Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: d+upQPBfL305b4iVFYGs+dzR3UWzjy5k7fsoVcTYsmU=
Subject key identifier: 2C:05:3A:17:04:46:48:F3:39:3D:59:BB:D4:5A:46:FF:AD:9E:53:D0
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 019D382E05894F471D7258DD28A91EF6ED87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:33 +0000
Manifest this update: Sun 29 Mar 2026 06:00:33 +0000
Manifest next update: Mon 30 Mar 2026 06:00:33 +0000
Files and hashes: 1: WSoyFsUkPtTH5GPtVnmww05vFh0.roa (hash: xtuU58lDieJuv/Yy7w3S0c+KdkmwGfK0iLB0R2OEp6Y=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: jO/QPfaySXlZ08lvjv2Mls6COCdZ5VMt2jZS8+4bZuE=)
3: tO-A92aPh-c1kbPiiGTELi4pWsI.roa (hash: VYiMeDkb56YkXPTmAgRa9xezBuKdyWi7Fakxz9UBLlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:05:89:4f:47:1d:72:58:dd:28:a9:1e:f6:ed:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Mar 29 06:00:33 2026 GMT
Not After : Mar 30 06:00:33 2026 GMT
Subject: CN=2c053a17044648f3393d59bbd45a46ffad9e53d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:ad:10:54:bd:75:e9:01:69:fd:84:c3:d8:
72:cc:49:d4:db:80:c0:6f:97:c9:3b:2c:02:10:d2:
f6:60:60:d6:4d:c6:a0:49:40:9f:48:f8:f6:aa:0b:
b7:a7:1e:77:cf:93:e6:2d:04:83:2d:29:5d:1e:9e:
6d:3d:80:91:61:ef:be:9d:ba:05:28:56:c3:46:03:
68:23:41:52:15:ca:d2:02:ae:bc:c1:83:5e:7e:57:
1a:63:73:af:f4:f2:56:7c:ae:79:89:94:de:1a:99:
5a:a4:72:0a:db:d1:23:5f:7b:26:4f:0a:fc:0a:00:
bf:65:5b:f4:f1:e4:24:a1:22:5e:19:0e:26:01:0a:
d5:eb:e2:0b:e9:80:9e:7c:2d:df:5a:56:55:6d:24:
fc:e5:7d:46:f7:d9:ae:4b:c7:99:a8:80:5d:47:ae:
45:bd:b5:63:99:50:15:1e:78:46:a9:60:47:b7:76:
4e:45:2d:1d:3b:ee:c1:2a:ce:4f:1e:a8:6d:34:f4:
81:16:1f:81:a4:fe:32:ff:09:4a:5a:be:5f:46:95:
70:02:d0:cf:ee:e9:3a:12:81:c5:34:65:d1:10:51:
51:1b:66:d1:18:06:8a:e1:f9:f8:a5:af:c9:a3:c6:
47:7d:d8:14:f0:d3:82:20:d3:39:0e:ea:6f:8a:fb:
c1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:05:3A:17:04:46:48:F3:39:3D:59:BB:D4:5A:46:FF:AD:9E:53:D0
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:96:ee:9a:20:53:2f:d6:4f:6a:68:18:76:b6:0c:93:5c:ef:
16:6f:37:ef:dd:ca:c5:44:fc:70:69:56:08:3b:ea:cc:a6:89:
b0:90:fe:0c:f0:15:1c:9f:ff:e7:67:1c:4b:ca:c5:f7:4f:aa:
14:1a:6f:65:47:29:82:05:bb:08:fa:67:25:3d:89:2c:09:97:
eb:50:72:21:e8:f1:00:ac:75:ef:9b:4c:cb:aa:ee:11:d6:1c:
d8:ba:2b:76:7a:78:8f:84:75:3b:56:13:11:8b:3c:4e:4f:31:
37:32:6a:5e:10:d8:15:4e:8a:05:6a:e9:d6:f8:fd:0e:f3:09:
70:39:28:64:91:e2:86:21:57:d6:df:a5:9a:91:b0:de:31:9f:
35:d2:85:8a:57:82:a5:90:1b:06:e2:ea:ca:6a:d9:e4:68:5e:
92:df:0e:0f:4d:cd:52:5a:da:98:76:05:f8:ba:d0:a6:7c:04:
5b:64:f4:d9:9b:dc:d4:68:74:47:44:2f:09:0f:ee:86:95:37:
7d:ec:d0:53:b5:70:4a:4d:c2:88:95:00:95:04:13:81:61:07:
52:e8:96:9a:0d:ed:23:b5:15:77:fc:db:11:fc:92:06:a1:a0:
95:fa:ed:f7:f7:68:76:3b:91:73:3c:a4:aa:b4:6b:0a:f9:c5:
44:f8:8f:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LgWJT0cdcljdKKke9u2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmQ1ODY2YzM1MDkzMzUyZTdiOWUwNzYyYzU5MWUwOGU1
MGY5NjcwHhcNMjYwMzI5MDYwMDMzWhcNMjYwMzMwMDYwMDMzWjAzMTEwLwYDVQQD
EygyYzA1M2ExNzA0NDY0OGYzMzkzZDU5YmJkNDVhNDZmZmFkOWU1M2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq42tEFS9dekBaf2Ew9hyzEnU24DA
b5fJOywCENL2YGDWTcagSUCfSPj2qgu3px53z5PmLQSDLSldHp5tPYCRYe++nboF
KFbDRgNoI0FSFcrSAq68wYNeflcaY3Ov9PJWfK55iZTeGplapHIK29EjX3smTwr8
CgC/ZVv08eQkoSJeGQ4mAQrV6+IL6YCefC3fWlZVbST85X1G99muS8eZqIBdR65F
vbVjmVAVHnhGqWBHt3ZORS0dO+7BKs5PHqhtNPSBFh+BpP4y/wlKWr5fRpVwAtDP
7uk6EoHFNGXREFFRG2bRGAaK4fn4pa/Jo8ZHfdgU8NOCINM5DupvivvBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwFOhcERkjzOT1Zu9RaRv+tnlPQMB8GA1UdIwQY
MBaAFIltWGbDUJM1LnueB2LFkeCOUPlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUt
Nzg0NjI0YTdiNDdlLzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85ZDhmMjEtYjI3Zi00MzVkLWE3YjUtNzg0NjI0YTdiNDdl
LzEvaVcxWVpzTlFrelV1ZTU0SFlzV1I0STVRLVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZbumiBT
L9ZPamgYdrYMk1zvFm83793KxUT8cGlWCDvqzKaJsJD+DPAVHJ//52ccS8rF90+q
FBpvZUcpggW7CPpnJT2JLAmX61ByIejxAKx175tMy6ruEdYc2Lordnp4j4R1O1YT
EYs8Tk8xNzJqXhDYFU6KBWrp1vj9DvMJcDkoZJHihiFX1t+lmpGw3jGfNdKFileC
pZAbBuLqymrZ5Ghekt8OD03NUlramHYF+LrQpnwEW2T02Zvc1Gh0R0QvCQ/uhpU3
fezQU7VwSk3CiJUAlQQTgWEHUuiWmg3tI7UVd/zbEfySBqGglfrt9/dodjuRczyk
qrRrCvnFRPiPIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:23 2026 by rpki-client