Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: QeDDsSunBh49i7tMWiQrTB6vJ4xS1f3GQGZil9J2l7U=
Subject key identifier: D1:FD:04:47:B2:1D:B0:BA:44:53:A9:D3:CD:16:F7:EA:34:8E:F7:B3
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 019D37F70BD7C767753A10059B15BADBF1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 146D
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa (hash: GWW+sIHLIiiJupwbdRvejiFrWNMJqUsJJSuoaM3Fa6s=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: 54VVDkQgdfi+cTTetZBMXP1TGsbJZEDGAA0DAga0nZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0b:d7:c7:67:75:3a:10:05:9b:15:ba:db:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=d1fd0447b21db0ba4453a9d3cd16f7ea348ef7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:c2:8a:d2:af:f0:e1:93:c0:90:7e:29:a0:
a4:15:1a:ad:c8:3e:e1:2c:97:23:55:63:f0:f6:33:
65:14:d1:c3:c6:e7:b8:3d:1c:dd:9e:70:dc:22:24:
9c:09:fc:a6:83:02:b9:32:c1:4d:22:fa:cd:2b:7c:
d8:3d:2d:df:02:39:46:49:37:c9:90:f8:70:63:12:
03:ed:b9:58:fe:2b:20:bf:80:7e:b3:08:05:e7:1a:
ba:d3:e2:80:e4:2c:af:5d:bd:48:4a:97:df:0f:83:
d1:d0:98:90:8e:68:6e:87:79:21:88:73:6b:46:54:
fc:64:46:b3:3a:7a:36:72:b1:3f:a9:8a:b4:0e:67:
e5:02:37:32:9d:8b:60:7e:6c:ec:2f:76:79:d5:17:
ef:8a:3a:e0:2e:c4:01:01:b0:d6:78:3f:2b:5e:b9:
51:8b:77:4b:ee:d3:c7:37:4d:02:eb:16:63:d5:86:
06:d4:36:90:96:ad:8d:a7:55:8a:98:be:15:26:18:
8b:f2:96:56:8a:12:66:73:33:92:c2:bb:78:96:ad:
8b:96:36:53:e8:4e:f8:86:78:9b:4e:ab:ff:70:98:
21:df:3a:2e:22:bc:61:77:04:52:eb:df:c8:61:3a:
38:aa:f2:dd:8b:18:b8:68:b2:84:2e:f1:0d:5f:ac:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FD:04:47:B2:1D:B0:BA:44:53:A9:D3:CD:16:F7:EA:34:8E:F7:B3
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:13:41:54:bd:a9:a0:8a:d9:05:1c:29:35:0a:ba:9f:d1:cd:
9b:44:b1:44:7f:11:39:63:d9:4d:0c:28:e7:09:1a:4d:10:b7:
9c:80:8b:13:9c:5d:b5:77:70:e2:82:41:ed:29:f0:95:44:b6:
50:a8:ec:2e:8a:7b:de:8f:73:0b:d8:ca:ae:3d:0f:85:42:46:
ed:92:60:20:f3:1c:01:56:05:db:87:00:c6:8f:3a:3a:3e:0a:
0c:02:17:d8:22:78:cd:81:8d:ef:c8:fb:93:c8:1d:61:69:b9:
c0:84:d0:26:c0:e7:53:0b:9c:62:89:e1:98:0a:c1:9d:90:7b:
05:9f:d7:eb:10:65:1f:42:07:a8:47:b7:2e:ff:22:8b:28:e0:
ec:78:92:92:54:28:5a:95:0b:60:35:e0:b8:65:37:3c:21:93:
3e:7f:f0:08:79:ce:cd:b6:46:f1:89:38:49:88:08:1a:90:63:
b5:02:0c:bc:ee:cd:7e:9a:0a:93:03:07:16:a2:d0:5b:22:d9:
88:0c:27:61:99:78:12:0b:72:84:3a:bd:c6:07:ec:36:80:d7:
2b:ef:d1:55:b2:ed:42:55:04:ee:15:4f:f1:e1:c0:6d:c2:5f:
2a:a4:c7:3c:d7:8e:2a:dd:69:80:d4:16:7a:6f:5b:58:47:70:
3f:e2:d7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wvXx2d1OhAFmxW62/HhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5
NzkxMDkwHhcNMjYwMzI5MDUwMDMwWhcNMjYwMzMwMDUwMDMwWjAzMTEwLwYDVQQD
EyhkMWZkMDQ0N2IyMWRiMGJhNDQ1M2E5ZDNjZDE2ZjdlYTM0OGVmN2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtrCitKv8OGTwJB+KaCkFRqtyD7h
LJcjVWPw9jNlFNHDxue4PRzdnnDcIiScCfymgwK5MsFNIvrNK3zYPS3fAjlGSTfJ
kPhwYxID7blY/isgv4B+swgF5xq60+KA5CyvXb1ISpffD4PR0JiQjmhuh3khiHNr
RlT8ZEazOno2crE/qYq0DmflAjcynYtgfmzsL3Z51RfvijrgLsQBAbDWeD8rXrlR
i3dL7tPHN00C6xZj1YYG1DaQlq2Np1WKmL4VJhiL8pZWihJmczOSwrt4lq2LljZT
6E74hnibTqv/cJgh3zouIrxhdwRS69/IYTo4qvLdixi4aLKELvENX6zCBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH9BEeyHbC6RFOp080W9+o0jvezMB8GA1UdIwQY
MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt
YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4
LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdBNBVL2p
oIrZBRwpNQq6n9HNm0SxRH8ROWPZTQwo5wkaTRC3nICLE5xdtXdw4oJB7SnwlUS2
UKjsLop73o9zC9jKrj0PhUJG7ZJgIPMcAVYF24cAxo86Oj4KDAIX2CJ4zYGN78j7
k8gdYWm5wITQJsDnUwucYonhmArBnZB7BZ/X6xBlH0IHqEe3Lv8iiyjg7HiSklQo
WpULYDXguGU3PCGTPn/wCHnOzbZG8Yk4SYgIGpBjtQIMvO7NfpoKkwMHFqLQWyLZ
iAwnYZl4EgtyhDq9xgfsNoDXK+/RVbLtQlUE7hVP8eHAbcJfKqTHPNeOKt1pgNQW
em9bWEdwP+LXIw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:00 2026 by rpki-client