Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: 3/tQNlTXNep4LN/47GWtiUGvBb1qKMAo2ubTziSqMc0=
Subject key identifier: 4F:F5:89:CD:4C:08:98:5D:DD:F3:5F:AB:C5:52:78:86:0F:13:9D:FE
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 019D37F75FD5655CDF2CA5FBFED673BFF5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:51 +0000
Manifest this update: Sun 29 Mar 2026 05:00:51 +0000
Manifest next update: Mon 30 Mar 2026 05:00:51 +0000
Files and hashes: 1: 2TejQ9qdrUejplvg2pRdV5ySwCU.roa (hash: z2B5UlkMWFYxdzwShhvSwDpIukaDaNgAut2hvjv+b1A=)
2: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: cQTuHPXLP88Ed94ggpz1m9tXX5KdqdSQDTQwsPjiZV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:5f:d5:65:5c:df:2c:a5:fb:fe:d6:73:bf:f5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Mar 29 05:00:51 2026 GMT
Not After : Mar 30 05:00:51 2026 GMT
Subject: CN=4ff589cd4c08985dddf35fabc55278860f139dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:2a:b3:cc:50:38:f0:00:d4:a3:2f:a9:98:
66:bf:b8:20:24:5d:aa:36:ca:7c:17:fa:3d:9f:db:
65:17:5e:6e:0d:45:14:5e:9f:6e:8e:25:1a:16:77:
5e:90:ad:45:aa:64:ed:66:25:93:c6:a3:ff:9f:1b:
fa:8a:21:3d:06:f0:e2:d9:59:0a:20:fc:03:4d:2f:
96:a2:7f:ea:75:2b:a5:02:4e:9d:ae:5a:35:de:e4:
62:aa:52:ed:81:9d:25:23:8f:e0:d5:49:30:65:78:
84:11:00:f1:c2:99:23:f3:67:70:d6:69:73:17:43:
95:cf:ae:f8:28:d2:9e:da:dc:6d:b3:3b:c8:21:fb:
a8:dc:20:bc:b6:ea:cf:94:74:e3:91:bb:db:5b:8f:
fd:6b:b3:3d:e6:0a:34:d0:13:85:19:78:64:19:c8:
a3:8f:9e:a2:b6:27:0b:95:04:ca:2f:23:83:90:78:
b4:68:fc:5e:4f:da:3a:01:d0:5f:ea:55:c9:4d:2f:
41:af:dd:02:62:02:08:4c:68:30:9c:1b:a9:c9:f9:
ae:91:5f:f4:7a:8a:f5:6b:f9:45:51:43:c4:59:95:
4c:82:2a:06:94:67:e1:30:ef:81:97:6a:32:9a:8a:
3e:0f:c6:b3:4e:fb:7d:72:6e:0a:71:47:39:af:8c:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:89:CD:4C:08:98:5D:DD:F3:5F:AB:C5:52:78:86:0F:13:9D:FE
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:43:a8:5f:ba:6c:07:2c:d8:c1:2e:4d:44:48:2e:be:8c:c7:
15:dd:c1:cb:8e:3e:1c:89:1b:77:6c:e0:cd:e2:01:e8:38:8b:
04:13:f5:53:19:2d:ea:6c:cc:95:1b:9f:46:04:04:84:f4:3e:
c7:ab:bb:84:f8:b5:fc:80:6c:2b:eb:3c:cf:60:c0:ec:79:cc:
a6:15:e6:ed:95:0b:6a:4b:db:c7:14:6f:c5:f8:ff:b7:ad:db:
25:a6:19:e8:cb:03:e7:e6:ad:c1:34:15:f4:23:93:0b:3c:96:
f8:e6:04:dc:09:6c:56:8c:7d:d9:d3:c1:2e:9e:42:10:bb:59:
d2:f0:39:8c:0e:92:9b:aa:bd:83:9e:ed:c0:4b:7f:64:99:e6:
e9:95:88:81:83:5b:49:e4:e4:54:87:49:e2:24:41:68:58:27:
c2:d8:3c:03:90:78:e2:5e:4b:ae:8e:43:b2:85:58:ad:c6:8b:
c1:51:14:81:70:92:fc:69:85:02:44:a2:af:fe:a1:89:d9:ef:
71:8f:73:7a:4d:fe:d6:e0:48:cc:b3:30:ac:9c:49:e7:ea:ba:
bd:9f:1c:c2:47:20:fb:59:e1:9e:ec:24:36:eb:ad:a4:6d:09:
0f:5a:a9:b1:52:1d:9e:2f:0b:f1:fb:3c:fb:91:92:82:7d:d7:
66:b4:b2:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0391/VZVzfLKX7/tZzv/X1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMGM3MGQzNmUwMTNiMDdlNGU2ZDhlYzNlYTRlZTQxM2I0
YWFhOTgwHhcNMjYwMzI5MDUwMDUxWhcNMjYwMzMwMDUwMDUxWjAzMTEwLwYDVQQD
Eyg0ZmY1ODljZDRjMDg5ODVkZGRmMzVmYWJjNTUyNzg4NjBmMTM5ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWMqs8xQOPAA1KMvqZhmv7ggJF2q
Nsp8F/o9n9tlF15uDUUUXp9ujiUaFndekK1FqmTtZiWTxqP/nxv6iiE9BvDi2VkK
IPwDTS+Won/qdSulAk6drlo13uRiqlLtgZ0lI4/g1UkwZXiEEQDxwpkj82dw1mlz
F0OVz674KNKe2txtszvIIfuo3CC8turPlHTjkbvbW4/9a7M95go00BOFGXhkGcij
j56iticLlQTKLyODkHi0aPxeT9o6AdBf6lXJTS9Br90CYgIITGgwnBupyfmukV/0
eor1a/lFUUPEWZVMgioGlGfhMO+Bl2oymoo+D8azTvt9cm4KcUc5r4yl/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/1ic1MCJhd3fNfq8VSeIYPE53+MB8GA1UdIwQY
MBaAFCAMcNNuATsH5ObY7D6k7kE7SqqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUt
MTU4MDNmZmIxNzQ2LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kNWVlMGQtNDc1Zi00MWQ3LTljMjUtMTU4MDNmZmIxNzQ2
LzEvSUF4dzAyNEJPd2ZrNXRqc1BxVHVRVHRLcXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkOoX7ps
ByzYwS5NREguvozHFd3By44+HIkbd2zgzeIB6DiLBBP1Uxkt6mzMlRufRgQEhPQ+
x6u7hPi1/IBsK+s8z2DA7HnMphXm7ZULakvbxxRvxfj/t63bJaYZ6MsD5+atwTQV
9COTCzyW+OYE3AlsVox92dPBLp5CELtZ0vA5jA6Sm6q9g57twEt/ZJnm6ZWIgYNb
SeTkVIdJ4iRBaFgnwtg8A5B44l5Lro5DsoVYrcaLwVEUgXCS/GmFAkSir/6hidnv
cY9zek3+1uBIzLMwrJxJ5+q6vZ8cwkcg+1nhnuwkNuutpG0JD1qpsVIdni8L8fs8
+5GSgn3XZrSybg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:43 2026 by rpki-client