Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: +OBOmdysm/efWhC3j4GiCHiHn+La2xMIAIiIWfMabLQ=
Subject key identifier: C0:C1:CD:63:D2:66:28:01:CA:AD:2D:C4:21:F7:46:82:3A:14:38:5B
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019D39AECCDDF9198EF13FB6F65EF6BBD9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 13:00:50 +0000
Manifest this update: Sun 29 Mar 2026 13:00:50 +0000
Manifest next update: Mon 30 Mar 2026 13:00:50 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: 1fAXVK79/pCiQS/3jYrP+m5rVysIn5+OCpzMjTSzF9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cc:dd:f9:19:8e:f1:3f:b6:f6:5e:f6:bb:d9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Mar 29 13:00:50 2026 GMT
Not After : Mar 30 13:00:50 2026 GMT
Subject: CN=c0c1cd63d2662801caad2dc421f746823a14385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:1c:31:bb:bd:ae:a1:2f:f5:8d:77:35:82:
fd:e8:4a:fc:78:5e:6b:20:4e:11:35:45:7b:c8:eb:
d9:03:c1:65:78:63:a7:80:9c:e1:76:48:02:e1:bb:
28:29:4a:1f:07:6a:f6:90:6e:77:12:46:05:49:7e:
91:83:9b:f5:11:fd:31:aa:60:2f:fe:5f:91:88:ed:
6e:eb:ac:73:7a:71:3b:5e:32:93:31:fc:95:3e:53:
41:5e:c8:88:2f:86:76:68:71:43:c1:e2:66:4d:69:
d2:cd:5e:20:84:55:72:5d:ad:5a:0d:98:4e:85:87:
aa:a5:19:3d:5a:f4:0f:d1:af:ab:d9:ad:25:e5:32:
af:8d:3a:06:69:3a:65:f3:0a:9f:26:46:2f:e7:05:
c8:de:01:bf:ff:2c:c4:6b:6d:b4:f1:da:24:47:c3:
c6:ee:b3:b4:12:ed:47:0e:52:ba:e5:e4:8e:94:a2:
08:98:b0:33:5c:df:96:b0:71:fd:52:ba:fe:54:49:
a3:2a:f3:e0:50:46:e0:5f:d0:21:2c:e5:45:e4:76:
3a:e8:f3:2f:30:28:93:88:9b:fa:f9:92:a5:36:5e:
ce:b8:fc:71:1e:c1:fa:52:4e:a8:ff:84:d9:b9:63:
c2:1f:8f:4d:2c:ad:78:a3:20:47:90:b2:55:49:1c:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:CD:63:D2:66:28:01:CA:AD:2D:C4:21:F7:46:82:3A:14:38:5B
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:26:57:1d:37:ae:a9:90:de:7e:16:74:d9:54:a2:21:9b:
a9:d8:e2:d7:da:f9:66:7c:eb:d0:ea:2f:29:86:be:0a:f7:81:
99:ac:49:04:d4:18:f6:6c:a7:e9:c0:75:3a:eb:c0:c0:b4:ac:
99:c1:5e:43:67:95:c3:d2:e5:b0:11:fc:1b:fc:09:d1:b5:d0:
36:e9:99:40:0d:bb:61:25:9b:4a:2c:36:17:c8:18:37:ec:27:
61:f1:1a:9a:36:20:d6:d9:5b:e7:f7:33:da:37:a8:82:ff:58:
88:5a:13:71:f9:37:c2:dc:cd:90:7b:23:37:d0:23:d8:54:98:
57:9f:72:dc:e0:5c:b4:78:35:a7:4f:30:1a:b6:19:85:23:ca:
42:9d:7c:aa:91:23:d3:11:f6:38:92:96:48:23:11:0b:51:8e:
ef:8e:2e:33:50:84:2c:04:f2:8b:92:ed:04:78:be:ca:f8:bf:
69:71:14:14:f6:3c:b3:75:9d:c9:fe:4e:5c:55:25:36:c5:a8:
e1:5f:d5:96:b9:0d:83:19:39:72:1a:e5:7b:dc:95:a4:6a:6f:
31:e9:2d:93:1a:6f:47:68:a8:d3:32:33:b8:e3:76:62:97:17:
bc:53:83:de:8f:9b:53:29:97:21:e0:99:fe:fc:3c:d6:4d:e3:
e8:9b:4b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rszd+RmO8T+29l72u9m7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjYwMzI5MTMwMDUwWhcNMjYwMzMwMTMwMDUwWjAzMTEwLwYDVQQD
EyhjMGMxY2Q2M2QyNjYyODAxY2FhZDJkYzQyMWY3NDY4MjNhMTQzODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsgcMbu9rqEv9Y13NYL96Er8eF5r
IE4RNUV7yOvZA8FleGOngJzhdkgC4bsoKUofB2r2kG53EkYFSX6Rg5v1Ef0xqmAv
/l+RiO1u66xzenE7XjKTMfyVPlNBXsiIL4Z2aHFDweJmTWnSzV4ghFVyXa1aDZhO
hYeqpRk9WvQP0a+r2a0l5TKvjToGaTpl8wqfJkYv5wXI3gG//yzEa2208dokR8PG
7rO0Eu1HDlK65eSOlKIImLAzXN+WsHH9Urr+VEmjKvPgUEbgX9AhLOVF5HY66PMv
MCiTiJv6+ZKlNl7OuPxxHsH6Uk6o/4TZuWPCH49NLK14oyBHkLJVSRy5/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDBzWPSZigByq0txCH3RoI6FDhbMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVYmVx03
rqmQ3n4WdNlUoiGbqdji19r5Znzr0OovKYa+CveBmaxJBNQY9myn6cB1OuvAwLSs
mcFeQ2eVw9LlsBH8G/wJ0bXQNumZQA27YSWbSiw2F8gYN+wnYfEamjYg1tlb5/cz
2jeogv9YiFoTcfk3wtzNkHsjN9Aj2FSYV59y3OBctHg1p08wGrYZhSPKQp18qpEj
0xH2OJKWSCMRC1GO744uM1CELATyi5LtBHi+yvi/aXEUFPY8s3Wdyf5OXFUlNsWo
4V/VlrkNgxk5chrle9yVpGpvMektkxpvR2io0zIzuON2YpcXvFOD3o+bUymXIeCZ
/vw81k3j6JtL2Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:30 2026 by rpki-client