Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier: 73ayxLMilquIqLAcFiz2yTb8bom2LHBW/tef6BqCF6k=
Subject key identifier: 31:87:D1:DC:97:EE:3E:A6:38:CB:10:96:2D:E1:33:4A:85:E9:83:DB
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 019D390A03BF2ECD8ADD2126FBEB29F08912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number: 0B98
Signing time: Sun 29 Mar 2026 10:00:50 +0000
Manifest this update: Sun 29 Mar 2026 10:00:50 +0000
Manifest next update: Mon 30 Mar 2026 10:00:50 +0000
Files and hashes: 1: F7Rl3gkShjk9K5KCESdLS7DMA7I.roa (hash: c2n9H0jyH5wMRpTPvaViBcpdlnGbUmhYtVd+x1NbnoM=)
2: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: 7wiYiJBr6Ep1xa2GZVVHmOMdWD+ev79twoyDgByU6uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:03:bf:2e:cd:8a:dd:21:26:fb:eb:29:f0:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Mar 29 10:00:50 2026 GMT
Not After : Mar 30 10:00:50 2026 GMT
Subject: CN=3187d1dc97ee3ea638cb10962de1334a85e983db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:f9:cb:98:30:24:f1:16:aa:6a:1e:1f:72:
82:20:de:20:b2:5e:05:67:fd:0a:58:cc:60:29:6c:
a0:40:2a:e6:11:ae:68:52:f8:18:50:2e:0e:a4:e9:
8b:f8:be:cc:37:8c:56:f4:78:b1:79:47:2a:64:79:
da:f5:61:82:aa:be:ac:e8:3c:04:e8:dc:88:65:92:
e6:83:16:14:d3:29:50:58:50:2d:7a:6f:db:c7:e3:
80:92:8e:d9:ed:68:1d:14:d4:14:2d:1f:1c:08:64:
0f:44:f7:df:4d:67:eb:e8:42:25:6e:52:00:db:cf:
16:cc:7a:46:14:1c:73:49:e0:32:e0:26:86:c9:60:
a0:7a:94:29:96:96:2b:5e:9c:d0:b0:9b:7e:86:d9:
f1:c6:43:00:33:55:94:05:32:94:fe:50:52:38:16:
f8:e5:5e:71:4d:10:c4:bb:8c:5d:a6:50:aa:3f:6a:
2d:79:41:4f:73:d6:01:f7:c9:20:79:cd:c4:0d:bc:
61:4e:75:43:a3:8b:c9:4a:86:18:6d:62:63:ad:df:
aa:15:47:87:e7:8c:5e:cd:8a:b0:72:ce:85:f9:17:
01:2a:5e:b5:54:36:4f:77:d3:f2:c2:b5:06:cf:87:
dc:7c:e3:3b:ec:60:ab:99:ee:13:0c:b8:74:b9:95:
85:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:D1:DC:97:EE:3E:A6:38:CB:10:96:2D:E1:33:4A:85:E9:83:DB
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:55:1f:87:07:fb:65:79:b1:85:c9:8a:a2:f3:68:0b:3a:fe:
0b:23:9f:9f:28:d5:7b:92:31:0e:6f:82:04:6f:37:b6:84:4d:
4e:c5:e0:d0:ae:14:9c:60:49:c9:a3:0c:25:e8:f7:74:a8:d4:
e5:1a:ec:52:3f:75:5b:53:fc:fe:18:12:bb:64:56:ea:b2:31:
7d:19:c9:5d:c1:36:c1:23:f5:6b:9b:95:63:91:9a:92:52:9c:
4e:53:32:f6:51:30:72:56:94:b6:94:23:e9:a2:2e:97:af:b6:
69:87:b0:9d:15:30:ab:6b:dc:6e:42:6f:b2:5e:04:7c:d7:36:
66:69:c1:df:a8:e6:51:32:ee:06:c7:b5:6f:1c:48:ed:c3:86:
68:32:f5:5d:83:2e:00:30:f2:62:d8:6a:23:ba:b7:f7:0b:40:
2f:81:b4:0e:da:c6:1d:c7:18:39:5c:20:81:f5:dd:91:43:f6:
44:46:76:21:ac:8b:b9:24:79:27:70:2f:d6:8d:3c:9e:a0:e5:
ae:fc:76:79:24:12:79:3e:04:e9:7e:24:b6:40:46:f0:6a:7b:
16:12:5e:ce:57:91:8e:e2:cc:5f:e6:4d:51:6a:ae:b7:2b:91:
32:5e:66:67:ef:c8:db:47:50:18:26:cb:1b:f2:fe:d6:4e:e4:
a1:83:5c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgO/Ls2K3SEm++sp8IkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOGFmNmFmNTdkZGZjNWM3YWE4MjhjZjIyNWY5OGRjZTk1
OTA0YTAwHhcNMjYwMzI5MTAwMDUwWhcNMjYwMzMwMTAwMDUwWjAzMTEwLwYDVQQD
EygzMTg3ZDFkYzk3ZWUzZWE2MzhjYjEwOTYyZGUxMzM0YTg1ZTk4M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/P5y5gwJPEWqmoeH3KCIN4gsl4F
Z/0KWMxgKWygQCrmEa5oUvgYUC4OpOmL+L7MN4xW9HixeUcqZHna9WGCqr6s6DwE
6NyIZZLmgxYU0ylQWFAtem/bx+OAko7Z7WgdFNQULR8cCGQPRPffTWfr6EIlblIA
288WzHpGFBxzSeAy4CaGyWCgepQplpYrXpzQsJt+htnxxkMAM1WUBTKU/lBSOBb4
5V5xTRDEu4xdplCqP2oteUFPc9YB98kgec3EDbxhTnVDo4vJSoYYbWJjrd+qFUeH
54xezYqwcs6F+RcBKl61VDZPd9PywrUGz4fcfOM77GCrme4TDLh0uZWFCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGH0dyX7j6mOMsQli3hM0qF6YPbMB8GA1UdIwQY
MBaAFIuK9q9X3fxceqgozyJfmNzpWQSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUt
ZDNjNGY1ZGNiZTRjLzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xZjJjOGYtOGVkOS00YjdlLWFhMWUtZDNjNGY1ZGNiZTRj
LzEvaTRyMnIxZmRfRng2cUNqUElsLVkzT2xaQktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFUfhwf7
ZXmxhcmKovNoCzr+CyOfnyjVe5IxDm+CBG83toRNTsXg0K4UnGBJyaMMJej3dKjU
5RrsUj91W1P8/hgSu2RW6rIxfRnJXcE2wSP1a5uVY5GaklKcTlMy9lEwclaUtpQj
6aIul6+2aYewnRUwq2vcbkJvsl4EfNc2ZmnB36jmUTLuBse1bxxI7cOGaDL1XYMu
ADDyYthqI7q39wtAL4G0DtrGHccYOVwggfXdkUP2REZ2IayLuSR5J3Av1o08nqDl
rvx2eSQSeT4E6X4ktkBG8Gp7FhJezleRjuLMX+ZNUWqutyuRMl5mZ+/I20dQGCbL
G/L+1k7koYNcrw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:30 2026 by rpki-client