Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: s5H1NYJ8dZjD/72n6nUz8s0nGOHmQZOLahW4+0Fi3ms=
Subject key identifier: 8B:C9:43:C4:86:09:F1:74:20:84:AD:1E:0D:89:58:80:A3:F8:B7:9D
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019C7E5B294759A4591FAF289D2E8F8998C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 141B
Signing time: Sat 21 Feb 2026 04:00:29 +0000
Manifest this update: Sat 21 Feb 2026 04:00:29 +0000
Manifest next update: Sun 22 Feb 2026 04:00:29 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: lVv4mDxm7aGKbaoPFyv0S9cDxM7ezl/Y72hp+oAjqkc=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7e:5b:29:47:59:a4:59:1f:af:28:9d:2e:8f:89:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Feb 21 04:00:29 2026 GMT
Not After : Feb 22 04:00:29 2026 GMT
Subject: CN=8bc943c48609f1742084ad1e0d895880a3f8b79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:c1:03:a7:bb:cf:9c:1c:38:c2:d3:3f:06:
81:c3:85:78:1f:e1:76:ec:49:33:8c:76:80:31:8e:
ef:87:9d:78:15:de:37:97:85:84:08:db:f4:81:5b:
c1:bd:2f:d5:df:2c:f5:a2:73:47:90:46:2f:91:90:
57:c1:5d:2c:e2:01:8e:b3:cd:ec:7d:9b:d9:22:e3:
bf:20:08:0c:a2:fb:20:fc:d0:b1:21:d9:1a:1e:60:
41:eb:ac:aa:5c:9d:94:ba:18:9b:1b:bb:cb:5e:84:
a6:da:df:49:37:ab:98:0b:cd:77:26:40:2e:5c:ab:
c4:b9:41:88:6a:69:b5:4f:b7:6a:f1:b8:98:b3:2b:
ea:96:03:84:96:83:89:45:46:b2:44:eb:4e:44:0c:
cc:c5:3d:b6:c1:4b:2b:01:17:87:cb:4d:ae:15:26:
92:a5:27:ee:51:7f:22:30:48:8f:4a:fc:1c:3f:f1:
17:88:ca:03:2e:38:f6:80:3e:d3:94:ce:91:1e:48:
5b:1a:2d:f7:ea:ba:70:a5:86:47:f9:b5:4d:cd:1e:
d8:0d:0a:c7:14:fd:74:6e:ae:aa:eb:8d:f8:68:8c:
ac:32:da:72:3c:c0:30:4e:a4:f9:21:ff:77:1f:6a:
29:eb:99:24:09:ce:dc:fd:2c:e2:28:fa:30:f4:96:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:43:C4:86:09:F1:74:20:84:AD:1E:0D:89:58:80:A3:F8:B7:9D
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:41:c7:23:5d:88:4f:7b:2b:22:7f:9f:4f:ca:bf:c1:6e:29:
7c:3a:72:2f:a2:0f:32:7b:7c:c2:e2:e3:5c:40:f6:13:60:9a:
0c:63:77:44:a5:a0:3d:0e:01:34:d0:f2:f8:99:89:92:20:91:
62:d1:7c:e0:ba:74:4d:fb:52:78:db:11:11:0a:8e:ce:8a:e3:
2b:6d:aa:81:27:e7:c3:62:3b:79:73:3d:56:47:2c:2f:de:26:
33:33:02:58:39:88:9c:43:06:f2:61:1d:25:ef:10:44:c2:0f:
e2:82:ab:10:4a:26:a3:fc:9c:ed:0d:0d:a5:75:a2:fd:90:b9:
75:29:f1:3e:61:2c:1c:a8:57:0a:ce:b3:38:9e:e8:fa:d7:67:
d0:a4:7e:b1:9a:46:0f:0c:27:98:6c:b6:92:be:be:b2:1b:65:
77:27:96:6a:fb:1f:c5:2f:f5:db:2f:af:99:b2:4b:42:b3:1c:
8f:23:2d:98:4d:11:62:2a:0b:1b:e3:fb:6d:6d:ee:64:de:bb:
45:de:cf:ac:ea:dc:ff:ff:e7:7c:bf:35:ed:85:dc:66:93:69:
f9:39:4b:f7:90:0d:eb:bf:5c:8e:65:96:44:07:2b:8b:97:f2:
8d:68:0f:09:4d:fa:ab:b9:14:c8:8c:77:b0:a3:94:53:bc:20:
27:93:a1:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZx+WylHWaRZH68onS6PiZjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjYwMjIxMDQwMDI5WhcNMjYwMjIyMDQwMDI5WjAzMTEwLwYDVQQD
Eyg4YmM5NDNjNDg2MDlmMTc0MjA4NGFkMWUwZDg5NTg4MGEzZjhiNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fPBA6e7z5wcOMLTPwaBw4V4H+F2
7EkzjHaAMY7vh514Fd43l4WECNv0gVvBvS/V3yz1onNHkEYvkZBXwV0s4gGOs83s
fZvZIuO/IAgMovsg/NCxIdkaHmBB66yqXJ2UuhibG7vLXoSm2t9JN6uYC813JkAu
XKvEuUGIamm1T7dq8biYsyvqlgOEloOJRUayROtORAzMxT22wUsrAReHy02uFSaS
pSfuUX8iMEiPSvwcP/EXiMoDLjj2gD7TlM6RHkhbGi336rpwpYZH+bVNzR7YDQrH
FP10bq6q6434aIysMtpyPMAwTqT5If93H2op65kkCc7c/SziKPow9JblPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvJQ8SGCfF0IIStHg2JWICj+LedMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkHHI12I
T3srIn+fT8q/wW4pfDpyL6IPMnt8wuLjXED2E2CaDGN3RKWgPQ4BNNDy+JmJkiCR
YtF84Lp0TftSeNsREQqOzorjK22qgSfnw2I7eXM9VkcsL94mMzMCWDmInEMG8mEd
Je8QRMIP4oKrEEomo/yc7Q0NpXWi/ZC5dSnxPmEsHKhXCs6zOJ7o+tdn0KR+sZpG
DwwnmGy2kr6+shtldyeWavsfxS/12y+vmbJLQrMcjyMtmE0RYioLG+P7bW3uZN67
Rd7PrOrc///nfL817YXcZpNp+TlL95AN679cjmWWRAcri5fyjWgPCU36q7kUyIx3
sKOUU7wgJ5OhwQ==
-----END CERTIFICATE-----
Generated at Sat Feb 21 06:09:06 2026 by rpki-client