Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: hB8SeceUgStRvtbql1XS7UDJXyN4xNGWO5GV4Z3KCfw=
Subject key identifier: 92:F1:2E:01:39:BC:13:14:9E:88:79:F8:CF:F4:76:46:C3:08:A3:81
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019D382DD195AB391CEEED852CAFF1DB53AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 09B1
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: FRVaRZ6+pbhU+mIi8pwjfHMB++mBA0n7EpaHOoAQXiA=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d1:95:ab:39:1c:ee:ed:85:2c:af:f1:db:53:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=92f12e0139bc13149e8879f8cff47646c308a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:d5:1e:e5:92:a4:18:b7:6c:50:1d:43:d6:
c0:11:d1:83:53:02:13:5f:c4:6f:d6:26:fe:d2:89:
78:80:fd:1a:29:66:e0:cc:b9:1f:77:9b:78:c0:c8:
f9:d4:58:2a:60:33:d0:02:4d:a0:d2:d2:9c:d9:0e:
c5:8c:f0:7e:e5:42:ac:32:88:b4:1d:ea:e0:9a:cc:
43:2a:65:26:ae:90:0b:83:ad:3c:95:10:c7:6f:4c:
db:30:24:16:d1:91:81:d3:1a:ae:e9:e8:72:40:82:
80:82:47:ac:74:3f:ec:0d:04:17:20:14:38:8a:ca:
b5:b2:3e:5b:0e:af:4b:de:08:41:b1:a9:07:0b:20:
56:ce:d6:91:02:a4:fa:47:cc:e3:49:ba:9b:06:57:
8c:5c:9b:c3:36:c5:76:42:78:13:e4:72:3a:d7:ac:
16:60:c3:aa:4b:5e:40:62:e3:94:a3:df:16:78:a7:
55:c3:79:24:08:23:83:4f:09:2a:f3:91:21:0b:0a:
4a:c3:b6:a0:39:73:d8:3c:66:79:a7:98:b2:93:4c:
15:4d:54:45:19:c9:ed:30:d8:35:e0:6d:d2:6b:02:
96:d0:ce:60:44:ef:8c:0b:00:06:47:ce:82:c3:22:
02:09:83:eb:5d:f8:37:6b:dc:88:9c:2b:b5:ea:6d:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F1:2E:01:39:BC:13:14:9E:88:79:F8:CF:F4:76:46:C3:08:A3:81
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0e:e8:cd:dd:e7:25:9d:af:71:07:e3:cd:9a:d2:6d:dd:69:
ed:d8:62:75:4c:40:fb:d7:c1:d0:ae:85:21:f1:9c:f9:b1:d4:
ce:2f:76:fe:9c:1c:80:91:11:60:99:dd:6d:e6:63:2a:e4:a4:
90:58:de:83:28:bc:1f:64:03:4f:0c:8b:9d:a9:6b:8b:ad:81:
d2:1b:e9:d7:06:51:31:54:b6:c8:9f:34:61:1d:66:78:b1:7c:
d0:5c:fe:14:53:f9:d7:54:b6:cd:c3:24:bb:ab:ed:4f:3c:5d:
2f:22:58:e7:4d:80:41:77:db:6b:f7:43:c6:b5:20:c9:ba:14:
3c:07:24:e3:a8:82:71:ae:85:44:f6:55:a8:09:a3:1d:b5:78:
43:54:d0:ab:d5:df:33:ea:22:89:27:d4:bc:67:a5:ea:11:9c:
33:f5:da:a3:5c:97:f1:b1:2f:d0:14:80:16:63:a4:f8:5d:f5:
77:6a:23:6f:37:0c:5d:b9:86:7e:c1:7b:1e:0e:32:7f:7f:db:
88:dd:63:bb:7b:14:ac:95:31:7c:03:d8:e5:1b:72:74:83:95:
46:09:ce:72:2f:2f:ed:17:ce:35:96:2b:09:e0:ce:dd:bd:da:
21:4d:f1:fa:ed:b1:5d:d7:cf:98:0e:8b:9b:ae:3c:10:02:7e:
ca:c9:73:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LdGVqzkc7u2FLK/x21OqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy
OTM3ODIwHhcNMjYwMzI5MDYwMDE5WhcNMjYwMzMwMDYwMDE5WjAzMTEwLwYDVQQD
Eyg5MmYxMmUwMTM5YmMxMzE0OWU4ODc5ZjhjZmY0NzY0NmMzMDhhMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTVHuWSpBi3bFAdQ9bAEdGDUwIT
X8Rv1ib+0ol4gP0aKWbgzLkfd5t4wMj51FgqYDPQAk2g0tKc2Q7FjPB+5UKsMoi0
HergmsxDKmUmrpALg608lRDHb0zbMCQW0ZGB0xqu6ehyQIKAgkesdD/sDQQXIBQ4
isq1sj5bDq9L3ghBsakHCyBWztaRAqT6R8zjSbqbBleMXJvDNsV2QngT5HI616wW
YMOqS15AYuOUo98WeKdVw3kkCCODTwkq85EhCwpKw7agOXPYPGZ5p5iyk0wVTVRF
GcntMNg14G3SawKW0M5gRO+MCwAGR86CwyICCYPrXfg3a9yInCu16m3+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLxLgE5vBMUnoh5+M/0dkbDCKOBMB8GA1UdIwQY
MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct
YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm
LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg7ozd3n
JZ2vcQfjzZrSbd1p7dhidUxA+9fB0K6FIfGc+bHUzi92/pwcgJERYJndbeZjKuSk
kFjegyi8H2QDTwyLnalri62B0hvp1wZRMVS2yJ80YR1meLF80Fz+FFP511S2zcMk
u6vtTzxdLyJY502AQXfba/dDxrUgyboUPAck46iCca6FRPZVqAmjHbV4Q1TQq9Xf
M+oiiSfUvGel6hGcM/Xao1yX8bEv0BSAFmOk+F31d2ojbzcMXbmGfsF7Hg4yf3/b
iN1ju3sUrJUxfAPY5RtydIOVRgnOci8v7RfONZYrCeDO3b3aIU3x+u2xXdfPmA6L
m648EAJ+yslzDw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:04 2026 by rpki-client