Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: crKHOVfQ2uhGmfFLe14l9p6Y3pUQfKXmBuTb5i1p4jo=
Subject key identifier: 40:EF:C2:8A:D0:47:D3:55:2D:B6:0D:FA:E6:E0:87:98:85:86:D1:3D
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 019D2FD04A825D94D10D42C9BAAAE37CD10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1889
Signing time: Fri 27 Mar 2026 15:01:12 +0000
Manifest this update: Fri 27 Mar 2026 15:01:12 +0000
Manifest next update: Sat 28 Mar 2026 15:01:12 +0000
Files and hashes: 1: ImConIEQA2KDtzAT0CUbHUEbH_s.roa (hash: A7/XjtAfBEgLHLQ8oNWxPg8deYNIQ6lOIEhh+waSaZI=)
2: ZxLR_I6eiLsRd1oV4IP5PeLu7DE.roa (hash: kZngczWI+T3GrCv/8Yja3kQMBd7RGIDrozKXhV53UWY=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: FgEdfwRUqKHFwo4dj0UBIi1VTa+tx+javX5PiC5q6FI=)
4: q2aBWG2CuEimsjXb18Ou0fyLb7k.roa (hash: A0AoTuyENlHBNdH6JVEsUQXr8MFCH3cXbTXxCbPc1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:d0:4a:82:5d:94:d1:0d:42:c9:ba:aa:e3:7c:d1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Mar 27 15:01:12 2026 GMT
Not After : Mar 28 15:01:12 2026 GMT
Subject: CN=40efc28ad047d3552db60dfae6e087988586d13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8a:b2:99:e4:c4:b4:40:3d:3a:a3:73:3f:97:
92:16:97:31:5e:36:50:ca:e2:fe:aa:6a:7d:34:af:
05:c7:20:95:2c:46:a7:61:06:a2:56:95:bf:ab:d8:
59:98:64:bc:d6:64:d0:77:de:e1:01:75:15:7b:5d:
16:c1:ae:b8:9d:7b:ba:3c:41:b1:d3:6e:91:98:9e:
2c:e1:39:73:b9:38:6c:08:73:e9:2b:a8:e7:06:81:
3f:37:0a:4e:8a:0c:5b:61:07:bf:fd:20:dd:ba:33:
76:3c:9e:1f:c0:93:9b:af:37:1a:ae:14:78:88:22:
32:a3:f3:f2:0c:17:71:c5:14:b3:cc:72:6f:52:25:
f6:e1:fa:35:2e:fb:77:4b:bc:4a:96:3a:70:a2:6f:
e0:2e:64:d8:68:ee:da:ce:4f:59:64:f9:4c:63:aa:
9d:21:2d:19:d0:e8:b3:ce:91:24:9d:72:38:be:89:
80:81:4f:3e:49:3b:7f:aa:1e:13:ba:f4:c8:07:e1:
f8:79:68:17:02:db:f5:b1:01:e0:ec:fa:aa:02:48:
53:3c:2b:62:99:20:dc:0a:b5:82:d0:21:54:ea:7f:
d5:dd:53:77:a9:6a:69:3b:1d:5f:db:18:07:2e:97:
94:99:06:d6:e8:fc:62:91:0a:38:93:61:85:3c:35:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:C2:8A:D0:47:D3:55:2D:B6:0D:FA:E6:E0:87:98:85:86:D1:3D
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:b8:a8:14:be:86:12:f6:9f:60:2b:23:92:b9:34:fb:58:
00:ef:67:e7:67:3c:0d:d4:fe:b2:d3:49:98:20:84:e4:8e:c8:
de:8f:89:9d:b6:79:c9:1b:62:a0:08:e6:b4:94:eb:a7:6e:93:
54:89:4f:58:4e:68:51:6b:27:9d:a1:63:47:8d:23:09:fc:93:
0b:8a:e4:3a:12:02:c1:1f:14:5e:78:40:50:44:93:9f:1a:f9:
06:a8:e3:6a:78:e1:a5:70:a8:b6:1c:21:af:20:6d:cb:f4:0e:
9a:c3:89:99:7d:df:ec:f5:8c:7a:21:d4:9f:7a:74:1d:5f:a7:
a1:60:c7:4d:2d:a6:d8:c0:f4:03:4b:c0:d6:00:b3:be:70:18:
7d:46:c1:0a:2c:02:bc:67:73:83:07:03:13:de:b9:79:ed:65:
41:c9:f1:63:5f:12:4f:13:00:43:4f:1f:7a:8e:0d:fb:20:69:
fa:59:7c:b8:55:82:c5:80:fd:42:0b:e1:af:29:3c:55:98:4e:
a6:b3:a2:e0:72:d5:91:43:85:4c:3f:ed:7f:1c:79:f8:c2:be:
60:5f:ea:a7:61:6b:27:80:d8:e1:8f:7e:8a:55:96:38:a6:c1:
10:61:1a:13:bc:db:3e:5a:4c:c6:7e:2f:4b:f1:c9:ba:9d:26:
63:d1:8e:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0v0EqCXZTRDULJuqrjfNENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTcxOWY0MjY3OTNiMWU5MDYzNzcxNDYwYWJkMzExYTNk
ZmYxMTYwHhcNMjYwMzI3MTUwMTEyWhcNMjYwMzI4MTUwMTEyWjAzMTEwLwYDVQQD
Eyg0MGVmYzI4YWQwNDdkMzU1MmRiNjBkZmFlNmUwODc5ODg1ODZkMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4qymeTEtEA9OqNzP5eSFpcxXjZQ
yuL+qmp9NK8FxyCVLEanYQaiVpW/q9hZmGS81mTQd97hAXUVe10Wwa64nXu6PEGx
026RmJ4s4TlzuThsCHPpK6jnBoE/NwpOigxbYQe//SDdujN2PJ4fwJObrzcarhR4
iCIyo/PyDBdxxRSzzHJvUiX24fo1Lvt3S7xKljpwom/gLmTYaO7azk9ZZPlMY6qd
IS0Z0OizzpEknXI4vomAgU8+STt/qh4TuvTIB+H4eWgXAtv1sQHg7PqqAkhTPCti
mSDcCrWC0CFU6n/V3VN3qWppOx1f2xgHLpeUmQbW6PxikQo4k2GFPDUxSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDvworQR9NVLbYN+ubgh5iFhtE9MB8GA1UdIwQY
MBaAFIjnGfQmeTsekGN3FGCr0xGj3/EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjct
YWU1MmUxNTZiNzdlLzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wMGQ0NWQtNWU0OC00NThkLTkyZjctYWU1MmUxNTZiNzdl
LzEvaU9jWjlDWjVPeDZRWTNjVVlLdlRFYVBmOFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmC4qBS+
hhL2n2ArI5K5NPtYAO9n52c8DdT+stNJmCCE5I7I3o+JnbZ5yRtioAjmtJTrp26T
VIlPWE5oUWsnnaFjR40jCfyTC4rkOhICwR8UXnhAUESTnxr5BqjjanjhpXCothwh
ryBty/QOmsOJmX3f7PWMeiHUn3p0HV+noWDHTS2m2MD0A0vA1gCzvnAYfUbBCiwC
vGdzgwcDE965ee1lQcnxY18STxMAQ08feo4N+yBp+ll8uFWCxYD9Qgvhryk8VZhO
prOi4HLVkUOFTD/tfxx5+MK+YF/qp2FrJ4DY4Y9+ilWWOKbBEGEaE7zbPlpMxn4v
S/HJup0mY9GO+g==
-----END CERTIFICATE-----
Generated at Fri Mar 27 19:33:55 2026 by rpki-client