Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: oTE85v28WhUN3vI8OFuMGWOYsK+pazXav0WcOT1H5K4=
Subject key identifier: 80:85:1D:52:56:5A:00:EC:36:CF:A8:D8:0E:9D:1B:24:12:EA:27:E9
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019D37C09C737E2105AD2CA40FFAA412FF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1600
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: 4s2QWE+HPlN+vPbR7dAZhcGOuYIFaq9YI3E2Kk0E8II=)
2: f2xHXHMuYDn0X5Hx_WOxhcp_OSM.roa (hash: jVp5NZgxrwcVz5kDb28HKubLbBcKUnHD4R0wpzd6ys4=)
3: r91CFPjHDqMCM8CKay9171ccjWQ.roa (hash: AV0sDOz9FjM9VKLkmExBZn+Rf8LRF9lZ+jWnF/AuE4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9c:73:7e:21:05:ad:2c:a4:0f:fa:a4:12:ff:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=80851d52565a00ec36cfa8d80e9d1b2412ea27e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b6:17:5a:90:1e:14:b8:d3:39:95:75:a0:70:
2a:2c:df:2a:da:56:e8:0c:05:22:2a:8b:12:23:74:
68:f2:28:00:a3:4d:c2:da:67:1f:db:44:2e:a6:ea:
fa:80:f7:b2:e4:e4:12:3a:76:3e:28:cb:b6:28:3e:
87:e7:0d:d1:47:8d:c8:39:43:66:b4:c9:5e:75:3d:
06:9b:21:fd:1e:b5:0a:c0:bd:43:73:e8:7b:69:2b:
0a:b3:c1:2a:cd:95:f9:0e:24:30:07:e8:d1:fd:cf:
55:25:cc:53:7e:20:64:e6:bb:7a:c0:33:d4:80:88:
19:48:ff:24:2f:1a:6d:da:7c:e1:02:52:67:a2:59:
b3:8f:2d:c7:c2:d4:92:20:b8:c7:82:13:aa:57:93:
4e:85:e8:2f:1f:99:a7:b3:fd:6c:e2:34:0b:04:76:
d9:21:92:72:47:16:4f:bf:4d:07:71:52:65:62:b8:
44:0f:ff:fe:17:18:d5:a6:2f:18:8d:5c:cc:59:2d:
37:5c:9c:de:02:d3:ac:6f:eb:6c:ee:e0:ba:17:de:
37:1c:24:d8:a3:df:10:9a:d9:7c:76:6b:a0:a9:05:
b0:05:14:8e:5c:ff:42:32:76:4a:2b:3a:ea:88:33:
ca:99:bc:f3:72:b4:25:e0:4d:b3:57:a6:a3:a0:48:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:1D:52:56:5A:00:EC:36:CF:A8:D8:0E:9D:1B:24:12:EA:27:E9
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:fb:19:2d:5d:9d:66:b5:42:02:93:db:3d:ca:82:cb:d4:
e5:66:a1:66:d5:a1:24:46:51:0a:71:c8:9f:be:74:37:85:37:
15:28:4f:25:c6:0b:7a:f1:96:ef:68:4e:8c:b1:30:b7:6b:9f:
27:c0:ca:ff:7a:16:94:ba:8f:54:df:92:aa:27:79:67:9b:66:
80:32:a2:99:9e:c3:22:44:c9:7c:e4:61:4e:b7:c4:36:35:37:
81:b8:c2:13:fe:c3:3c:5c:11:99:53:f2:2a:3f:3f:71:2b:4a:
10:e0:c4:b0:25:74:b1:f8:ce:6e:c2:1d:66:9a:14:f4:8a:c4:
e0:c4:5b:44:ae:a9:44:d7:ce:38:79:3f:47:03:42:7e:7e:46:
a1:52:ea:e1:ba:a2:4d:01:80:0c:0e:34:08:7c:a5:a5:ad:da:
ee:c8:0e:d3:53:e0:6a:5d:33:7e:48:f4:97:a7:15:5d:46:54:
dc:c2:70:c8:9f:80:8d:74:bf:ae:be:19:7a:dd:d3:9e:2b:94:
6c:3d:af:75:5b:d7:9a:de:30:35:dc:65:e3:02:83:b1:a3:73:
eb:e2:e6:26:30:dc:6e:3b:dc:7d:2c:58:2b:c5:8a:b2:5d:c1:
ba:4c:b8:3d:72:d7:26:90:a0:c6:b8:49:1c:13:76:ff:b2:a3:
06:b7:31:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJxzfiEFrSykD/qkEv9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5
NWEzZjAwHhcNMjYwMzI5MDQwMTAyWhcNMjYwMzMwMDQwMTAyWjAzMTEwLwYDVQQD
Eyg4MDg1MWQ1MjU2NWEwMGVjMzZjZmE4ZDgwZTlkMWIyNDEyZWEyN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrYXWpAeFLjTOZV1oHAqLN8q2lbo
DAUiKosSI3Ro8igAo03C2mcf20Qupur6gPey5OQSOnY+KMu2KD6H5w3RR43IOUNm
tMledT0GmyH9HrUKwL1Dc+h7aSsKs8EqzZX5DiQwB+jR/c9VJcxTfiBk5rt6wDPU
gIgZSP8kLxpt2nzhAlJnolmzjy3HwtSSILjHghOqV5NOhegvH5mns/1s4jQLBHbZ
IZJyRxZPv00HcVJlYrhED//+FxjVpi8YjVzMWS03XJzeAtOsb+ts7uC6F943HCTY
o98Qmtl8dmugqQWwBRSOXP9CMnZKKzrqiDPKmbzzcrQl4E2zV6ajoEj5ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICFHVJWWgDsNs+o2A6dGyQS6ifpMB8GA1UdIwQY
MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct
Y2E1MWZiNDA4OTAxLzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx
LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXv7GS1d
nWa1QgKT2z3KgsvU5WahZtWhJEZRCnHIn750N4U3FShPJcYLevGW72hOjLEwt2uf
J8DK/3oWlLqPVN+Sqid5Z5tmgDKimZ7DIkTJfORhTrfENjU3gbjCE/7DPFwRmVPy
Kj8/cStKEODEsCV0sfjObsIdZpoU9IrE4MRbRK6pRNfOOHk/RwNCfn5GoVLq4bqi
TQGADA40CHylpa3a7sgO01Pgal0zfkj0l6cVXUZU3MJwyJ+AjXS/rr4Zet3TniuU
bD2vdVvXmt4wNdxl4wKDsaNz6+LmJjDcbjvcfSxYK8WKsl3Buky4PXLXJpCgxrhJ
HBN2/7KjBrcxbw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:24 2026 by rpki-client