Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: YfeRyCvogk9jV3nBy1GZSSfIpZIGRLJXyfsF3jP3pc0=
Subject key identifier: F6:CE:9C:91:9D:D5:23:89:9E:E1:9E:0D:DC:47:D7:FB:3C:41:BC:C6
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 019D38D31F24D695D5C82ED9ED36548B5B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0BA7
Signing time: Sun 29 Mar 2026 09:00:53 +0000
Manifest this update: Sun 29 Mar 2026 09:00:53 +0000
Manifest next update: Mon 30 Mar 2026 09:00:53 +0000
Files and hashes: 1: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: hjeZPlvONwjpMSVdEqGDpH9ICRbMJuTSeOv3avPVjuI=)
2: lf_obYLkdv0nF0_npBLfEGEUr5g.roa (hash: SJ8whxb+V86Y+QBEXZUDuhEOcL67d4x2EIlsWGzE0Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1f:24:d6:95:d5:c8:2e:d9:ed:36:54:8b:5b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Mar 29 09:00:53 2026 GMT
Not After : Mar 30 09:00:53 2026 GMT
Subject: CN=f6ce9c919dd523899ee19e0ddc47d7fb3c41bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:b5:1f:f7:5a:a0:08:a0:39:13:64:bb:04:
25:9a:13:9c:60:59:09:31:f4:20:3d:52:6d:f2:cd:
c1:c5:f4:f4:a0:2e:9f:60:1e:a2:98:99:73:7f:26:
38:44:28:fe:28:d4:72:bc:b0:1a:3e:0d:c1:99:ca:
52:31:74:90:99:13:53:bc:88:3c:03:a7:a9:5d:09:
cc:c1:29:ed:0d:be:be:fd:22:a4:c5:90:dc:11:db:
60:5d:8d:63:42:cd:0d:92:12:d5:0f:bb:39:25:60:
a7:0c:90:10:56:bd:0d:c7:fb:24:e4:51:a4:ac:cc:
cd:4f:4b:a1:ca:f8:51:9b:25:6f:46:be:b4:ac:25:
ed:84:2a:e9:ec:96:6e:34:0f:d5:5e:a2:ff:55:bd:
49:a6:aa:58:29:b1:70:11:24:c7:8a:25:50:95:4a:
08:d5:b1:06:07:b4:cc:69:3b:90:12:e7:b9:42:bf:
58:ac:28:b4:29:b5:10:b4:6a:fe:8d:29:79:e5:43:
26:0c:bc:35:72:43:99:91:1b:d7:48:14:de:ea:1d:
fc:72:af:b3:b2:5f:64:b3:f7:bf:4f:cb:de:61:e8:
9c:c6:6b:3e:fa:62:b8:3f:05:79:59:5a:ef:ba:79:
a0:12:8f:b9:9a:07:46:5d:52:4f:01:04:2c:92:5e:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CE:9C:91:9D:D5:23:89:9E:E1:9E:0D:DC:47:D7:FB:3C:41:BC:C6
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:df:1e:81:3a:5b:2f:d5:7d:ce:cf:b0:f6:1a:45:fe:84:51:
35:32:cd:e4:e3:cb:23:b8:85:fe:f3:61:4c:99:35:61:9a:2e:
d5:6b:e2:ff:12:8c:75:dc:11:97:d1:f0:78:d3:78:c2:1d:1d:
45:f0:db:7f:da:f2:53:0a:b1:73:18:74:50:6c:c9:23:b7:cf:
5b:c9:b1:fd:58:c4:bc:85:a2:5f:6e:7b:0f:72:5e:52:ce:c2:
d3:da:a3:2c:24:7c:11:d1:ac:19:62:a6:b6:2b:d3:b5:2f:37:
0f:73:34:ea:a5:df:6e:7c:42:64:6b:fb:01:00:51:7b:f0:26:
b0:02:1e:bd:8e:59:c8:0e:bc:05:86:44:17:ad:38:5f:4a:cc:
46:c1:a8:f7:1f:97:dc:a5:14:1e:37:8d:a7:eb:2b:4e:b4:90:
da:ba:47:23:13:27:3a:e1:b1:f7:74:79:a8:70:da:97:e8:af:
75:3d:d2:2d:d5:4d:ca:13:20:b8:c4:79:eb:2c:79:18:5d:df:
f7:32:e1:69:fc:15:eb:67:35:11:93:74:3c:77:87:5c:48:79:
c9:d1:c4:b2:24:07:30:00:1c:05:d0:87:09:b7:01:9d:07:bc:
4b:4a:fe:77:a2:ee:0a:3d:45:16:a9:40:a6:39:bb:c3:f1:6b:
96:75:3e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040x8k1pXVyC7Z7TZUi1srMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTRiOTNmZWI3MWRkZTI4MjNiNzBjN2RiYjc5ZTBmOTli
NTZjMWIwHhcNMjYwMzI5MDkwMDUzWhcNMjYwMzMwMDkwMDUzWjAzMTEwLwYDVQQD
EyhmNmNlOWM5MTlkZDUyMzg5OWVlMTllMGRkYzQ3ZDdmYjNjNDFiY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzW1H/daoAigORNkuwQlmhOcYFkJ
MfQgPVJt8s3BxfT0oC6fYB6imJlzfyY4RCj+KNRyvLAaPg3BmcpSMXSQmRNTvIg8
A6epXQnMwSntDb6+/SKkxZDcEdtgXY1jQs0NkhLVD7s5JWCnDJAQVr0Nx/sk5FGk
rMzNT0uhyvhRmyVvRr60rCXthCrp7JZuNA/VXqL/Vb1JpqpYKbFwESTHiiVQlUoI
1bEGB7TMaTuQEue5Qr9YrCi0KbUQtGr+jSl55UMmDLw1ckOZkRvXSBTe6h38cq+z
sl9ks/e/T8veYeicxms++mK4PwV5WVrvunmgEo+5mgdGXVJPAQQskl6cMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbOnJGd1SOJnuGeDdxH1/s8QbzGMB8GA1UdIwQY
MBaAFIrkuT/rcd3igjtwx9u3ng+ZtWwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDct
MjljNTE3NjkwMmM2LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83MGU2NzgtODQ5NS00NmFlLTk2ZDctMjljNTE3NjkwMmM2
LzEvaXVTNVAtdHgzZUtDTzNESDI3ZWVENW0xYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPd8egTpb
L9V9zs+w9hpF/oRRNTLN5OPLI7iF/vNhTJk1YZou1Wvi/xKMddwRl9HweNN4wh0d
RfDbf9ryUwqxcxh0UGzJI7fPW8mx/VjEvIWiX257D3JeUs7C09qjLCR8EdGsGWKm
tivTtS83D3M06qXfbnxCZGv7AQBRe/AmsAIevY5ZyA68BYZEF604X0rMRsGo9x+X
3KUUHjeNp+srTrSQ2rpHIxMnOuGx93R5qHDal+ivdT3SLdVNyhMguMR56yx5GF3f
9zLhafwV62c1EZN0PHeHXEh5ydHEsiQHMAAcBdCHCbcBnQe8S0r+d6LuCj1FFqlA
pjm7w/FrlnU+Zw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:18 2026 by rpki-client