Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: obrGNYTrJJBKoc6F1NRa7ZENPVuCYZKy2X6aDq1H/6w=
Subject key identifier: 29:29:96:32:BD:3A:42:1F:A9:C4:71:D5:B6:6D:D9:8A:3B:5E:BF:04
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019D371BF05F5005614F89D235F5D5DF101F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 163A
Signing time: Sun 29 Mar 2026 01:01:10 +0000
Manifest this update: Sun 29 Mar 2026 01:01:10 +0000
Manifest next update: Mon 30 Mar 2026 01:01:10 +0000
Files and hashes: 1: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: 9BDUsdGiP9NUdj1mrkI7awNYBig0PkP/PgWHPc2rbmI=)
2: oL7Va2kH8P-3vrFReEUhkCyRmcY.roa (hash: r6Ou/HXbegxpeXGw26fS8AHPIewd+N00kGGB9t5uCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f0:5f:50:05:61:4f:89:d2:35:f5:d5:df:10:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Mar 29 01:01:10 2026 GMT
Not After : Mar 30 01:01:10 2026 GMT
Subject: CN=29299632bd3a421fa9c471d5b66dd98a3b5ebf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:26:a1:8d:1c:1f:07:28:94:d2:e9:2e:0f:
31:d4:c7:a5:bb:d3:c3:58:f9:b4:1a:4e:1d:a8:ed:
68:ce:95:29:66:8a:7e:7b:04:f0:25:42:0f:cc:78:
11:ab:b0:73:ef:32:34:3e:28:77:16:f5:7b:bc:29:
2d:9a:e0:bb:db:f3:87:7d:a7:b5:b3:f5:a3:b7:45:
8c:19:68:b9:5a:f9:11:21:31:06:b4:ad:08:39:67:
23:d5:fe:5d:b3:4b:8b:88:59:4f:7e:a4:3e:75:84:
fe:c1:70:7e:e7:2f:8c:a2:a6:b1:24:87:d5:02:0e:
d7:b6:c3:c9:b8:bd:70:7c:fa:a8:13:8e:ba:3d:02:
fc:b2:02:a6:62:8e:69:7c:f6:af:87:83:95:e5:71:
1f:d0:e8:06:db:6f:9c:2a:d0:8d:7d:28:46:a9:14:
f0:ed:c9:11:a2:04:80:47:5f:cd:d7:34:26:d7:96:
73:7b:ba:c2:48:42:3d:e7:d2:71:bf:c9:16:0c:f0:
4a:61:fe:c1:cf:f5:53:35:0e:15:f0:44:99:53:bc:
0c:01:f6:1b:a5:10:24:f0:47:1e:52:6a:b8:82:d1:
9c:fc:19:1c:f6:67:9c:00:dd:12:2b:03:66:02:9b:
cc:70:51:04:38:45:07:20:eb:eb:e7:f2:22:ba:24:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:96:32:BD:3A:42:1F:A9:C4:71:D5:B6:6D:D9:8A:3B:5E:BF:04
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e1:be:35:96:7e:94:a9:0f:c0:6f:a2:24:ba:26:b1:56:fb:
ed:38:e5:41:80:bd:e3:d2:68:16:cf:9c:7f:f6:d8:fb:0b:5a:
fa:ad:c1:5c:76:1d:35:07:dd:6e:10:77:06:3a:be:ce:9d:2c:
a7:0b:c2:33:26:2b:a2:58:09:c6:15:96:e9:1d:61:ee:d7:bc:
25:1b:62:d7:f5:b1:eb:b7:95:6d:8c:3f:55:6b:d1:0d:79:05:
37:7d:7b:d1:77:bd:45:d9:d8:97:3a:60:29:35:32:93:86:1d:
e3:f8:25:49:b1:63:33:64:2c:d9:64:e0:2c:70:4a:07:cb:e2:
28:5b:d9:6c:7a:66:24:f7:5a:75:90:26:3e:86:60:a7:c4:0e:
eb:b1:af:03:15:e7:a1:20:81:43:59:f1:f3:31:15:c4:d7:66:
a1:23:8a:6f:7f:a8:9d:01:43:8d:8c:5f:7b:c7:b5:f6:7d:c2:
fd:fa:37:bb:3c:51:3f:18:d8:0e:fc:dd:5c:22:d8:64:16:8d:
2a:2e:f5:00:92:a9:5a:27:b3:33:22:87:4c:69:50:e0:c4:7c:
69:e7:d7:c0:5b:f7:c9:78:95:db:f5:9f:f2:86:50:81:e8:2a:
51:66:bd:02:ea:d1:e9:2a:fb:67:d5:7f:e7:e6:13:70:67:3f:
40:fb:1d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/BfUAVhT4nSNfXV3xAfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDA5ZTE3MWJhZjhjMmEzYTk0ZDI5YjI0ODc5ZWY5N2Yw
OTY2MDIwHhcNMjYwMzI5MDEwMTEwWhcNMjYwMzMwMDEwMTEwWjAzMTEwLwYDVQQD
EygyOTI5OTYzMmJkM2E0MjFmYTljNDcxZDViNjZkZDk4YTNiNWViZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7kmoY0cHwcolNLpLg8x1Melu9PD
WPm0Gk4dqO1ozpUpZop+ewTwJUIPzHgRq7Bz7zI0Pih3FvV7vCktmuC72/OHfae1
s/Wjt0WMGWi5WvkRITEGtK0IOWcj1f5ds0uLiFlPfqQ+dYT+wXB+5y+MoqaxJIfV
Ag7XtsPJuL1wfPqoE466PQL8sgKmYo5pfPavh4OV5XEf0OgG22+cKtCNfShGqRTw
7ckRogSAR1/N1zQm15Zze7rCSEI959Jxv8kWDPBKYf7Bz/VTNQ4V8ESZU7wMAfYb
pRAk8EceUmq4gtGc/Bkc9mecAN0SKwNmApvMcFEEOEUHIOvr5/IiuiTWCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkpljK9OkIfqcRx1bZt2Yo7Xr8EMB8GA1UdIwQY
MBaAFIoAnhcbr4wqOpTSmySHnvl/CWYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4Zjct
MmU3MjEzNzY3NjI4LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZjM3ZDEtMTRjYS00ZGNmLTk4ZjctMmU3MjEzNzY3NjI4
LzEvaWdDZUZ4dXZqQ282bE5LYkpJZWUtWDhKWmdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeG+NZZ+
lKkPwG+iJLomsVb77TjlQYC949JoFs+cf/bY+wta+q3BXHYdNQfdbhB3Bjq+zp0s
pwvCMyYrolgJxhWW6R1h7te8JRti1/Wx67eVbYw/VWvRDXkFN3170Xe9RdnYlzpg
KTUyk4Yd4/glSbFjM2Qs2WTgLHBKB8viKFvZbHpmJPdadZAmPoZgp8QO67GvAxXn
oSCBQ1nx8zEVxNdmoSOKb3+onQFDjYxfe8e19n3C/fo3uzxRPxjYDvzdXCLYZBaN
Ki71AJKpWiezMyKHTGlQ4MR8aefXwFv3yXiV2/Wf8oZQgegqUWa9AurR6Sr7Z9V/
5+YTcGc/QPsd2A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:34 2026 by rpki-client