Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: UMSeAeWbNzpLuXV/PVH+rACIjlFFTGjBZ/b/IONA4bs=
Subject key identifier: F7:13:E9:DB:4F:A6:5C:38:C7:00:D7:DC:87:5F:1D:46:F4:83:7C:50
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 019D38D3D038D10EA7ABC4A2EDE8D61EBCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: 3qQwWKb1-kVy_ayi1t9X0ckV-So.roa (hash: 6uc0py4DUTjhUubTuSWB3rLcaAx0aZmagITkDfiQN1k=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: VpCEzgNhTrjNGchylgXbMqKBMVhAmMv/j8Z6ttV1p+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:d0:38:d1:0e:a7:ab:c4:a2:ed:e8:d6:1e:bc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=f713e9db4fa65c38c700d7dc875f1d46f4837c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7a:14:3a:92:98:68:80:e6:6f:a0:16:8c:2b:
9d:29:17:92:f5:38:32:24:08:71:75:d2:d6:0a:ca:
cf:63:a2:8b:94:74:30:3e:35:53:14:bc:28:f9:bd:
2c:b2:75:a0:4e:69:18:cc:66:eb:ef:b4:61:59:20:
39:d9:d1:14:cd:2b:44:a0:94:c9:a5:7f:e6:41:af:
86:3d:0f:1e:81:0a:f9:d3:d6:7a:fa:9f:f5:df:7d:
95:58:5b:08:d5:57:97:60:7d:80:a4:55:7c:53:a2:
7a:ee:b6:ce:0b:93:d9:d1:d4:7b:86:c9:19:53:1c:
8f:2e:82:28:c0:00:1d:f7:59:36:d7:e3:13:ed:50:
dd:04:2b:6f:78:5c:8a:53:8c:2f:14:ac:f5:19:7b:
ed:41:1f:ce:7d:bc:6c:b3:ff:94:1d:cd:42:8e:76:
5c:09:3b:3f:89:cf:61:f0:b6:9f:1a:1f:e6:5a:f6:
95:74:56:8c:dd:09:7d:48:f6:62:79:56:3b:c0:92:
e9:1b:6b:2d:bf:24:79:40:e4:74:ab:35:e2:94:1e:
75:67:63:17:f3:13:f8:e0:0d:2b:57:92:6b:f4:e2:
13:2d:dd:a6:d3:cc:65:62:a1:65:66:eb:8a:ff:d6:
a8:90:8d:74:f8:49:d8:67:f3:5c:69:d2:38:bf:46:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:13:E9:DB:4F:A6:5C:38:C7:00:D7:DC:87:5F:1D:46:F4:83:7C:50
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3c:c6:b6:35:04:5d:a4:dd:e2:d6:31:30:66:db:8d:f2:7f:
83:f2:45:76:43:10:6a:7f:e8:e7:f4:84:aa:23:ab:ff:0a:a2:
f4:60:86:3a:d9:f9:87:fa:28:e0:98:79:fb:b8:78:7b:06:10:
26:6f:3b:e6:44:67:91:35:0d:1c:8e:e6:10:9e:56:ee:8d:a1:
dd:45:6f:89:1b:c9:3b:2f:dd:14:ba:60:68:20:0a:3b:99:7e:
3d:15:48:f7:c3:b6:f2:f9:cd:61:e2:f1:94:34:5f:ba:85:e1:
f1:ee:94:23:89:7e:db:33:a2:d8:97:6b:3c:88:d1:18:28:00:
31:9f:2c:3a:2f:d7:e0:39:4c:7c:3e:99:ef:d4:62:7c:c9:60:
c6:c2:80:97:6c:39:5c:db:b9:b1:2d:2e:49:7c:02:2b:ed:1f:
6a:b7:2e:c4:cc:9d:2a:7c:44:fd:51:2b:64:94:68:df:68:73:
c7:53:b1:bd:f2:61:5e:4b:fe:4c:f5:cc:c9:ef:f7:19:44:a3:
7d:1a:24:38:a2:0b:fc:50:e8:cd:89:aa:7a:6b:f6:21:9b:fd:
e9:d7:de:f9:a8:a8:22:22:a5:6d:ff:0d:0e:fd:b0:5d:35:84:
90:57:0b:70:7c:7c:e0:4e:d0:f4:12:0e:1b:00:fe:20:56:47:
5e:06:e7:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0409A40Q6nq8Si7ejWHryrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNDJjNzUyYTliMDk4MzEyOGIzZDI5NWU0NWVhMTZiMzNl
ZTdkZjkwHhcNMjYwMzI5MDkwMTM4WhcNMjYwMzMwMDkwMTM4WjAzMTEwLwYDVQQD
EyhmNzEzZTlkYjRmYTY1YzM4YzcwMGQ3ZGM4NzVmMWQ0NmY0ODM3YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynoUOpKYaIDmb6AWjCudKReS9Tgy
JAhxddLWCsrPY6KLlHQwPjVTFLwo+b0ssnWgTmkYzGbr77RhWSA52dEUzStEoJTJ
pX/mQa+GPQ8egQr509Z6+p/1332VWFsI1VeXYH2ApFV8U6J67rbOC5PZ0dR7hskZ
UxyPLoIowAAd91k21+MT7VDdBCtveFyKU4wvFKz1GXvtQR/Ofbxss/+UHc1CjnZc
CTs/ic9h8LafGh/mWvaVdFaM3Ql9SPZieVY7wJLpG2stvyR5QOR0qzXilB51Z2MX
8xP44A0rV5Jr9OITLd2m08xlYqFlZuuK/9aokI10+EnYZ/NcadI4v0aqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcT6dtPplw4xwDX3IdfHUb0g3xQMB8GA1UdIwQY
MBaAFItCx1KpsJgxKLPSleReoWsz7n35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMt
MjVhMzhhMjQ2ZmEyLzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9kYmU0NDYtOWRhMy00ODU0LWI1ZDMtMjVhMzhhMjQ2ZmEy
LzEvaTBMSFVxbXdtREVvczlLVjVGNmhhelB1ZmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADzGtjUE
XaTd4tYxMGbbjfJ/g/JFdkMQan/o5/SEqiOr/wqi9GCGOtn5h/oo4Jh5+7h4ewYQ
Jm875kRnkTUNHI7mEJ5W7o2h3UVviRvJOy/dFLpgaCAKO5l+PRVI98O28vnNYeLx
lDRfuoXh8e6UI4l+2zOi2JdrPIjRGCgAMZ8sOi/X4DlMfD6Z79RifMlgxsKAl2w5
XNu5sS0uSXwCK+0farcuxMydKnxE/VErZJRo32hzx1OxvfJhXkv+TPXMye/3GUSj
fRokOKIL/FDozYmqemv2IZv96dfe+aioIiKlbf8NDv2wXTWEkFcLcHx84E7Q9BIO
GwD+IFZHXgbn0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:42 2026 by rpki-client