Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: cqg+MRWHttMejYD9b9NF0WtGejEd341tDatbmxeEe9c=
Subject key identifier: 7B:0D:35:5F:3B:29:40:3D:EC:4F:52:AF:20:35:E9:43:16:DE:15:9D
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019D37894FE9F98A1FB8ECC981E7E8F93021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: Hf2/N7MFk90gZImeqjwJ3IFttGELUnKuZg8R5VOzhlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4f:e9:f9:8a:1f:b8:ec:c9:81:e7:e8:f9:30:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=7b0d355f3b29403dec4f52af2035e94316de159d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:a0:91:85:d4:ae:5a:c3:95:4e:22:c8:1f:
f8:5e:36:a1:0a:9e:dd:c3:6a:85:24:8c:9b:9b:01:
82:c5:73:64:af:ea:26:23:02:90:6a:8d:46:e7:12:
91:4f:0b:2c:83:0d:f3:bc:39:a4:98:e5:d5:7e:78:
ba:5c:d5:5b:9d:f6:84:26:72:05:a2:27:db:49:09:
20:75:0a:c8:08:e1:bc:5f:80:84:19:8f:2c:c9:e3:
fb:e7:48:71:7a:42:af:17:67:7c:af:51:95:e9:2d:
2c:69:6c:9a:ab:db:10:8f:e7:44:33:4d:d1:8f:09:
bf:5e:26:bf:3b:dd:aa:5b:2f:80:7d:7f:e5:22:23:
38:9a:6f:a7:05:7c:a5:a3:9e:ae:02:c5:b5:63:bb:
fd:79:b6:43:a6:37:47:87:5e:c2:29:34:16:7d:fb:
bb:2f:c0:59:fc:e9:40:ba:8e:8b:e9:11:d5:54:87:
a1:72:2b:ca:3d:fa:b8:b6:4b:b5:d1:1c:09:51:a3:
61:fc:25:88:86:b0:49:ab:6d:be:7f:2f:9b:64:41:
02:99:5f:59:07:78:f4:c4:6d:7f:a1:44:41:b1:ba:
69:d7:d4:82:12:10:87:d9:8a:ec:26:77:4e:b7:04:
8b:1f:df:e5:af:24:ec:8e:79:a7:89:ea:92:b9:d3:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:35:5F:3B:29:40:3D:EC:4F:52:AF:20:35:E9:43:16:DE:15:9D
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:63:8f:55:d5:74:3c:e6:58:29:cd:c4:80:3d:3e:f4:b3:81:
84:f6:08:1c:2f:70:d5:b1:ad:b1:50:d6:87:0c:12:f4:80:58:
35:a0:e4:68:c2:41:2e:71:82:c6:ab:b9:fd:8b:55:bc:75:77:
53:e1:57:14:db:89:c8:4a:13:0a:33:47:5a:f9:f7:fb:41:63:
94:ee:6e:03:c3:ac:e4:40:97:61:c0:8f:26:fa:e1:88:d5:56:
2c:1d:19:37:84:4e:84:23:3a:35:6b:40:65:86:17:db:ea:ac:
01:b8:a8:4b:b6:35:35:f8:74:f5:dd:7b:60:f1:8b:9c:72:09:
a2:03:a2:eb:70:fa:38:b9:d2:10:e9:b8:cb:8a:35:07:1d:89:
98:82:ab:84:47:6e:d5:83:61:25:99:d8:a5:83:59:6a:2f:e7:
9c:72:94:82:22:28:a8:a3:1b:6d:35:0d:84:7c:79:a7:bb:7a:
c9:07:0d:16:81:41:07:d9:66:53:1a:cf:98:55:08:39:77:e9:
5e:ef:c4:83:eb:ce:d4:dd:9a:75:f1:c0:c2:7d:48:8b:ac:6a:
d9:bd:46:d7:c7:56:35:3d:38:74:a3:28:6f:0d:0b:09:3a:30:
3b:1f:79:ed:53:cd:ca:9b:b6:6d:a7:a0:7a:78:a7:24:7b:d7:
1f:d1:2a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iU/p+YofuOzJgefo+TAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OGQ0NWNmZTM0ODJiOGY2MWRhZTAwMGIwMDdhNDY3ZWNk
ZDRlZTYwHhcNMjYwMzI5MDMwMDM4WhcNMjYwMzMwMDMwMDM4WjAzMTEwLwYDVQQD
Eyg3YjBkMzU1ZjNiMjk0MDNkZWM0ZjUyYWYyMDM1ZTk0MzE2ZGUxNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL2gkYXUrlrDlU4iyB/4XjahCp7d
w2qFJIybmwGCxXNkr+omIwKQao1G5xKRTwssgw3zvDmkmOXVfni6XNVbnfaEJnIF
oifbSQkgdQrICOG8X4CEGY8syeP750hxekKvF2d8r1GV6S0saWyaq9sQj+dEM03R
jwm/Xia/O92qWy+AfX/lIiM4mm+nBXylo56uAsW1Y7v9ebZDpjdHh17CKTQWffu7
L8BZ/OlAuo6L6RHVVIehcivKPfq4tku10RwJUaNh/CWIhrBJq22+fy+bZEECmV9Z
B3j0xG1/oURBsbpp19SCEhCH2YrsJndOtwSLH9/lryTsjnmnieqSudMVBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsNNV87KUA97E9SryA16UMW3hWdMB8GA1UdIwQY
MBaAFJSNRc/jSCuPYdrgALAHpGfs3U7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAt
NDJkYWZiNGI1MWQyLzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mODliMmUtNTNhMy00MTU3LWE5NjAtNDJkYWZiNGI1MWQy
LzEvbEkxRnotTklLNDloMnVBQXNBZWtaLXpkVHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGOPVdV0
POZYKc3EgD0+9LOBhPYIHC9w1bGtsVDWhwwS9IBYNaDkaMJBLnGCxqu5/YtVvHV3
U+FXFNuJyEoTCjNHWvn3+0FjlO5uA8Os5ECXYcCPJvrhiNVWLB0ZN4ROhCM6NWtA
ZYYX2+qsAbioS7Y1Nfh09d17YPGLnHIJogOi63D6OLnSEOm4y4o1Bx2JmIKrhEdu
1YNhJZnYpYNZai/nnHKUgiIoqKMbbTUNhHx5p7t6yQcNFoFBB9lmUxrPmFUIOXfp
Xu/Eg+vO1N2adfHAwn1Ii6xq2b1G18dWNT04dKMobw0LCTowOx957VPNypu2baeg
eninJHvXH9EqHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:05 2026 by rpki-client