Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: SEdxL/LhRkeMLiofzC/Ckqo+kxZxKwJEf05szp3+suk=
Subject key identifier: 42:EA:1C:AB:3E:75:C0:C3:48:79:46:4A:4A:63:F4:DB:90:A7:5B:AF
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 019D382DEEF1E8E53D015B02C896550FF7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:27 +0000
Manifest this update: Sun 29 Mar 2026 06:00:27 +0000
Manifest next update: Mon 30 Mar 2026 06:00:27 +0000
Files and hashes: 1: JOkPA8hTaCex6PevZHvmCNxtsfs.roa (hash: 0uXj8pryRRozEl6lHQb46ndxpU/qwFl9p2os5lcSSok=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: yWzHIO2uiMMAHK/NywBhyYKvaAG5KOupR8U2gBF4Lw4=)
3: w883UTvE9aAPM26F3jGQ91P2JH0.roa (hash: Zo+XYBLtWLmmmelaOVtJ2aF9Vo4DulRMeStZXPCZZiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ee:f1:e8:e5:3d:01:5b:02:c8:96:55:0f:f7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Mar 29 06:00:27 2026 GMT
Not After : Mar 30 06:00:27 2026 GMT
Subject: CN=42ea1cab3e75c0c34879464a4a63f4db90a75baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:09:5b:ea:a7:88:7e:e0:7b:af:c0:22:e9:
c8:f6:34:d1:69:0a:1d:d1:66:3c:a4:f3:f1:f6:47:
34:c0:54:9e:2e:0e:1d:6d:b1:44:29:96:c1:2e:56:
36:cc:5e:e3:02:2d:92:43:d6:9a:ae:35:33:f0:40:
22:bc:41:4b:3f:db:c4:44:36:70:5a:8a:75:af:87:
37:be:2a:40:69:6f:1b:8e:a6:a0:80:4e:ce:0d:c4:
95:5e:41:22:55:fd:94:27:f4:19:31:de:35:da:b2:
c9:fc:3a:71:21:66:76:02:d9:f4:e4:b8:12:b6:07:
ee:de:fe:2e:62:a2:48:d0:9f:cf:72:f6:c7:a8:15:
67:6f:0a:c9:87:d4:0f:17:74:1e:29:a6:bb:b3:45:
b3:bb:fc:81:aa:ff:6f:2c:25:29:77:eb:46:1f:81:
e4:9c:19:84:b1:43:bb:dc:05:91:4c:0d:cc:37:b1:
0c:1c:7d:80:04:05:7d:32:d5:c2:6d:64:d0:b7:82:
db:f8:80:46:26:11:93:ac:ac:98:4d:b3:62:53:d9:
90:ce:d7:db:ec:11:70:e1:1b:bb:8e:2f:94:2f:d2:
cb:42:48:60:ec:87:9f:b8:5c:c3:b6:fc:a6:73:4f:
1d:b9:e9:50:ea:2a:e1:5d:7c:d6:03:4f:ab:9f:bc:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:1C:AB:3E:75:C0:C3:48:79:46:4A:4A:63:F4:DB:90:A7:5B:AF
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a2:7f:f6:ec:69:d5:96:24:d7:01:f0:c3:20:1b:34:9b:0a:
a4:65:b8:07:38:52:e3:41:a3:16:23:af:eb:8e:27:d6:8c:47:
1c:ac:e8:8f:19:cc:64:dc:5e:22:7f:8a:69:33:03:83:9e:5c:
ee:e3:53:6e:e8:38:46:98:bd:d4:2d:b4:fd:2c:ee:59:0a:35:
75:93:07:f9:b6:f7:a0:9e:73:34:0f:e4:63:51:b6:0e:fb:53:
39:ed:e1:75:39:3c:0a:04:cc:fd:db:47:88:8d:1a:64:65:22:
c2:bd:26:57:8a:6f:ac:58:f3:4c:e2:ae:70:85:ca:c2:63:b5:
ef:6e:d2:73:8e:60:d4:be:ba:41:14:08:8e:cb:07:eb:16:39:
13:62:4a:60:cc:6e:1e:60:e5:8d:93:15:4b:bd:e5:94:9a:f1:
1d:87:2f:7e:53:b3:92:00:42:bc:bd:48:5a:16:26:a7:11:ce:
6d:40:23:bf:3b:f3:ba:fb:91:c7:5e:41:11:bf:b2:86:7b:1b:
5d:64:20:b0:7f:9f:66:9a:19:57:b9:4e:7d:6c:f0:9f:47:56:
70:93:9c:59:dc:1e:2c:25:31:95:7e:bf:95:0c:0f:d3:75:24:
3b:0d:c7:fc:ea:4e:05:58:1c:af:00:c0:08:d5:83:d1:ec:fd:
1f:89:49:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Le7x6OU9AVsCyJZVD/e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjEzNzk0OTI3MDUwYjIyNTI1YWI3MDA5MTgzNTQwOGVl
ZTRjNzkwHhcNMjYwMzI5MDYwMDI3WhcNMjYwMzMwMDYwMDI3WjAzMTEwLwYDVQQD
Eyg0MmVhMWNhYjNlNzVjMGMzNDg3OTQ2NGE0YTYzZjRkYjkwYTc1YmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZkJW+qniH7ge6/AIunI9jTRaQod
0WY8pPPx9kc0wFSeLg4dbbFEKZbBLlY2zF7jAi2SQ9aarjUz8EAivEFLP9vERDZw
Wop1r4c3vipAaW8bjqaggE7ODcSVXkEiVf2UJ/QZMd412rLJ/DpxIWZ2Atn05LgS
tgfu3v4uYqJI0J/PcvbHqBVnbwrJh9QPF3QeKaa7s0Wzu/yBqv9vLCUpd+tGH4Hk
nBmEsUO73AWRTA3MN7EMHH2ABAV9MtXCbWTQt4Lb+IBGJhGTrKyYTbNiU9mQztfb
7BFw4Ru7ji+UL9LLQkhg7IefuFzDtvymc08duelQ6irhXXzWA0+rn7yZPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELqHKs+dcDDSHlGSkpj9NuQp1uvMB8GA1UdIwQY
MBaAFIthN5SScFCyJSWrcAkYNUCO7kx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2Mt
ZWMwNWQwMTk1MDM2LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xODEwM2ItYjI3OS00ZGU3LWJjM2MtZWMwNWQwMTk1MDM2
LzEvaTJFM2xKSndVTElsSmF0d0NSZzFRSTd1VEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKJ/9uxp
1ZYk1wHwwyAbNJsKpGW4BzhS40GjFiOv644n1oxHHKzojxnMZNxeIn+KaTMDg55c
7uNTbug4Rpi91C20/SzuWQo1dZMH+bb3oJ5zNA/kY1G2DvtTOe3hdTk8CgTM/dtH
iI0aZGUiwr0mV4pvrFjzTOKucIXKwmO1727Sc45g1L66QRQIjssH6xY5E2JKYMxu
HmDljZMVS73llJrxHYcvflOzkgBCvL1IWhYmpxHObUAjvzvzuvuRx15BEb+yhnsb
XWQgsH+fZpoZV7lOfWzwn0dWcJOcWdweLCUxlX6/lQwP03UkOw3H/OpOBVgcrwDA
CNWD0ez9H4lJcw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:02 2026 by rpki-client