Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: kjW4nLQeJSK+pyWz1LdMRhpJyiC36fMbr9rVjqJyKqY=
Subject key identifier: 24:B7:9C:77:2D:96:10:F7:D4:59:7B:F4:72:A9:90:34:EA:CF:A1:4F
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 019D3909CEE10F23ABC340989182324E6937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 09D2
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: 1-kKT9I5hXcGMY4BXtI91L6PWY5Q.roa (hash: hWaDKKuFN6+6e36Ikm8e0jjTVm6uyDQ92iqKklLnoi4=)
2: NEQkMGAJAfKugYCF_SBXZZt_zOA.roa (hash: 1zriG+EOUPPANFuX8FQR4exMMCMJ2lG+QMPasFhRCHE=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: mVILGWR97+rguDtodg7GHNKOBUmK3CumavcJcpWnzSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ce:e1:0f:23:ab:c3:40:98:91:82:32:4e:69:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=24b79c772d9610f7d4597bf472a99034eacfa14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:92:cc:1c:a6:b7:b4:bc:93:9a:4c:93:57:
93:35:71:80:4e:cc:ee:c3:25:13:12:25:20:9b:b7:
33:f1:b0:70:0e:ee:94:88:ff:24:9e:95:0e:aa:fc:
24:21:ef:a6:15:34:ca:c5:78:5b:be:78:7b:f9:20:
9e:6b:01:9e:57:ec:39:2f:d2:10:e1:b9:9f:d7:94:
d0:0a:21:07:32:a1:ab:15:a5:0d:2c:f0:d9:cc:4d:
02:b3:1d:dc:d3:24:84:d4:65:f8:b5:e7:a3:37:f4:
15:c0:5a:a4:ea:09:ab:d4:9a:2d:67:0d:a3:b1:d4:
72:e2:08:c3:dd:8c:e4:f4:99:1c:22:92:ca:1e:6d:
14:87:e3:ec:00:16:87:4e:2b:91:64:04:0e:26:ae:
be:c1:85:26:de:51:5c:f5:0e:ae:1c:b3:1d:b3:9c:
8b:0c:f7:35:f7:8d:c0:c8:71:21:30:4f:53:53:db:
58:f1:90:d9:fa:da:cc:64:2e:67:a7:79:8d:9d:4d:
02:9b:b4:77:3a:d9:80:98:70:e6:72:47:8e:3c:90:
6e:5f:ed:1f:d2:8c:0f:4f:95:b0:78:b2:cd:8b:6c:
c8:b9:ec:fa:85:20:df:12:4e:8c:c0:0a:65:34:ea:
0b:a2:6c:39:93:f9:47:53:41:e6:00:9a:0d:11:03:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:9C:77:2D:96:10:F7:D4:59:7B:F4:72:A9:90:34:EA:CF:A1:4F
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:45:7e:bd:25:d6:5e:e2:6f:68:27:3d:7a:d7:e7:37:c4:
1f:91:1c:ee:b1:20:db:8a:f6:8f:83:5a:71:8f:a2:18:7d:b0:
9d:2b:7a:a9:cd:80:ef:11:7b:93:a6:4f:d0:a8:07:28:d6:f0:
56:3b:d7:fa:2b:fa:ff:8c:8b:0e:8e:c5:cf:10:b6:18:57:18:
93:e2:6f:dd:da:4e:57:df:b5:44:38:57:7a:29:aa:74:4e:83:
b5:49:ca:dd:ad:ee:10:03:7d:be:d3:a0:60:36:7f:cb:8b:a7:
dd:eb:32:af:b1:ec:ed:c1:a5:96:43:f4:6e:1e:f3:01:7d:da:
90:c8:7f:24:24:d8:70:97:10:b1:22:08:0b:8a:f4:95:66:48:
ac:f6:7a:c8:a1:da:c5:af:4e:d7:28:c5:c1:c9:01:e3:fd:02:
36:b0:44:20:6f:c4:04:12:ee:f3:0c:aa:ad:fc:06:72:f3:d4:
93:26:76:ec:e4:11:79:e9:95:20:ba:95:c5:ee:40:88:f9:89:
98:fb:48:f2:2f:9e:82:e1:45:5b:38:c6:ea:29:78:be:ef:4f:
9e:4d:c5:13:c1:28:51:33:7c:e2:ce:29:74:69:a5:58:76:bf:
33:53:b7:68:2c:84:2d:56:05:44:11:17:77:c8:1d:40:f9:42:
80:20:19:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cc7hDyOrw0CYkYIyTmk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmUxOTA1Y2Q3YWYzNmU2M2FkYTYzNjZjMTQ3YjYxZDg1
YzlmMmIwHhcNMjYwMzI5MTAwMDM3WhcNMjYwMzMwMTAwMDM3WjAzMTEwLwYDVQQD
EygyNGI3OWM3NzJkOTYxMGY3ZDQ1OTdiZjQ3MmE5OTAzNGVhY2ZhMTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eGSzBymt7S8k5pMk1eTNXGATszu
wyUTEiUgm7cz8bBwDu6UiP8knpUOqvwkIe+mFTTKxXhbvnh7+SCeawGeV+w5L9IQ
4bmf15TQCiEHMqGrFaUNLPDZzE0Csx3c0ySE1GX4teejN/QVwFqk6gmr1JotZw2j
sdRy4gjD3Yzk9JkcIpLKHm0Uh+PsABaHTiuRZAQOJq6+wYUm3lFc9Q6uHLMds5yL
DPc1943AyHEhME9TU9tY8ZDZ+trMZC5np3mNnU0Cm7R3OtmAmHDmckeOPJBuX+0f
0owPT5WweLLNi2zIuez6hSDfEk6MwAplNOoLomw5k/lHU0HmAJoNEQOMMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS3nHctlhD31Fl79HKpkDTqz6FPMB8GA1UdIwQY
MBaAFIj+GQXNevNuY62mNmwUe2HYXJ8rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUt
ZDYzM2FhNzBkZDY2LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMTk1MmEtNjA4Yy00NjhlLWEwMGUtZDYzM2FhNzBkZDY2
LzEvaVA0WkJjMTY4MjVqcmFZMmJCUjdZZGhjbnlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG89Ffr0l
1l7ib2gnPXrX5zfEH5Ec7rEg24r2j4NacY+iGH2wnSt6qc2A7xF7k6ZP0KgHKNbw
VjvX+iv6/4yLDo7FzxC2GFcYk+Jv3dpOV9+1RDhXeimqdE6DtUnK3a3uEAN9vtOg
YDZ/y4un3esyr7Hs7cGllkP0bh7zAX3akMh/JCTYcJcQsSIIC4r0lWZIrPZ6yKHa
xa9O1yjFwckB4/0CNrBEIG/EBBLu8wyqrfwGcvPUkyZ27OQReemVILqVxe5AiPmJ
mPtI8i+eguFFWzjG6il4vu9Pnk3FE8EoUTN84s4pdGmlWHa/M1O3aCyELVYFRBEX
d8gdQPlCgCAZ9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:41 2026 by rpki-client