Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: Y1HcIBqr8bIUVOBFm9kui/6SrMsizAAGUSQltUB65PI=
Subject key identifier: 2A:A8:05:9C:CB:C8:20:FA:E0:B9:8F:9D:C2:4C:8A:14:09:14:25:3F
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 019D38668BF42AFDE518EBA84CBE96E2FC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 137B
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: SQcy0WZMXlkUa3WSwRWyMrFycHC8JtrUpkU2uauF0h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8b:f4:2a:fd:e5:18:eb:a8:4c:be:96:e2:fc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=2aa8059ccbc820fae0b98f9dc24c8a140914253f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:96:69:02:96:e0:79:7c:1f:f2:73:31:3a:
1e:e9:28:2b:91:21:e4:a6:9e:8d:9b:b9:5c:90:bf:
58:73:d3:2f:6e:90:2f:53:40:36:0a:0a:0a:96:62:
ee:f9:ee:61:82:b7:96:3c:6c:84:4d:01:79:73:1b:
6b:69:ff:c8:5a:54:eb:83:b7:d6:18:db:55:75:a7:
3e:92:bd:a3:fb:75:62:c5:bd:5d:63:ed:36:18:4a:
68:df:cd:ee:5a:0c:4f:f3:a4:80:0d:8f:2e:4a:0e:
2f:fb:40:94:b8:42:25:e3:cc:71:46:f9:c7:a3:7f:
49:ab:28:ec:c5:da:2b:68:97:fc:2f:77:9a:da:23:
be:41:1f:a2:fe:2a:74:fb:6b:d5:53:8e:b1:d5:f0:
a5:eb:f0:9e:19:ff:b5:69:c8:8b:fe:bf:c6:e8:79:
e9:35:8d:5f:3c:a1:bb:d6:0b:2e:2e:f9:49:7b:f7:
53:42:c7:94:57:c5:8d:80:83:aa:98:d0:ae:e6:ba:
20:fb:36:90:05:d8:c3:bf:6d:73:48:10:03:59:9c:
2f:46:7e:9c:54:00:13:07:3c:eb:07:a0:4b:b0:51:
d3:7d:ba:af:ca:66:0c:d9:15:de:1d:b4:f8:c9:3a:
9c:c6:a0:0e:50:7c:21:c2:a3:c8:fc:c4:7b:13:8f:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A8:05:9C:CB:C8:20:FA:E0:B9:8F:9D:C2:4C:8A:14:09:14:25:3F
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:14:ba:64:2c:2e:69:86:06:f5:71:7e:ad:f6:18:03:9f:11:
d4:f8:ac:07:55:8d:89:01:67:de:d1:95:20:5c:cf:f9:72:c0:
3e:ef:4a:78:2e:5b:a7:d4:a4:60:85:f6:d4:5e:81:7c:33:00:
12:46:12:74:eb:7c:47:35:a0:46:16:31:65:2a:24:68:fb:30:
25:bc:5c:e7:cf:76:a4:95:ab:81:a0:9c:c5:4f:42:2d:11:e1:
ac:39:e6:f7:13:7c:a8:d4:e6:b8:9e:eb:b0:de:40:3c:fb:cc:
01:52:9b:3d:16:0c:53:95:99:49:60:7b:7b:70:03:42:b9:b5:
48:2d:f0:ba:92:0f:b4:18:08:47:6c:a4:30:da:0c:de:c4:e3:
c4:8c:cc:06:69:05:2b:c0:54:9c:5c:fe:aa:52:66:40:cd:3c:
0f:c3:38:12:32:2b:6a:a2:c8:4a:09:c7:55:59:a2:86:45:de:
c5:7f:69:dc:3f:81:2a:b7:98:60:8f:b3:5a:69:8e:a5:80:6f:
73:d0:bb:55:2c:4b:50:f6:e9:16:3f:9f:7e:48:6a:7b:d2:c4:
fc:5d:11:7c:ff:62:54:b5:82:24:e6:d4:1f:4e:ee:b5:be:98:
2e:53:3f:0d:f5:27:82:a0:b3:76:ed:72:14:63:dd:bd:d5:b9:
15:c8:91:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04Zov0Kv3lGOuoTL6W4vxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0
NGNjNmEwHhcNMjYwMzI5MDcwMjE3WhcNMjYwMzMwMDcwMjE3WjAzMTEwLwYDVQQD
EygyYWE4MDU5Y2NiYzgyMGZhZTBiOThmOWRjMjRjOGExNDA5MTQyNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyCWaQKW4Hl8H/JzMToe6SgrkSHk
pp6Nm7lckL9Yc9MvbpAvU0A2CgoKlmLu+e5hgreWPGyETQF5cxtraf/IWlTrg7fW
GNtVdac+kr2j+3Vixb1dY+02GEpo383uWgxP86SADY8uSg4v+0CUuEIl48xxRvnH
o39JqyjsxdoraJf8L3ea2iO+QR+i/ip0+2vVU46x1fCl6/CeGf+1aciL/r/G6Hnp
NY1fPKG71gsuLvlJe/dTQseUV8WNgIOqmNCu5rog+zaQBdjDv21zSBADWZwvRn6c
VAATBzzrB6BLsFHTfbqvymYM2RXeHbT4yTqcxqAOUHwhwqPI/MR7E48dAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqoBZzLyCD64LmPncJMihQJFCU/MB8GA1UdIwQY
MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt
MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl
LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBS6ZCwu
aYYG9XF+rfYYA58R1PisB1WNiQFn3tGVIFzP+XLAPu9KeC5bp9SkYIX21F6BfDMA
EkYSdOt8RzWgRhYxZSokaPswJbxc5892pJWrgaCcxU9CLRHhrDnm9xN8qNTmuJ7r
sN5APPvMAVKbPRYMU5WZSWB7e3ADQrm1SC3wupIPtBgIR2ykMNoM3sTjxIzMBmkF
K8BUnFz+qlJmQM08D8M4EjIraqLISgnHVVmihkXexX9p3D+BKreYYI+zWmmOpYBv
c9C7VSxLUPbpFj+ffkhqe9LE/F0RfP9iVLWCJObUH07utb6YLlM/DfUngqCzdu1y
FGPdvdW5FciRDg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:59 2026 by rpki-client