Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: g5lG8DheWOEhK+ihQVhFh1vZhxtDS9HvQIadgrsMFU0=
Subject key identifier: 03:62:02:32:9F:8A:45:EC:D2:D9:43:52:16:5C:6F:17:D2:F5:43:2B
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 019D37C02995F69525A6C32EF078AAF725D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 04D0
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: 3xmlsxTNDAPRt4_0q9JN37-J_fo.roa (hash: hrh+PtmNTziEnO3zB1N3sBXi6xmDSdZWbvKSyvj1sho=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: 6PNd9AnrBOZQg7dt7g5STJ2b7N6Jz53MZGuwOeoo8Sc=)
3: pmOgP6lJVCEt59Qkk4t1jrCJur0.roa (hash: jMdmf86ejjzlc+CFJdZFf5qZkdpQs78Wj3mu5HwUV0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:29:95:f6:95:25:a6:c3:2e:f0:78:aa:f7:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=036202329f8a45ecd2d94352165c6f17d2f5432b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:5e:b6:9d:d6:75:ab:b7:13:5d:71:52:35:
ac:08:e4:54:d7:3c:1e:2b:43:69:48:f0:54:1f:a5:
30:63:60:bd:56:55:1d:d8:bb:82:89:e3:5f:a9:30:
6b:0e:7b:d6:5b:be:c1:86:8c:71:14:1f:09:99:0c:
31:fe:0a:78:5a:b2:8a:4e:35:8d:eb:90:72:16:84:
ee:41:a0:d8:f6:d6:b2:73:e2:1c:0b:f1:1a:b0:99:
45:5f:20:1a:ce:c3:ac:1d:05:60:f7:09:21:99:65:
eb:0f:a0:62:7a:f0:7d:ca:15:f6:d2:c6:44:db:8b:
10:9e:c8:65:92:8d:87:55:b9:80:92:ec:56:01:66:
55:41:7c:d3:fb:fb:e4:2c:0a:d1:42:a7:89:e1:b7:
ca:74:6a:93:0d:6f:6e:b7:fd:66:44:43:32:29:b3:
9f:95:7c:69:8c:13:4f:37:f9:73:ce:a4:5e:83:a1:
69:5b:d5:c0:58:60:55:d7:02:76:00:4c:88:e8:1e:
30:37:28:83:57:06:4e:65:ae:96:83:47:b2:49:8e:
79:2b:2a:cc:0b:70:84:fd:59:94:3a:c4:cd:92:b0:
f5:6d:14:0c:5b:e1:db:04:fa:5a:45:5a:c9:38:44:
a2:dd:70:13:90:06:a0:07:b9:a8:b2:0b:a5:bc:85:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:62:02:32:9F:8A:45:EC:D2:D9:43:52:16:5C:6F:17:D2:F5:43:2B
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:24:99:97:a0:75:d8:54:9d:f3:c9:3f:e7:58:da:5c:c2:07:
05:88:ea:e4:e9:4d:89:fe:74:ae:1d:66:42:c7:d5:6a:26:da:
bc:d6:1f:29:82:0c:a5:eb:73:65:a9:f1:6e:15:44:75:95:d4:
89:d5:81:79:4c:3d:e8:54:a8:1a:bd:32:ae:86:d5:94:e2:5f:
91:da:65:89:ab:0b:5f:f8:38:43:34:bb:2d:29:7a:38:8f:7d:
42:94:ae:de:e0:e7:a6:3e:d3:3f:d2:d5:af:e3:c3:34:f1:88:
d3:cf:4f:79:0e:9a:49:9b:47:55:71:b5:c4:fc:18:b8:15:09:
80:36:02:0e:ed:a8:5e:b3:61:4f:45:41:41:6f:b6:4e:0f:d4:
31:b8:11:9b:8c:75:7e:2f:a8:e5:af:93:f7:8b:b2:26:32:b1:
f6:86:34:83:f1:03:5a:d9:e8:52:32:7a:9b:7f:c5:07:eb:17:
a1:1d:5e:aa:77:fa:36:f0:83:1b:43:06:1d:72:38:dc:26:ed:
31:3c:61:32:7c:d8:98:54:29:cb:fc:eb:29:29:0f:c6:8c:a0:
e9:f8:e1:a2:ed:a3:de:e4:ba:b5:60:ad:ae:71:7b:38:a5:3c:
f7:39:00:16:29:75:26:29:62:90:4e:37:a8:08:fa:27:ab:f5:
d5:4f:e3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCmV9pUlpsMu8Hiq9yXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWRhNzgzY2RmYjNjYjZkOWJjODJjMTkyZDZkNzJhYmI0
YTMzNmQwHhcNMjYwMzI5MDQwMDMzWhcNMjYwMzMwMDQwMDMzWjAzMTEwLwYDVQQD
EygwMzYyMDIzMjlmOGE0NWVjZDJkOTQzNTIxNjVjNmYxN2QyZjU0MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ERetp3Wdau3E11xUjWsCORU1zwe
K0NpSPBUH6UwY2C9VlUd2LuCieNfqTBrDnvWW77BhoxxFB8JmQwx/gp4WrKKTjWN
65ByFoTuQaDY9tayc+IcC/EasJlFXyAazsOsHQVg9wkhmWXrD6BievB9yhX20sZE
24sQnshlko2HVbmAkuxWAWZVQXzT+/vkLArRQqeJ4bfKdGqTDW9ut/1mREMyKbOf
lXxpjBNPN/lzzqReg6FpW9XAWGBV1wJ2AEyI6B4wNyiDVwZOZa6Wg0eySY55KyrM
C3CE/VmUOsTNkrD1bRQMW+HbBPpaRVrJOESi3XATkAagB7mosgulvIVxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANiAjKfikXs0tlDUhZcbxfS9UMrMB8GA1UdIwQY
MBaAFCCdp4PN+zy22byCwZLW1yq7SjNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTct
Mjg0NjFiZTg5NzQwLzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTctMjg0NjFiZTg5NzQw
LzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSSZl6B1
2FSd88k/51jaXMIHBYjq5OlNif50rh1mQsfVaibavNYfKYIMpetzZanxbhVEdZXU
idWBeUw96FSoGr0yrobVlOJfkdpliasLX/g4QzS7LSl6OI99QpSu3uDnpj7TP9LV
r+PDNPGI089PeQ6aSZtHVXG1xPwYuBUJgDYCDu2oXrNhT0VBQW+2Tg/UMbgRm4x1
fi+o5a+T94uyJjKx9oY0g/EDWtnoUjJ6m3/FB+sXoR1eqnf6NvCDG0MGHXI43Cbt
MTxhMnzYmFQpy/zrKSkPxoyg6fjhou2j3uS6tWCtrnF7OKU89zkAFil1JilikE43
qAj6J6v11U/jFg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:27 2026 by rpki-client