Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: Eg3cw6kqAuHsOGYBh5I4avJcbB+5z1ZO3fMhOc9QFM4=
Subject key identifier: BB:9B:AC:CB:C6:BA:B1:D4:56:E3:D9:99:15:BD:7A:4A:06:E9:38:DE
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 019D39781B318C084BA9EE7576375A5DEDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 159F
Signing time: Sun 29 Mar 2026 12:01:05 +0000
Manifest this update: Sun 29 Mar 2026 12:01:05 +0000
Manifest next update: Mon 30 Mar 2026 12:01:05 +0000
Files and hashes: 1: WC7-N-AQVvJOrJsfvHc7Lw82OeA.roa (hash: DSIGTtOOJTOd6v4lSY+KI5Vvun5FIwwizdppUGcnQf0=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: QMVyVK1NnD9UcuVEBhmN8+a8xkUHobDFrsZwb0y35V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1b:31:8c:08:4b:a9:ee:75:76:37:5a:5d:ed:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Mar 29 12:01:05 2026 GMT
Not After : Mar 30 12:01:05 2026 GMT
Subject: CN=bb9baccbc6bab1d456e3d99915bd7a4a06e938de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:fd:24:78:3a:2d:46:04:72:84:a0:1f:0b:
23:8f:a4:07:60:a9:21:1e:f0:7d:39:54:c9:c8:5f:
85:46:f8:ec:3e:fc:b0:bf:bf:61:f9:f6:27:9a:82:
32:60:4e:b7:a9:aa:ee:74:4d:6b:02:06:05:d5:d7:
4a:53:ab:bc:bd:96:af:b5:e8:52:c2:cd:4b:a3:3e:
8f:23:d3:19:bc:e9:99:96:b7:9e:08:e2:9a:86:8f:
1d:fe:7b:99:04:d7:e6:63:13:65:76:aa:44:47:ba:
1b:7c:45:b8:1d:05:45:ba:6e:85:fc:98:06:42:29:
b7:91:9d:69:ea:e2:5f:f4:9b:84:89:21:17:1a:3e:
4d:bd:c9:d6:ba:02:54:fd:d6:41:dd:d2:4d:44:8b:
8d:61:fc:e6:4a:6d:d4:37:c4:a9:69:68:a1:9a:f5:
14:cc:99:f7:44:a9:a4:c8:57:67:11:8c:c2:0a:70:
5b:6a:8e:a7:46:b2:4a:0f:48:3d:71:44:ca:fe:fa:
d6:53:b8:31:83:0b:23:15:83:e1:dc:ab:fa:30:47:
16:01:0e:8d:d7:f7:0f:2e:cb:6c:ac:e3:68:c1:87:
03:27:a8:68:0a:21:3e:7c:ed:5c:b9:f9:6f:ff:c1:
4d:8a:af:3a:8d:49:88:8d:d2:80:55:d0:2b:73:6e:
0d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9B:AC:CB:C6:BA:B1:D4:56:E3:D9:99:15:BD:7A:4A:06:E9:38:DE
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e6:57:29:68:3e:02:e7:a4:28:92:34:a9:c2:b0:14:8e:4e:
a3:ec:4a:1c:4c:96:86:1e:ff:f5:ee:ba:8e:13:ce:14:25:a5:
d5:61:78:b3:51:ba:e8:e6:4e:92:18:fa:13:c7:86:99:5d:f8:
3a:86:ee:a3:ac:ad:12:3f:a1:61:e9:a6:17:a0:a1:b2:65:2a:
cb:03:0a:f1:45:3f:dd:10:3e:3d:14:88:f0:02:2d:0a:5c:fc:
38:cb:9b:7c:84:f5:d8:02:e2:77:f0:fe:38:a3:2d:fa:9e:96:
6a:d5:f4:8a:3b:ef:30:23:23:b6:9c:63:46:ad:ce:82:8e:3b:
56:b2:cb:ae:50:15:60:2e:96:f5:ba:c7:7c:00:2b:7a:44:9a:
f2:c9:1e:2d:5c:03:58:6b:05:13:1b:72:ae:67:33:67:88:c6:
4c:31:c5:0d:95:24:e0:72:a9:47:e2:ae:20:bc:01:be:0e:ef:
08:2e:a2:3d:70:61:93:a3:0c:bf:f5:e4:9a:f2:ea:6d:38:75:
3e:ff:9b:fd:f1:75:3f:39:cf:c7:c7:3b:b8:af:1c:da:81:15:
a0:57:7c:88:c1:c0:b4:f6:cf:7b:37:db:68:52:3e:8f:65:cb:
ef:84:f5:2d:73:bd:c3:9b:45:03:4a:4b:21:00:7d:80:bf:56:
1e:91:00:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eBsxjAhLqe51djdaXe3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmViMmIwNTBkNTBhZDhjZTEwYzFjMmY1MDdmZGI4YTUy
ZDAyOGMwHhcNMjYwMzI5MTIwMTA1WhcNMjYwMzMwMTIwMTA1WjAzMTEwLwYDVQQD
EyhiYjliYWNjYmM2YmFiMWQ0NTZlM2Q5OTkxNWJkN2E0YTA2ZTkzOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00f9JHg6LUYEcoSgHwsjj6QHYKkh
HvB9OVTJyF+FRvjsPvywv79h+fYnmoIyYE63qarudE1rAgYF1ddKU6u8vZavtehS
ws1Loz6PI9MZvOmZlreeCOKaho8d/nuZBNfmYxNldqpER7obfEW4HQVFum6F/JgG
Qim3kZ1p6uJf9JuEiSEXGj5NvcnWugJU/dZB3dJNRIuNYfzmSm3UN8SpaWihmvUU
zJn3RKmkyFdnEYzCCnBbao6nRrJKD0g9cUTK/vrWU7gxgwsjFYPh3Kv6MEcWAQ6N
1/cPLstsrONowYcDJ6hoCiE+fO1cuflv/8FNiq86jUmIjdKAVdArc24NlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLubrMvGurHUVuPZmRW9ekoG6TjeMB8GA1UdIwQY
MBaAFIj+srBQ1QrYzhDBwvUH/bilLQKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMt
MmYyMWY0NTI0NjgzLzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8xZDMxMmYtYmU5ZS00YTI3LWIyMmMtMmYyMWY0NTI0Njgz
LzEvaVA2eXNGRFZDdGpPRU1IQzlRZjl1S1V0QW93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuZXKWg+
AuekKJI0qcKwFI5Oo+xKHEyWhh7/9e66jhPOFCWl1WF4s1G66OZOkhj6E8eGmV34
Oobuo6ytEj+hYemmF6ChsmUqywMK8UU/3RA+PRSI8AItClz8OMubfIT12ALid/D+
OKMt+p6WatX0ijvvMCMjtpxjRq3Ogo47VrLLrlAVYC6W9brHfAArekSa8skeLVwD
WGsFExtyrmczZ4jGTDHFDZUk4HKpR+KuILwBvg7vCC6iPXBhk6MMv/XkmvLqbTh1
Pv+b/fF1PznPx8c7uK8c2oEVoFd8iMHAtPbPezfbaFI+j2XL74T1LXO9w5tFA0pL
IQB9gL9WHpEA7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:11 2026 by rpki-client