Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: y/TlVwDzaN42/OkAJgk0e/g6gziOxeutVQLB8Zk9aIE=
Subject key identifier: 9B:CD:4B:49:D1:FE:77:66:B4:ED:8A:D9:A7:8B:F1:89:21:0A:4B:52
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019D3A1C621AA255ED4EE3946C9ECA947685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:00:31 +0000
Manifest this update: Sun 29 Mar 2026 15:00:31 +0000
Manifest next update: Mon 30 Mar 2026 15:00:31 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: qA+m7/yxInWF4J2gJ5+G6KgHtur/I6GWEEoUTPiUdTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:62:1a:a2:55:ed:4e:e3:94:6c:9e:ca:94:76:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Mar 29 15:00:31 2026 GMT
Not After : Mar 30 15:00:31 2026 GMT
Subject: CN=9bcd4b49d1fe7766b4ed8ad9a78bf189210a4b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f5:a3:10:3d:5b:36:32:63:cd:71:78:72:34:
a1:a6:e6:f0:29:c5:09:ea:55:b0:9f:b9:29:af:9c:
54:1b:de:47:8f:b6:4b:07:db:11:20:e2:07:f0:b4:
65:a5:6b:66:d8:b1:75:3a:5f:ad:86:2b:dc:3f:ee:
cd:49:e9:d4:73:8b:f9:16:c8:56:1d:b2:c4:06:83:
57:42:7e:c9:0e:20:6d:aa:63:9d:c5:77:74:11:d5:
da:f1:45:9f:fc:83:f3:db:ad:f2:bc:52:32:91:89:
6b:eb:aa:1f:4f:79:09:a9:fc:cc:7b:3e:6b:9d:28:
1a:92:70:11:c5:72:ce:9c:c5:4e:14:2d:6f:f7:08:
9b:74:49:45:6d:6f:a1:a2:a8:89:5d:98:87:bd:ce:
32:7e:f8:3a:4c:d4:10:b2:3c:7e:ef:92:bf:96:06:
46:50:dc:f6:ec:6e:da:5c:f7:57:7c:50:86:6b:27:
21:6b:67:5c:3a:d2:fb:cf:42:98:b9:55:bc:36:69:
03:97:9e:7a:9b:65:bd:5b:2a:0d:d7:06:76:3e:29:
94:ae:7d:1b:d2:0f:d4:e3:83:0a:46:d4:83:39:64:
a2:57:e8:31:5f:66:25:ba:1f:77:07:50:8d:24:24:
1b:ea:82:64:42:c7:b6:90:56:5d:8f:3f:77:90:d4:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:4B:49:D1:FE:77:66:B4:ED:8A:D9:A7:8B:F1:89:21:0A:4B:52
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:71:81:2e:b1:85:66:14:4c:69:a9:d8:a2:44:4e:08:2c:
06:8d:60:cd:c6:5b:46:c6:1c:68:56:13:ae:36:a2:65:f3:73:
12:54:66:90:1f:9a:e7:75:27:d2:8e:a7:c7:59:7a:61:7c:21:
f5:41:37:5d:b7:b7:c0:a0:62:70:e8:47:6c:40:18:20:d1:f7:
20:b5:ed:c1:4c:39:ff:6b:18:cd:a7:90:29:49:6f:9b:0e:0b:
fd:b3:51:7f:b2:a7:16:1d:16:ff:30:3e:ba:f8:58:c0:83:5f:
5b:18:b1:38:35:31:10:22:dc:79:80:7d:6c:86:4d:56:b5:54:
53:43:8d:f4:15:ee:81:fb:cd:e1:86:c6:d4:09:4f:84:27:59:
d7:ea:76:ca:e3:ca:c5:2d:90:4a:9f:c5:bd:08:53:b6:87:3b:
8b:3e:c3:7e:79:ec:9d:f2:d3:8a:77:e7:78:08:0d:a4:1a:ca:
52:5f:24:00:4f:52:aa:8f:44:26:0e:4e:63:7c:e2:9f:a8:cf:
d4:52:55:95:a4:42:c0:87:3c:b9:e3:92:b0:ba:28:f0:f3:a4:
6d:1a:ab:58:0c:07:b6:2a:07:a0:9a:27:a6:41:05:16:d9:6d:
e9:0e:da:4c:7d:e2:ab:ae:32:17:b4:11:19:ec:21:1e:8a:a3:
3a:25:f5:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HGIaolXtTuOUbJ7KlHaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx
M2U5M2UwHhcNMjYwMzI5MTUwMDMxWhcNMjYwMzMwMTUwMDMxWjAzMTEwLwYDVQQD
Eyg5YmNkNGI0OWQxZmU3NzY2YjRlZDhhZDlhNzhiZjE4OTIxMGE0YjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/WjED1bNjJjzXF4cjShpubwKcUJ
6lWwn7kpr5xUG95Hj7ZLB9sRIOIH8LRlpWtm2LF1Ol+thivcP+7NSenUc4v5FshW
HbLEBoNXQn7JDiBtqmOdxXd0EdXa8UWf/IPz263yvFIykYlr66ofT3kJqfzMez5r
nSgaknARxXLOnMVOFC1v9wibdElFbW+hoqiJXZiHvc4yfvg6TNQQsjx+75K/lgZG
UNz27G7aXPdXfFCGaycha2dcOtL7z0KYuVW8NmkDl556m2W9WyoN1wZ2PimUrn0b
0g/U44MKRtSDOWSiV+gxX2Yluh93B1CNJCQb6oJkQse2kFZdjz93kNRSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvNS0nR/ndmtO2K2aeL8YkhCktSMB8GA1UdIwQY
MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt
NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk
LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg1xgS6x
hWYUTGmp2KJETggsBo1gzcZbRsYcaFYTrjaiZfNzElRmkB+a53Un0o6nx1l6YXwh
9UE3Xbe3wKBicOhHbEAYINH3ILXtwUw5/2sYzaeQKUlvmw4L/bNRf7KnFh0W/zA+
uvhYwINfWxixODUxECLceYB9bIZNVrVUU0ON9BXugfvN4YbG1AlPhCdZ1+p2yuPK
xS2QSp/FvQhTtoc7iz7DfnnsnfLTinfneAgNpBrKUl8kAE9Sqo9EJg5OY3zin6jP
1FJVlaRCwIc8ueOSsLoo8POkbRqrWAwHtioHoJonpkEFFtlt6Q7aTH3iq64yF7QR
GewhHoqjOiX1uQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:39:25 2026 by rpki-client