Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
File: iOZzGonffpNxq6M-sU1y9h45gLk.mft (raw, json)
Hash identifier: FJXjWxg3ck8LGnh9Id4S0G4Y/3QGDwU8yfcd4ifzKiQ=
Subject key identifier: 20:79:55:1C:94:0A:F0:B8:C9:C7:B8:29:4E:07:5F:A0:C2:6C:E4:C7
Authority key identifier: 88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
Certificate issuer: /CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Certificate serial: 019D3865F5501A25F27BA51B4420EC459433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: iOZzGonffpNxq6M-sU1y9h45gLk.crl (hash: +hUNJ8XVjUvpsGNTCeYjQEGYBkHaQaNj0athr3k2aEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:50:1a:25:f2:7b:a5:1b:44:20:ec:45:94:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e6731a89df7e9371aba33eb14d72f61e3980b9
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=2079551c940af0b8c9c7b8294e075fa0c26ce4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:97:bb:0a:81:ed:9d:fe:91:e5:01:ec:cb:
f8:1f:54:69:97:0e:ba:dd:8d:70:af:e7:6d:7b:9b:
98:99:f9:a1:fa:0b:7e:9c:1c:a8:e9:53:65:5a:97:
28:6d:f9:89:c3:4a:92:96:06:f6:69:e7:85:a9:c3:
58:4e:bc:34:ce:b9:93:41:7d:0b:23:56:1b:5d:85:
4d:83:b5:a8:d5:a5:69:c3:9c:d5:c2:f8:0d:d0:b8:
bf:d6:8a:2a:b4:12:88:a8:df:95:3d:31:0f:39:c1:
51:97:6e:3e:c0:22:13:31:51:3c:dd:72:bf:13:68:
88:90:f7:d9:f6:53:6d:7a:43:67:4c:e8:09:05:6e:
91:02:a3:85:10:48:ac:c8:87:67:bc:3e:32:c7:c6:
94:8d:65:d3:34:6a:41:53:39:11:0e:4e:61:77:44:
7c:c1:7f:5e:f5:93:5f:27:61:1f:f9:4b:45:53:a6:
cb:c6:bc:a0:2d:e2:b9:fc:d9:be:41:07:94:2e:2d:
e1:85:69:e7:f3:58:b5:80:ce:4d:23:0f:52:52:af:
1c:ee:51:e3:9a:3a:3a:7d:b8:4d:c1:09:d9:de:e7:
37:ce:98:d3:39:fa:b8:90:eb:b1:af:18:6e:76:0f:
7a:ec:f3:da:87:5e:9b:5d:34:ba:67:06:b2:4e:aa:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:79:55:1C:94:0A:F0:B8:C9:C7:B8:29:4E:07:5F:A0:C2:6C:E4:C7
X509v3 Authority Key Identifier:
keyid:88:E6:73:1A:89:DF:7E:93:71:AB:A3:3E:B1:4D:72:F6:1E:39:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOZzGonffpNxq6M-sU1y9h45gLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336cb3-f4f7-4d8a-95ce-6bcf4a42ac7d/1/iOZzGonffpNxq6M-sU1y9h45gLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fe:77:ea:66:ad:e9:8f:15:83:13:73:17:79:a8:49:df:21:
91:b0:da:90:d5:40:02:ce:02:cc:79:06:b3:78:2f:ea:68:4b:
6e:44:79:98:a4:82:2f:4d:51:b1:c1:62:8f:b4:ab:02:17:2e:
fe:e9:60:fa:c3:f6:ae:2b:0b:94:59:cf:47:15:54:85:1f:db:
8a:ae:6c:e7:75:cf:4d:d1:a0:7a:85:29:00:98:35:b0:11:ed:
fc:33:2c:0c:71:e5:55:cf:c2:3d:e8:ec:c8:12:bb:f7:99:8e:
42:57:ea:06:dd:9b:61:3e:0c:f0:d5:c0:ba:e3:49:c4:b9:76:
87:65:0a:12:b6:29:33:d9:01:c6:92:d1:98:3c:cd:24:58:85:
fd:01:94:54:6f:21:f8:b9:a8:3b:68:eb:66:4f:0a:9d:9d:53:
c3:3a:c6:81:31:1e:e3:9e:8b:a9:4b:bd:85:72:02:f0:de:a0:
be:bb:13:9f:fd:6f:ef:78:67:d2:ca:30:4e:01:41:9e:d5:ab:
aa:7f:7d:1f:72:07:54:64:54:cd:0a:0b:94:78:54:57:2e:40:
21:16:4d:e5:a9:76:33:35:9e:01:94:9b:70:5c:34:40:72:9c:
98:95:25:7c:d4:46:4e:6b:e6:62:66:51:96:f4:00:0b:f4:2d:
9f:24:5f:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZfVQGiXye6UbRCDsRZQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTY3MzFhODlkZjdlOTM3MWFiYTMzZWIxNGQ3MmY2MWUz
OTgwYjkwHhcNMjYwMzI5MDcwMTM5WhcNMjYwMzMwMDcwMTM5WjAzMTEwLwYDVQQD
EygyMDc5NTUxYzk0MGFmMGI4YzljN2I4Mjk0ZTA3NWZhMGMyNmNlNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKqXuwqB7Z3+keUB7Mv4H1Rplw66
3Y1wr+dte5uYmfmh+gt+nByo6VNlWpcobfmJw0qSlgb2aeeFqcNYTrw0zrmTQX0L
I1YbXYVNg7Wo1aVpw5zVwvgN0Li/1ooqtBKIqN+VPTEPOcFRl24+wCITMVE83XK/
E2iIkPfZ9lNtekNnTOgJBW6RAqOFEEisyIdnvD4yx8aUjWXTNGpBUzkRDk5hd0R8
wX9e9ZNfJ2Ef+UtFU6bLxrygLeK5/Nm+QQeULi3hhWnn81i1gM5NIw9SUq8c7lHj
mjo6fbhNwQnZ3uc3zpjTOfq4kOuxrxhudg967PPah16bXTS6ZwayTqpXfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB5VRyUCvC4yce4KU4HX6DCbOTHMB8GA1UdIwQY
MBaAFIjmcxqJ336TcaujPrFNcvYeOYC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMzZjYjMtZjRmNy00ZDhhLTk1Y2Ut
NmJjZjRhNDJhYzdkLzEvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMzZjYjMtZjRmNy00ZDhhLTk1Y2UtNmJjZjRhNDJhYzdk
LzEvaU9aekdvbmZmcE54cTZNLXNVMXk5aDQ1Z0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/536mat
6Y8VgxNzF3moSd8hkbDakNVAAs4CzHkGs3gv6mhLbkR5mKSCL01RscFij7SrAhcu
/ulg+sP2risLlFnPRxVUhR/biq5s53XPTdGgeoUpAJg1sBHt/DMsDHHlVc/CPejs
yBK795mOQlfqBt2bYT4M8NXAuuNJxLl2h2UKErYpM9kBxpLRmDzNJFiF/QGUVG8h
+LmoO2jrZk8KnZ1TwzrGgTEe456LqUu9hXIC8N6gvrsTn/1v73hn0sowTgFBntWr
qn99H3IHVGRUzQoLlHhUVy5AIRZN5al2MzWeAZSbcFw0QHKcmJUlfNRGTmvmYmZR
lvQAC/QtnyRfvA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:23 2026 by rpki-client