
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: 28G14SgpsIb0Mp3uwbYPFt+LvSwcP8eerNUiuqDjdMg=
Subject key identifier: FB:50:D2:05:14:04:B8:14:EB:BA:4E:5F:40:DF:E4:9E:F5:CE:9C:37
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 019D37530A40BF66AC149D4E4D568E8C3963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 02:01:22 +0000
Manifest this update: Sun 29 Mar 2026 02:01:22 +0000
Manifest next update: Mon 30 Mar 2026 02:01:22 +0000
Files and hashes: 1: Ra13SMTFBvpWhxXrpfFnFw-OimM.roa (hash: b0Za2pBFcrD4LJ53MzUO0gNJytzhPTrcz+l8K+RFsRM=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: 52nDUzTufJna1dUfoXslW36PjjRddMZtTsHVXnQ2K18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:0a:40:bf:66:ac:14:9d:4e:4d:56:8e:8c:39:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Mar 29 02:01:22 2026 GMT
Not After : Mar 30 02:01:22 2026 GMT
Subject: CN=fb50d2051404b814ebba4e5f40dfe49ef5ce9c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:c1:13:11:bb:41:cd:b4:75:da:80:18:2e:
7a:e7:78:fd:a7:a6:8a:09:fc:d1:1b:bf:f3:8b:97:
e5:50:2d:8a:47:ba:cc:21:48:70:1b:4f:a8:32:80:
e8:d7:42:66:81:ba:e0:5e:ee:b1:8c:e1:1a:c1:76:
54:98:22:cd:94:4b:d5:66:ad:e5:2d:c9:cf:43:2b:
19:bb:85:5c:94:24:d8:ef:2b:d4:19:69:24:94:01:
63:67:c1:00:fd:9f:97:27:ea:e4:23:bd:ae:cc:72:
28:2e:b8:ac:3e:de:d3:b0:b3:44:88:2f:47:04:d5:
76:af:fe:c4:66:7a:ae:3a:03:1e:e3:d2:52:d6:3a:
d5:13:be:9f:c1:0f:99:2f:da:20:14:49:b0:8c:39:
e3:91:b2:3d:e6:bd:a2:53:78:b1:59:c1:2b:11:e3:
fe:c5:51:fd:92:4f:d1:66:86:cf:61:09:eb:19:4f:
72:21:ff:a6:1f:46:75:69:37:66:f6:4c:0a:50:c9:
5d:c5:9a:97:60:1d:d8:d8:30:6e:3e:6e:47:95:93:
d0:8f:a6:11:7c:00:6d:c9:93:23:b3:86:a6:76:89:
63:e6:f5:f9:06:f7:25:ae:ab:cd:f0:25:91:68:90:
87:e4:95:0d:92:ef:86:4f:e1:0d:91:c8:1a:1d:58:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:D2:05:14:04:B8:14:EB:BA:4E:5F:40:DF:E4:9E:F5:CE:9C:37
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:09:86:13:eb:9e:a4:a7:6b:d9:02:8d:f1:a3:29:97:e4:
8b:9f:8e:9a:9b:8e:01:7e:69:2b:55:36:6a:82:57:07:df:d6:
cb:77:38:7b:c1:84:35:b5:ff:e3:f2:c6:88:29:64:22:48:80:
dc:3e:d5:7a:39:ed:19:22:47:08:27:1a:04:65:66:da:6c:90:
f1:fd:0e:b5:15:01:03:72:e1:d2:eb:72:ae:53:b6:03:1a:aa:
55:db:19:fe:9e:d3:54:f3:50:c7:1e:00:e6:3e:f2:b1:97:24:
82:8c:29:a7:d4:24:0b:c1:80:c8:8d:f5:da:e4:52:d0:81:96:
c8:23:8e:1c:c9:b6:c4:93:55:23:84:d1:0d:f4:41:d2:03:c8:
3c:b5:11:27:7f:13:17:65:68:e3:97:e9:65:1d:c1:1f:3b:a3:
fd:9a:5b:d5:19:11:a3:73:26:2b:85:15:bb:aa:5d:ad:af:97:
94:e6:00:ed:6a:ee:2e:dd:5f:e2:45:30:80:41:55:d3:50:a4:
06:f8:b2:1f:9f:56:95:ad:05:58:de:cb:83:33:f7:c9:64:ef:
10:1d:d6:5e:88:25:61:eb:35:0b:3c:99:af:c6:3c:e8:36:d4:
db:66:1b:c3:4f:c4:77:e4:70:01:3e:b4:57:69:0d:e2:9a:ed:
03:86:71:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UwpAv2asFJ1OTVaOjDljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjc3MzgxODUxMjQ5MGE1MDBhZDg0M2VhMmFlNzE3ZWYy
MWIxNGMwHhcNMjYwMzI5MDIwMTIyWhcNMjYwMzMwMDIwMTIyWjAzMTEwLwYDVQQD
EyhmYjUwZDIwNTE0MDRiODE0ZWJiYTRlNWY0MGRmZTQ5ZWY1Y2U5YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuLBExG7Qc20ddqAGC5653j9p6aK
CfzRG7/zi5flUC2KR7rMIUhwG0+oMoDo10JmgbrgXu6xjOEawXZUmCLNlEvVZq3l
LcnPQysZu4VclCTY7yvUGWkklAFjZ8EA/Z+XJ+rkI72uzHIoLrisPt7TsLNEiC9H
BNV2r/7EZnquOgMe49JS1jrVE76fwQ+ZL9ogFEmwjDnjkbI95r2iU3ixWcErEeP+
xVH9kk/RZobPYQnrGU9yIf+mH0Z1aTdm9kwKUMldxZqXYB3Y2DBuPm5HlZPQj6YR
fABtyZMjs4amdolj5vX5BvclrqvN8CWRaJCH5JUNku+GT+ENkcgaHViffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtQ0gUUBLgU67pOX0Df5J71zpw3MB8GA1UdIwQY
MBaAFIu3c4GFEkkKUArYQ+oq5xfvIbFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUt
NTJiM2Y2OGRjMGMyLzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81ZGVkNmMtYjQ2OS00MjBjLWIxNWUtNTJiM2Y2OGRjMGMy
LzEvaTdkemdZVVNTUXBRQ3RoRDZpcm5GLThoc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZmwJhhPr
nqSna9kCjfGjKZfki5+OmpuOAX5pK1U2aoJXB9/Wy3c4e8GENbX/4/LGiClkIkiA
3D7VejntGSJHCCcaBGVm2myQ8f0OtRUBA3Lh0utyrlO2AxqqVdsZ/p7TVPNQxx4A
5j7ysZckgowpp9QkC8GAyI312uRS0IGWyCOOHMm2xJNVI4TRDfRB0gPIPLURJ38T
F2Vo45fpZR3BHzuj/Zpb1RkRo3MmK4UVu6pdra+XlOYA7WruLt1f4kUwgEFV01Ck
BviyH59Wla0FWN7LgzP3yWTvEB3WXoglYes1CzyZr8Y86DbU22Ybw0/Ed+RwAT60
V2kN4prtA4ZxDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 05:51:05 2026 by rpki-client