Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
File: iK09YNkgV_8PoBH0UMNkbjUtpdg.mft (raw, json)
Hash identifier: K9ukwSm2PLtJTc/6wGTigQponnTY32lNdW7cZLesbOo=
Subject key identifier: E7:23:94:DC:0F:33:8F:97:E0:99:D6:0D:3C:F5:16:20:65:C3:7F:00
Authority key identifier: 88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
Certificate issuer: /CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Certificate serial: 019D37F762B03A07948CAA549C1C1E0DA2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
Manifest number: 04E3
Signing time: Sun 29 Mar 2026 05:00:52 +0000
Manifest this update: Sun 29 Mar 2026 05:00:52 +0000
Manifest next update: Mon 30 Mar 2026 05:00:52 +0000
Files and hashes: 1: iK09YNkgV_8PoBH0UMNkbjUtpdg.crl (hash: 66pSgEm6RbM47/3sx9VeHpLF0pQDxQPaW/u6w3VC0d4=)
2: yqbpgiw4mc0aMG4KTKCsEcJRG_c.roa (hash: 4YOLQATWZxMITpIV7EuqFyHdneXTCs1dRQuvrVxOZss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:62:b0:3a:07:94:8c:aa:54:9c:1c:1e:0d:a2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ad3d60d92057ff0fa011f450c3646e352da5d8
Validity
Not Before: Mar 29 05:00:52 2026 GMT
Not After : Mar 30 05:00:52 2026 GMT
Subject: CN=e72394dc0f338f97e099d60d3cf5162065c37f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:36:51:73:15:68:7c:a0:d3:fd:f0:4a:af:
e5:7b:62:ad:c9:b2:dd:f5:7b:a5:b1:6e:86:be:bc:
ab:3b:e5:65:e9:a0:7d:33:e2:e3:53:25:5b:54:41:
99:03:79:52:d2:62:7e:5b:cc:52:54:b3:57:78:26:
ab:02:46:a3:54:b8:03:16:b9:31:ed:20:48:6e:3c:
19:18:4d:1e:81:0b:10:63:d7:73:9e:0e:61:46:c0:
d2:3f:7f:e5:5f:e3:e6:01:2d:68:e1:cb:69:c2:e0:
10:2e:fe:8c:73:d0:00:3d:67:36:02:35:65:22:aa:
41:41:76:f0:a6:e1:be:35:90:04:44:13:4d:f1:5d:
1d:98:22:72:a7:e8:34:39:b6:04:37:9d:f5:67:99:
9f:95:73:66:09:cb:57:5c:11:7a:76:97:b2:0e:53:
04:bd:51:c0:04:8a:d9:52:d6:17:50:8d:41:78:f8:
90:96:7d:d7:47:f0:5e:77:26:0d:82:e8:ed:27:97:
b5:ef:6b:98:74:d6:31:17:d5:c3:b9:45:01:67:21:
c9:b0:e3:2d:83:cc:55:06:31:39:90:21:d1:7f:c1:
f0:36:53:3b:59:c1:4f:e5:40:3d:f0:71:6c:e7:37:
21:2b:d3:50:ee:84:64:6b:ea:5d:50:b6:95:20:1f:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:23:94:DC:0F:33:8F:97:E0:99:D6:0D:3C:F5:16:20:65:C3:7F:00
X509v3 Authority Key Identifier:
keyid:88:AD:3D:60:D9:20:57:FF:0F:A0:11:F4:50:C3:64:6E:35:2D:A5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK09YNkgV_8PoBH0UMNkbjUtpdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/079ddb-820a-4d51-bf8d-8d11ead3af8c/1/iK09YNkgV_8PoBH0UMNkbjUtpdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ec:38:30:e3:cc:21:09:59:e5:ff:f9:57:f5:db:db:e3:4c:
82:70:e9:02:cc:54:3d:38:b3:c8:a6:b1:e8:54:6b:22:1a:0d:
ee:6f:ff:1e:16:aa:d7:06:34:a1:fe:e1:2d:fb:b5:56:7a:aa:
91:06:f4:8b:67:53:c3:fb:c6:b1:0a:14:f0:b8:6a:f3:60:ea:
9a:8b:66:98:8d:a9:7e:8a:b4:b2:c5:fa:27:3c:76:13:76:4e:
1c:68:dc:00:71:e6:50:e1:f0:93:95:e7:65:40:65:e1:89:52:
a2:90:9c:6a:59:2f:85:8f:73:f5:70:60:ff:5f:e3:89:42:e1:
3d:6d:69:74:1c:fe:4f:66:c8:fc:53:c4:c2:3f:4e:e1:e0:64:
52:b5:2f:db:0f:a4:77:5b:43:7d:4a:61:84:90:d6:2d:d4:7a:
85:f9:e4:78:52:eb:b2:c0:7c:c7:f4:ec:f0:3e:50:c7:77:56:
2f:61:94:e9:97:0f:9e:54:f2:76:40:40:9d:f6:68:43:3e:73:
a7:4c:db:ec:32:87:5d:b9:9c:3b:56:e5:0d:a0:2b:f1:b5:5c:
a0:91:d9:a0:e4:b5:5c:6d:f8:13:6d:e9:cb:dd:c4:a8:88:07:
56:ac:08:25:5c:bc:a6:1e:4f:6e:9b:a1:c4:3d:27:3f:85:bf:
16:43:d6:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392KwOgeUjKpUnBweDaL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWQzZDYwZDkyMDU3ZmYwZmEwMTFmNDUwYzM2NDZlMzUy
ZGE1ZDgwHhcNMjYwMzI5MDUwMDUyWhcNMjYwMzMwMDUwMDUyWjAzMTEwLwYDVQQD
EyhlNzIzOTRkYzBmMzM4Zjk3ZTA5OWQ2MGQzY2Y1MTYyMDY1YzM3ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJI2UXMVaHyg0/3wSq/le2KtybLd
9XulsW6GvryrO+Vl6aB9M+LjUyVbVEGZA3lS0mJ+W8xSVLNXeCarAkajVLgDFrkx
7SBIbjwZGE0egQsQY9dzng5hRsDSP3/lX+PmAS1o4ctpwuAQLv6Mc9AAPWc2AjVl
IqpBQXbwpuG+NZAERBNN8V0dmCJyp+g0ObYEN531Z5mflXNmCctXXBF6dpeyDlME
vVHABIrZUtYXUI1BePiQln3XR/BedyYNgujtJ5e172uYdNYxF9XDuUUBZyHJsOMt
g8xVBjE5kCHRf8HwNlM7WcFP5UA98HFs5zchK9NQ7oRka+pdULaVIB8+EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcjlNwPM4+X4JnWDTz1FiBlw38AMB8GA1UdIwQY
MBaAFIitPWDZIFf/D6AR9FDDZG41LaXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQt
OGQxMWVhZDNhZjhjLzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNzlkZGItODIwYS00ZDUxLWJmOGQtOGQxMWVhZDNhZjhj
LzEvaUswOVlOa2dWXzhQb0JIMFVNTmtialV0cGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguw4MOPM
IQlZ5f/5V/Xb2+NMgnDpAsxUPTizyKax6FRrIhoN7m//Hhaq1wY0of7hLfu1Vnqq
kQb0i2dTw/vGsQoU8Lhq82DqmotmmI2pfoq0ssX6Jzx2E3ZOHGjcAHHmUOHwk5Xn
ZUBl4YlSopCcalkvhY9z9XBg/1/jiULhPW1pdBz+T2bI/FPEwj9O4eBkUrUv2w+k
d1tDfUphhJDWLdR6hfnkeFLrssB8x/Ts8D5Qx3dWL2GU6ZcPnlTydkBAnfZoQz5z
p0zb7DKHXbmcO1blDaAr8bVcoJHZoOS1XG34E23py93EqIgHVqwIJVy8ph5Pbpuh
xD0nP4W/FkPWPg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:57 2026 by rpki-client