Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: s3yuGc4+qDuM9G8pEZPL3KQ1OFDFqBQ4yBiDaoerywk=
Subject key identifier: A6:AF:E0:44:2E:84:C7:86:BB:FB:63:72:17:EE:BA:C7:FA:11:2C:91
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 019D39AF057D97501DF46EC3571DB4D231D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:01:04 +0000
Manifest this update: Sun 29 Mar 2026 13:01:04 +0000
Manifest next update: Mon 30 Mar 2026 13:01:04 +0000
Files and hashes: 1: 1-1E1uif61o8C4HWLXAligJFDeqQ.roa (hash: D5F7YAusAftPV7C9tS7ICY1e2xvUA57jsFdWv4x/B44=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: T7NtYS2SjsDoL15xX991nZ3cSK6SH2nFkOh8FjKVQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:05:7d:97:50:1d:f4:6e:c3:57:1d:b4:d2:31:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Mar 29 13:01:04 2026 GMT
Not After : Mar 30 13:01:04 2026 GMT
Subject: CN=a6afe0442e84c786bbfb637217eebac7fa112c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:5e:74:4a:80:b4:06:eb:db:22:ac:37:44:
29:ff:d1:fb:ca:74:4e:ab:97:b2:1b:32:69:d9:49:
e6:cb:99:91:db:27:23:49:d1:0a:93:88:92:f1:fd:
47:b4:d9:a7:db:69:d2:f1:37:f5:11:f2:a0:ae:1b:
96:09:ab:14:d1:40:ab:af:fc:54:51:9b:ee:88:10:
fd:45:7a:d9:f4:65:5f:23:a4:d4:ab:d7:29:ef:1a:
a5:ef:48:f5:26:50:77:39:fa:ca:b7:9b:a5:e9:80:
57:de:f4:a2:57:d0:e2:2c:fb:61:43:ba:f1:10:32:
de:fc:f9:45:3a:20:27:06:eb:a6:1e:07:2f:c9:70:
78:59:eb:1a:9e:11:e7:3c:84:ed:1a:31:98:5e:0d:
df:82:91:d5:77:f2:f7:6d:08:97:47:b5:38:2b:1f:
b4:ff:55:f6:e1:d2:9c:56:cf:84:0f:38:89:81:bc:
15:30:b3:3f:50:82:9d:b6:d5:c1:82:af:04:f8:48:
41:2a:61:c1:81:d0:86:67:cd:37:17:7e:de:74:0d:
4a:16:da:34:68:6e:f6:88:21:b4:ca:5a:3b:ba:88:
fd:a8:05:ba:df:12:82:3b:63:8e:cf:ca:d7:f5:16:
87:3a:a1:ba:da:a0:eb:b6:85:ce:20:e6:cf:7b:b1:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AF:E0:44:2E:84:C7:86:BB:FB:63:72:17:EE:BA:C7:FA:11:2C:91
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:5f:7f:54:5a:bd:a8:57:30:c0:03:35:75:46:b8:f6:83:
44:3c:77:10:96:3c:67:60:a8:29:d8:47:cf:5e:6a:74:19:52:
4c:cc:0d:4e:6f:33:06:69:70:a5:0a:b6:34:ea:93:ba:1b:b6:
2a:93:54:59:c1:42:5d:60:95:ce:d1:fa:9a:6c:f0:5a:87:bc:
a5:20:9e:5f:35:89:83:03:72:bb:42:6e:ab:fe:f5:b0:b5:b6:
31:b4:b6:d3:4f:fd:9d:c0:c6:b2:52:10:3d:85:94:9d:52:1f:
ac:d0:a7:89:a2:75:16:fe:d2:3b:be:82:4d:25:e3:4e:74:99:
39:74:9c:a1:21:c7:45:28:b5:ec:73:be:12:1e:85:8c:b3:87:
92:2b:30:a1:61:f0:3b:59:c0:dd:ff:10:f6:93:1a:3b:38:be:
56:91:b3:a6:94:03:4c:5d:d3:38:50:eb:86:89:07:f5:cf:d8:
d5:ec:e4:7a:18:05:4e:d6:4b:a7:43:3b:90:d7:29:97:f1:99:
20:1d:b5:1b:c0:7f:58:f9:97:bf:2a:d4:0e:31:4e:d6:b7:bb:
80:6c:b2:24:f6:e3:2a:32:40:84:8b:63:6e:54:dc:7d:68:e7:
25:a0:70:d8:76:7f:4d:e8:e8:ca:4d:ba:3e:44:4d:aa:e5:9c:
27:f4:db:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rwV9l1Ad9G7DVx200jHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMTMwMDc1OTY0OTM4MDJmYjkzYTMyNjczMWZkMzMyOWVh
ZTJkYWMwHhcNMjYwMzI5MTMwMTA0WhcNMjYwMzMwMTMwMTA0WjAzMTEwLwYDVQQD
EyhhNmFmZTA0NDJlODRjNzg2YmJmYjYzNzIxN2VlYmFjN2ZhMTEyYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTpedEqAtAbr2yKsN0Qp/9H7ynRO
q5eyGzJp2Unmy5mR2ycjSdEKk4iS8f1HtNmn22nS8Tf1EfKgrhuWCasU0UCrr/xU
UZvuiBD9RXrZ9GVfI6TUq9cp7xql70j1JlB3OfrKt5ul6YBX3vSiV9DiLPthQ7rx
EDLe/PlFOiAnBuumHgcvyXB4WesanhHnPITtGjGYXg3fgpHVd/L3bQiXR7U4Kx+0
/1X24dKcVs+EDziJgbwVMLM/UIKdttXBgq8E+EhBKmHBgdCGZ803F37edA1KFto0
aG72iCG0ylo7uoj9qAW63xKCO2OOz8rX9RaHOqG62qDrtoXOIObPe7G7BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKav4EQuhMeGu/tjchfuusf6ESyRMB8GA1UdIwQY
MBaAFCITAHWWSTgC+5OjJnMf0zKeri2sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWhNQWRaWkpPQUw3azZNbWN4X1RNcDZ1TGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hODA5NjMtMzA4OS00YWM0LWFmNGYt
M2M4NzE3NDE0ZDgwLzEvSWhNQWRaWkpPQUw3azZNbWN4X1RNcDZ1TGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hODA5NjMtMzA4OS00YWM0LWFmNGYtM2M4NzE3NDE0ZDgw
LzEvSWhNQWRaWkpPQUw3azZNbWN4X1RNcDZ1TGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6tff1Ra
vahXMMADNXVGuPaDRDx3EJY8Z2CoKdhHz15qdBlSTMwNTm8zBmlwpQq2NOqTuhu2
KpNUWcFCXWCVztH6mmzwWoe8pSCeXzWJgwNyu0Juq/71sLW2MbS200/9ncDGslIQ
PYWUnVIfrNCniaJ1Fv7SO76CTSXjTnSZOXScoSHHRSi17HO+Eh6FjLOHkiswoWHw
O1nA3f8Q9pMaOzi+VpGzppQDTF3TOFDrhokH9c/Y1ezkehgFTtZLp0M7kNcpl/GZ
IB21G8B/WPmXvyrUDjFO1re7gGyyJPbjKjJAhItjblTcfWjnJaBw2HZ/Tejoyk26
PkRNquWcJ/TbaA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:27 2026 by rpki-client