Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: b7pZy1V4QL2Bzu6LFb8a1zf31BQSWZqdzen74OElds8=
Subject key identifier: 1A:A8:82:69:A0:5A:21:DC:84:2F:45:88:DA:06:B9:21:2F:22:21:B5
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019D37C08E667CEECF278B24FE278F3222B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:00:59 +0000
Manifest this update: Sun 29 Mar 2026 04:00:59 +0000
Manifest next update: Mon 30 Mar 2026 04:00:59 +0000
Files and hashes: 1: DGukc6480PTm8A6qHwc8DlqO2P4.roa (hash: f9ejFsVfN9O7L7m90T24ZiiptOfoC8NK6uhiGNPuCps=)
2: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: HeHErpGGIVsfiIazET8bKCGl/T0CkSbkvuJUR6n0DYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:8e:66:7c:ee:cf:27:8b:24:fe:27:8f:32:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Mar 29 04:00:59 2026 GMT
Not After : Mar 30 04:00:59 2026 GMT
Subject: CN=1aa88269a05a21dc842f4588da06b9212f2221b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:f6:78:bc:6e:21:ee:a8:99:13:c6:1a:9a:
c7:2c:1b:7d:72:22:73:3d:dd:73:2e:d2:1f:23:fd:
6e:a8:80:b4:28:be:66:49:3e:12:41:c5:58:14:93:
ae:85:f9:69:f3:37:64:ec:92:b1:ad:27:92:0d:7c:
c3:b7:75:d6:b0:57:24:21:dd:75:3c:31:ea:70:b6:
18:49:21:f7:8a:cc:e8:ac:f1:97:42:b9:a1:81:54:
28:ef:03:06:7b:f6:f8:9f:6b:d7:b6:56:58:c8:73:
23:d1:1f:61:a0:16:dd:91:b5:f2:c1:bf:65:c2:2c:
f7:3c:91:6b:b9:3c:26:82:2b:2c:35:a4:d0:b9:ff:
f4:ce:93:f0:ef:c3:35:83:50:f2:d5:c5:09:61:6f:
dd:60:3f:39:d6:5f:32:5e:d3:d4:49:c5:7c:6a:d6:
d2:b5:e6:f1:b9:4a:2d:77:bb:7c:ed:0e:83:26:a0:
74:97:a9:90:99:c6:9a:77:9b:f2:8b:87:55:fb:70:
0f:a3:6d:42:de:84:eb:e6:1a:f3:ad:9a:79:a9:d2:
3e:0c:2f:56:b7:e2:4a:14:c2:e6:14:07:e5:39:7c:
57:cb:89:96:5e:a8:c2:a9:f7:e0:d0:18:65:80:2a:
9b:52:49:e1:5f:80:17:9c:2b:4d:c2:0a:f5:45:45:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A8:82:69:A0:5A:21:DC:84:2F:45:88:DA:06:B9:21:2F:22:21:B5
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:28:a0:78:ef:6d:58:f0:e9:62:32:24:1b:cf:a8:7d:66:2e:
a3:10:66:5e:40:9d:05:53:bc:ab:93:9f:61:e8:9e:13:61:f8:
05:a8:e4:46:db:1e:52:b1:a5:4d:4d:cc:37:9f:18:ef:3e:d6:
62:75:af:73:a3:39:85:9a:88:67:4a:9b:29:f7:81:14:be:4e:
30:a6:12:cf:77:11:aa:f2:d9:fe:8f:62:b0:fd:16:e3:fe:cb:
ad:19:26:74:76:df:a9:00:a3:85:97:5c:92:28:71:9e:f3:73:
14:bd:d4:d2:b8:77:cd:82:7a:a8:94:39:1f:20:dd:7d:b7:e5:
c3:27:f6:09:07:44:41:ea:fd:b0:97:58:24:b2:4a:a7:cf:eb:
30:14:f2:bf:89:10:41:b3:ce:bb:12:5f:39:70:0a:7b:21:59:
5a:a5:b9:be:af:08:02:ea:10:2b:4a:ca:e3:69:b8:0e:bc:38:
cd:0a:ee:0c:d3:f1:c8:94:1e:2c:93:e0:1e:0c:68:9a:43:36:
d2:5d:5e:c6:3a:7b:57:bb:f3:db:14:95:a3:7e:9a:7b:fc:6b:
06:d4:2b:b2:95:3b:52:54:2e:bf:ed:22:c1:e2:3e:f2:cd:30:
6f:19:e0:ef:c5:5d:3d:f6:b9:f4:b2:d1:98:39:ad:ac:12:d9:
7c:2a:11:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wI5mfO7PJ4sk/iePMiK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDQ0NzJkMTY5NzM2OWQ4MzJiYTEyNmU1ZTE3MjMyYWNk
NWY1ZjMwHhcNMjYwMzI5MDQwMDU5WhcNMjYwMzMwMDQwMDU5WjAzMTEwLwYDVQQD
EygxYWE4ODI2OWEwNWEyMWRjODQyZjQ1ODhkYTA2YjkyMTJmMjIyMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxn2eLxuIe6omRPGGprHLBt9ciJz
Pd1zLtIfI/1uqIC0KL5mST4SQcVYFJOuhflp8zdk7JKxrSeSDXzDt3XWsFckId11
PDHqcLYYSSH3iszorPGXQrmhgVQo7wMGe/b4n2vXtlZYyHMj0R9hoBbdkbXywb9l
wiz3PJFruTwmgissNaTQuf/0zpPw78M1g1Dy1cUJYW/dYD851l8yXtPUScV8atbS
tebxuUotd7t87Q6DJqB0l6mQmcaad5vyi4dV+3APo21C3oTr5hrzrZp5qdI+DC9W
t+JKFMLmFAflOXxXy4mWXqjCqffg0BhlgCqbUknhX4AXnCtNwgr1RUXiEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqogmmgWiHchC9FiNoGuSEvIiG1MB8GA1UdIwQY
MBaAFCFERy0WlzadgyuhJuXhcjKs1fXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEt
ODc3ZDMxYzE2MWMzLzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kYzIwNWItYWY1ZC00ZGZmLTg1MmEtODc3ZDMxYzE2MWMz
LzEvSVVSSExSYVhOcDJESzZFbTVlRnlNcXpWOWZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyigeO9t
WPDpYjIkG8+ofWYuoxBmXkCdBVO8q5OfYeieE2H4BajkRtseUrGlTU3MN58Y7z7W
YnWvc6M5hZqIZ0qbKfeBFL5OMKYSz3cRqvLZ/o9isP0W4/7LrRkmdHbfqQCjhZdc
kihxnvNzFL3U0rh3zYJ6qJQ5HyDdfbflwyf2CQdEQer9sJdYJLJKp8/rMBTyv4kQ
QbPOuxJfOXAKeyFZWqW5vq8IAuoQK0rK42m4Drw4zQruDNPxyJQeLJPgHgxomkM2
0l1exjp7V7vz2xSVo36ae/xrBtQrspU7UlQuv+0iweI+8s0wbxng78VdPfa59LLR
mDmtrBLZfCoRJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:49 2026 by rpki-client