Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: N7BGh223Dm/JALhOeMPedB63bmph7AHQYHqAUDxgpJA=
Subject key identifier: 81:D7:55:F1:E8:D1:4A:BB:94:29:D6:08:88:5E:5D:17:CD:BE:03:CD
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019D36E43881D93D6B3CFCB6DEF8DDAF7428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 09C2
Signing time: Sun 29 Mar 2026 00:00:19 +0000
Manifest this update: Sun 29 Mar 2026 00:00:19 +0000
Manifest next update: Mon 30 Mar 2026 00:00:19 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: xh5N/gwtP8RvmX8GmLGd08ZTInR+uhEGmdNz6m2J7h8=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:38:81:d9:3d:6b:3c:fc:b6:de:f8:dd:af:74:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Mar 29 00:00:19 2026 GMT
Not After : Mar 30 00:00:19 2026 GMT
Subject: CN=81d755f1e8d14abb9429d608885e5d17cdbe03cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:84:0d:4b:f7:ea:40:42:ff:fd:d1:e0:e2:
d0:85:1e:11:af:82:a5:3a:15:35:8e:c3:03:b6:79:
41:4c:74:79:0a:04:8a:32:7b:b4:1b:3e:0f:a0:5a:
3c:01:93:5f:09:c8:98:60:b2:75:29:e1:66:6d:a6:
4a:8f:ca:d3:fa:b8:42:c2:9c:42:c9:9d:0a:d0:06:
50:d7:76:1b:44:7a:c3:ae:5a:be:34:12:3c:04:f8:
9b:58:04:0c:f7:7d:9f:dc:be:60:01:4e:9b:16:f6:
55:ad:2c:76:25:39:b3:90:3e:17:cb:ca:79:d3:73:
40:75:90:a9:01:e7:f3:1a:ea:7f:69:af:c7:9e:24:
0e:b6:34:f8:24:e6:90:b2:93:14:aa:bc:1e:2e:bb:
c8:ab:a9:7b:a1:e5:09:e6:8a:64:f0:14:17:e3:3a:
df:a3:b5:d3:2f:ff:7d:68:ea:70:13:8e:88:3d:e8:
99:c1:5d:92:5c:40:52:f9:a1:51:0f:04:b4:31:44:
20:be:73:94:83:f8:9a:24:20:86:5e:00:bc:55:47:
57:61:5d:79:32:f9:db:0f:0e:8a:e5:cd:a7:bb:be:
b0:74:ca:3f:32:a7:1a:98:8b:c2:07:e6:9b:8f:f2:
07:12:3e:7d:80:40:8a:94:36:70:0b:0d:de:0c:08:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:55:F1:E8:D1:4A:BB:94:29:D6:08:88:5E:5D:17:CD:BE:03:CD
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5b:c0:97:3b:64:f0:21:57:62:fb:7f:53:cd:68:8b:33:a8:
67:e8:a0:fa:12:51:69:c8:bb:8e:cc:a5:e5:75:47:7a:6f:1c:
d8:6a:a7:b5:cf:ef:90:ba:6b:2b:73:3c:aa:c4:f8:90:b5:85:
e3:21:d4:83:b2:0d:e3:f7:d5:93:ea:b5:a7:3d:63:eb:60:71:
cc:c8:10:1a:50:33:9c:32:fc:f6:2a:c4:cc:2c:f6:0d:1c:d0:
c9:97:1d:9d:72:a7:56:a3:4a:b7:7e:77:18:85:68:e1:e3:5c:
2a:97:c9:3e:64:96:97:ed:21:4e:5f:c1:9c:64:cf:8e:78:c6:
24:44:3b:42:3e:74:33:1b:55:72:db:7b:d8:31:a6:03:34:fc:
25:49:87:91:57:f8:1f:fb:72:cb:7b:07:c3:26:45:d0:16:1f:
02:3a:f4:39:2f:7f:9b:49:e2:62:75:57:96:a2:fc:ac:6c:ba:
99:4c:a1:7f:4c:4f:4b:0b:38:d7:f5:22:b0:33:d0:a0:d4:7d:
d5:99:e5:be:d6:69:56:5f:8c:45:cc:92:f6:d5:38:93:0e:5e:
91:ad:e0:b7:25:3b:ba:dd:2a:5c:09:65:64:89:70:17:c2:bb:
6f:3c:b8:c8:8b:e3:4e:92:45:c3:e3:48:2c:c6:12:48:48:14:
6d:f2:a2:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ025DiB2T1rPPy23vjdr3QoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYwMzI5MDAwMDE5WhcNMjYwMzMwMDAwMDE5WjAzMTEwLwYDVQQD
Eyg4MWQ3NTVmMWU4ZDE0YWJiOTQyOWQ2MDg4ODVlNWQxN2NkYmUwM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4+EDUv36kBC//3R4OLQhR4Rr4Kl
OhU1jsMDtnlBTHR5CgSKMnu0Gz4PoFo8AZNfCciYYLJ1KeFmbaZKj8rT+rhCwpxC
yZ0K0AZQ13YbRHrDrlq+NBI8BPibWAQM932f3L5gAU6bFvZVrSx2JTmzkD4Xy8p5
03NAdZCpAefzGup/aa/HniQOtjT4JOaQspMUqrweLrvIq6l7oeUJ5opk8BQX4zrf
o7XTL/99aOpwE46IPeiZwV2SXEBS+aFRDwS0MUQgvnOUg/iaJCCGXgC8VUdXYV15
MvnbDw6K5c2nu76wdMo/MqcamIvCB+abj/IHEj59gECKlDZwCw3eDAjutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHXVfHo0Uq7lCnWCIheXRfNvgPNMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFvAlztk
8CFXYvt/U81oizOoZ+ig+hJRaci7jsyl5XVHem8c2Gqntc/vkLprK3M8qsT4kLWF
4yHUg7IN4/fVk+q1pz1j62BxzMgQGlAznDL89irEzCz2DRzQyZcdnXKnVqNKt353
GIVo4eNcKpfJPmSWl+0hTl/BnGTPjnjGJEQ7Qj50MxtVctt72DGmAzT8JUmHkVf4
H/tyy3sHwyZF0BYfAjr0OS9/m0niYnVXlqL8rGy6mUyhf0xPSws41/UisDPQoNR9
1ZnlvtZpVl+MRcyS9tU4kw5eka3gtyU7ut0qXAllZIlwF8K7bzy4yIvjTpJFw+NI
LMYSSEgUbfKieQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:23 2026 by rpki-client