Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: F/7fiphAP7qcD+0lnCPS0qmIn0mtVFSvZj7dsLBaA1o=
Subject key identifier: C5:21:56:99:A7:42:36:F2:F0:BE:43:CD:36:77:1E:0D:ED:B1:09:78
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 019D37C0F529FE2E81D467FA595920D8E82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 039D
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: QZEL4d0SfEFoVacqVFYZirUZF0c.roa (hash: L9KDQaVkcUjKs2cT9P0W49YAOlVadQY6gzwYQcZwv2E=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: Fr6m8Mrk04W7dxkhf6hDPF8dxsEVS9u+fFkI6Ybx4tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f5:29:fe:2e:81:d4:67:fa:59:59:20:d8:e8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=c5215699a74236f2f0be43cd36771e0dedb10978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:d7:2c:04:d7:e3:ac:ff:13:c5:81:87:2f:
fb:a2:4b:79:10:27:fa:80:a6:de:f1:32:ea:82:50:
f9:0f:17:3e:8a:e1:2c:af:f6:9f:af:95:ea:62:93:
c4:24:41:1d:5a:bc:46:3d:e4:8e:31:e1:17:3b:c4:
be:06:b5:00:ec:d4:09:8b:e0:ef:d1:ec:93:2e:d7:
0d:3c:d8:6c:cc:65:80:69:83:0b:b8:00:3b:4e:63:
ac:7c:76:d0:2b:65:ef:45:f4:a6:0c:56:9b:ae:04:
b3:22:8d:2f:95:3b:8a:dc:ac:18:5d:25:75:e1:61:
ea:49:ab:34:57:53:90:89:94:f6:47:be:ff:fc:59:
e9:fd:1e:2b:d2:ce:ed:87:57:dd:d8:03:c0:1b:31:
74:8e:ab:bb:f5:1f:4f:bc:75:a9:87:0d:d5:5b:68:
00:ab:22:04:31:46:17:87:17:54:3d:2d:4f:01:7b:
5a:14:88:8d:62:6c:a7:5f:18:e2:9f:86:d8:6e:b8:
cd:8e:5f:5e:1e:5f:57:32:6f:84:d1:e0:a2:44:27:
92:02:9c:78:94:87:b4:e1:37:9d:c0:ec:51:11:43:
1f:79:80:68:c3:4c:14:15:ee:56:b7:05:ce:13:48:
6a:08:3e:12:e3:6a:3b:bd:de:d4:f6:8e:85:e4:c3:
90:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:21:56:99:A7:42:36:F2:F0:BE:43:CD:36:77:1E:0D:ED:B1:09:78
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:fb:ee:35:42:58:86:93:6b:72:aa:59:69:81:4b:1c:58:
e8:26:a3:ff:2d:b4:7b:f2:91:e1:09:f9:31:75:27:f9:ef:f0:
59:fe:a8:d4:1c:29:02:2b:2e:ce:7a:c1:06:c4:dc:04:a2:e1:
9e:ab:1b:c1:1c:5c:d7:72:9b:51:bf:d0:6d:f1:e5:2e:3b:66:
ec:48:3c:b8:39:25:8d:29:60:c1:3c:76:61:f3:81:e0:df:bd:
ae:91:90:56:cf:77:83:55:22:26:6b:f7:63:11:76:4d:90:e8:
63:fd:bf:24:a3:f6:e8:7b:5b:ab:e8:11:ed:64:53:0f:da:1a:
e5:ea:e9:78:94:84:12:9b:e6:c7:45:d6:bb:21:78:9e:05:5a:
ca:21:52:36:b9:fc:e6:d0:2e:a0:6d:33:2b:3f:33:9f:89:8a:
d0:fc:b7:98:02:8a:c4:d8:4a:00:1e:b7:79:72:c5:6c:a5:5d:
1a:4b:f8:8c:30:11:92:69:7b:9f:a2:a9:5b:18:ba:f6:e2:1c:
6f:dc:c4:ea:db:e9:3c:2c:6a:52:25:16:aa:c2:dc:0b:6c:05:
fb:aa:30:69:27:71:72:66:ab:49:05:8a:31:5d:63:9d:cc:89:
d3:1e:b6:ca:bb:da:7c:3b:5c:16:5e:84:2a:ed:05:7d:2c:6b:
6d:d2:0b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:33 2026 by rpki-client