44:c0:ba:ef:75:2b:16:85:
55:44:c4:6b:5f:20:a1:43:f5:da:ae:39:57:d2:2e:
e4:11:58:86:39:82:ee:7e:04:fe:ae:a6:39:a1:26:
98:be:22:3c:fd:9e:c5:54:b3:97:39:3e:48:21:84:
ec:25:67:7a:2d:96:2c:67:31:d4:16:45:fe:28:c2:
be:8a:2c:21:5c:00:00:dc:99:ff:48:50:8d:ea:f9:
5a:d5:de:ac:50:94:99:8e:40:ec:c3:ac:b5:2a:c6:
93:97:eb:13:e8:af:35:77:88:65:8e:6a:42:47:1a:
b7:27:82:39:3a:27:7d:92:b7:8b:50:0d:af:1e:ff:
44:39:5a:41:92:38:2e:16:8a:6f:fc:01:45:5e:5c:
de:de:dd:83:71:17:e1:54:cd:d0:9a:4d:8b:8a:63:
05:e7:57:7e:03:0f:58:c5:1f:17:27:32:73:9f:18:
da:d1:c7:06:c4:d5:99:c1:40:4f:cf:3a:09:e2:ea:
4f:57:c3:63:d5:2f:c2:19:90:27:79:da:02:ff:6b:
0e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:84:CF:9F:55:5F:D9:1B:FF:4C:10:36:8D:2E:F2:92:69:CA:A5
X509v3 Authority Key Identifier:
keyid:89:6C:63:46:75:F1:7B:F6:A4:F3:5F:A1:8B:B8:55:60:1A:18:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWxjRnXxe_ak81-hi7hVYBoYpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f45c5c-b645-4be4-a74c-320e1459a40a/1/iWxjRnXxe_ak81-hi7hVYBoYpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:37:39:cb:94:dc:64:33:d5:05:d9:19:7d:05:24:96:19:42:
7a:4d:03:24:43:10:b8:c1:1a:c3:2b:7a:ad:9d:05:b4:37:0e:
4a:c5:67:97:f1:e0:b3:82:7f:22:85:f7:1e:e0:e5:62:05:41:
8e:e1:ad:26:ac:1e:ff:4a:b5:49:e7:92:81:0a:66:66:00:17:
2c:22:10:a5:51:77:13:05:6f:ae:f9:fa:47:aa:08:3e:d9:82:
ff:4b:08:e7:d9:02:91:f9:c3:f7:c7:8e:5d:80:1f:30:56:2d:
14:64:01:c2:37:12:c9:88:51:31:54:5f:e9:1b:93:04:ca:31:
2f:a3:61:c9:fe:de:21:78:21:33:16:68:36:c0:38:2f:7e:a8:
16:28:e9:2e:ea:45:f3:59:37:a4:31:7e:83:3f:59:a3:39:a7:
ec:a7:eb:7f:8c:8a:63:98:3a:c4:0f:c4:65:a6:f1:0f:37:fe:
33:27:68:e2:44:4b:97:b3:8e:8e:48:a3:b2:d7:17:04:84:98:
14:0a:80:9c:68:4b:be:b5:f8:21:fb:90:93:e4:e3:99:4b:91:
e4:cf:fd:82:c0:aa:71:f7:5f:bf:c3:fc:0d:52:2b:14:e0:49:
01:0d:11:35:d1:9d:83:09:d0:51:f2:68:1d:18:9e:e6:06:4a:
d2:30:fa:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iZTw18QY+4L2mMdG4yZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmM2MzQ2NzVmMTdiZjZhNGYzNWZhMThiYjg1NTYwMWEx
OGE1YjUwHhcNMjYwMzI5MDMwMDU2WhcNMjYwMzMwMDMwMDU2WjAzMTEwLwYDVQQD
EyhjYzk5ODRjZjlmNTU1ZmQ5MWJmZjRjMTAzNjhkMmVmMjkyNjljYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mdihYLlEj7P0JVEKzrJVpD2Qb8E
Lsutw1JMlYQPmifn7qVvkvenVLAs5OvqKUH2LzTWRMC673UrFoVVRMRrXyChQ/Xa
rjlX0i7kEViGOYLufgT+rqY5oSaYviI8/Z7FVLOXOT5IIYTsJWd6LZYsZzHUFkX+
KMK+iiwhXAAA3Jn/SFCN6vla1d6sUJSZjkDsw6y1KsaTl+sT6K81d4hljmpCRxq3
J4I5Oid9kreLUA2vHv9EOVpBkjguFopv/AFFXlze3t2DcRfhVM3Qmk2LimMF51d+
Aw9YxR8XJzJznxja0ccGxNWZwUBPzzoJ4upPV8Nj1S/CGZAnedoC/2sO8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyZhM+fVV/ZG/9MEDaNLvKSacqlMB8GA1UdIwQY
MBaAFIlsY0Z18Xv2pPNfoYu4VWAaGKW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVd4alJuWHhlX2FrODEtaGk3aFZZQm9ZcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mNDVjNWMtYjY0NS00YmU0LWE3NGMt
MzIwZTE0NTlhNDBhLzEvaVd4alJuWHhlX2FrODEtaGk3aFZZQm9ZcGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mNDVjNWMtYjY0NS00YmU0LWE3NGMtMzIwZTE0NTlhNDBh
LzEvaVd4alJuWHhlX2FrODEtaGk3aFZZQm9ZcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDc5y5Tc
ZDPVBdkZfQUklhlCek0DJEMQuMEawyt6rZ0FtDcOSsVnl/Hgs4J/IoX3HuDlYgVB
juGtJqwe/0q1SeeSgQpmZgAXLCIQpVF3EwVvrvn6R6oIPtmC/0sI59kCkfnD98eO
XYAfMFYtFGQBwjcSyYhRMVRf6RuTBMoxL6Nhyf7eIXghMxZoNsA4L36oFijpLupF
81k3pDF+gz9Zozmn7Kfrf4yKY5g6xA/EZabxDzf+Mydo4kRLl7OOjkijstcXBISY
FAqAnGhLvrX4IfuQk+TjmUuR5M/9gsCqcfdfv8P8DVIrFOBJAQ0RNdGdgwnQUfJo
HRie5gZK0jD63Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:18 2026 by rpki-client