Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: w+50hz7ua2N9+DOk7GBG8wpa+vdHC+znMB+uNtcl8pc=
Subject key identifier: D7:90:C0:B8:CF:A2:07:E3:27:F2:63:19:7D:02:B4:7D:44:22:C6:31
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019D3563EE4E3EEC5FA0A39C1F3465D5D986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 0C28
Signing time: Sat 28 Mar 2026 17:00:34 +0000
Manifest this update: Sat 28 Mar 2026 17:00:34 +0000
Manifest next update: Sun 29 Mar 2026 17:00:34 +0000
Files and hashes: 1: WDCEfBOgZu0IS0tXVscqDchFouE.roa (hash: M77yLF1D375mORfB1s9NJJsYDZZdRI/2B/Q2R1Rr0oU=)
2: eHFFve7oB3P4jI8nEd4tmbXombs.roa (hash: 2jkRmBwjqx2G1TPqQBkiFukmoNh6yKO3uMYlkbOFlyk=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: pnpPIGn0eecUN7PZw2JDdLAx2JKgFgrPpdcHS4nPcKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:63:ee:4e:3e:ec:5f:a0:a3:9c:1f:34:65:d5:d9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Mar 28 17:00:34 2026 GMT
Not After : Mar 29 17:00:34 2026 GMT
Subject: CN=d790c0b8cfa207e327f263197d02b47d4422c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:e1:f4:0f:a7:3a:9b:31:85:81:0f:2b:1f:
e2:ee:4a:d0:5a:d5:c7:df:9d:10:f1:73:39:d3:9d:
2d:e1:c2:7c:7f:35:89:77:f6:a0:23:cb:65:f1:2e:
7c:57:a7:f2:81:ed:6e:fd:87:29:da:a1:39:c2:4e:
9a:fe:e1:0c:50:7a:74:f2:02:f2:47:67:d0:c2:6d:
fe:ae:42:d4:61:93:c8:fb:46:80:a3:c1:e2:88:91:
72:a7:3e:44:e6:49:70:93:4c:2d:22:50:9b:20:5c:
34:ae:8b:13:31:f0:29:f1:ae:34:47:28:e0:36:26:
eb:b0:65:56:60:3d:7b:72:c8:b6:8a:0f:45:c4:8c:
b8:cf:7f:21:a6:09:01:51:83:21:6b:8b:cb:9e:fd:
f9:f1:fd:f8:d1:1b:b4:fc:0c:6b:22:d8:26:0d:e1:
cb:14:18:d5:32:68:c5:53:92:74:5f:8a:b6:7b:df:
1b:af:92:7c:57:1e:ba:8e:fb:d7:08:c4:30:8d:84:
bb:71:08:73:b0:f7:af:c3:0b:5b:75:40:6e:bd:35:
a1:2e:d8:8c:17:0a:90:e1:81:ba:82:1e:dd:69:80:
ed:73:b5:5e:fe:bc:29:1a:5b:33:53:f0:23:9d:3d:
f9:92:61:09:4d:f4:d1:3f:af:40:00:66:39:7f:b7:
fd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:90:C0:B8:CF:A2:07:E3:27:F2:63:19:7D:02:B4:7D:44:22:C6:31
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:fc:34:89:03:fd:4c:50:49:d0:f8:2d:a4:c9:b3:7e:cf:
8d:55:fd:34:67:3f:96:db:fc:db:15:ba:f7:a5:4a:75:c8:33:
1f:a4:6d:92:c7:89:19:86:1d:cd:d9:52:49:d3:30:c4:7c:3e:
c7:31:a0:6e:2f:9e:79:42:c9:8a:88:f3:c1:e1:53:70:f5:53:
c4:10:02:81:5a:b1:b5:94:2a:00:72:c0:f0:c4:a5:e0:ac:35:
fd:09:9f:29:31:23:bc:fb:63:dc:46:db:30:8a:49:6d:18:0b:
98:7a:82:12:c1:45:de:cf:52:22:e2:6c:c2:d7:95:9f:fd:e7:
e5:65:de:98:4c:52:6d:c0:ed:09:c9:1d:62:f2:ae:7c:9c:7c:
24:d7:e9:24:2b:c7:0f:61:02:b7:59:08:1c:76:51:51:d2:d2:
3b:41:8f:fe:55:4f:1c:17:e0:7e:79:b8:cc:58:79:12:93:be:
2d:df:9e:66:c5:93:b1:f1:b7:c4:cd:f3:de:60:0f:03:57:79:
36:1d:4d:0d:43:c6:66:02:d5:2b:38:e4:20:ea:9f:dc:1f:24:
6d:16:95:55:71:6f:58:32:a6:8e:64:ce:d5:0d:25:8c:ea:f1:
f6:33:9f:bf:f8:df:3f:1b:6e:60:27:b4:e0:b8:52:f5:16:a1:
00:90:38:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ01Y+5OPuxfoKOcHzRl1dmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmY0ZWU2MjNkOGZhYjczYzkwMWQwY2JkYzkzYTMyMWU5
Y2NmYjcwHhcNMjYwMzI4MTcwMDM0WhcNMjYwMzI5MTcwMDM0WjAzMTEwLwYDVQQD
EyhkNzkwYzBiOGNmYTIwN2UzMjdmMjYzMTk3ZDAyYjQ3ZDQ0MjJjNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Dh9A+nOpsxhYEPKx/i7krQWtXH
350Q8XM5050t4cJ8fzWJd/agI8tl8S58V6fyge1u/Ycp2qE5wk6a/uEMUHp08gLy
R2fQwm3+rkLUYZPI+0aAo8HiiJFypz5E5klwk0wtIlCbIFw0rosTMfAp8a40Ryjg
NibrsGVWYD17csi2ig9FxIy4z38hpgkBUYMha4vLnv358f340Ru0/AxrItgmDeHL
FBjVMmjFU5J0X4q2e98br5J8Vx66jvvXCMQwjYS7cQhzsPevwwtbdUBuvTWhLtiM
FwqQ4YG6gh7daYDtc7Ve/rwpGlszU/AjnT35kmEJTfTRP69AAGY5f7f9OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeQwLjPogfjJ/JjGX0CtH1EIsYxMB8GA1UdIwQY
MBaAFIj/TuYj2Pq3PJAdDL3JOjIenM+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgt
MjUwN2RiMzJjMWM0LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lYWYyZTItMTgxNy00MGE4LTliZTgtMjUwN2RiMzJjMWM0
LzEvaVA5TzVpUFktcmM4a0IwTXZjazZNaDZjejdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBr8NIkD
/UxQSdD4LaTJs37PjVX9NGc/ltv82xW696VKdcgzH6RtkseJGYYdzdlSSdMwxHw+
xzGgbi+eeULJiojzweFTcPVTxBACgVqxtZQqAHLA8MSl4Kw1/QmfKTEjvPtj3Ebb
MIpJbRgLmHqCEsFF3s9SIuJswteVn/3n5WXemExSbcDtCckdYvKufJx8JNfpJCvH
D2ECt1kIHHZRUdLSO0GP/lVPHBfgfnm4zFh5EpO+Ld+eZsWTsfG3xM3z3mAPA1d5
Nh1NDUPGZgLVKzjkIOqf3B8kbRaVVXFvWDKmjmTO1Q0ljOrx9jOfv/jfPxtuYCe0
4LhS9RahAJA4tQ==
-----END CERTIFICATE-----
Generated at Sat Mar 28 21:46:27 2026 by rpki-client