Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: g/lmcBXiMq43dlQj95lyjP43HgRqY0yzHb8kfCJQ4GI=
Subject key identifier: 8F:4B:A0:0D:51:17:E2:6C:9A:D4:2A:BB:31:51:00:0C:13:36:34:93
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 019CAAC6B90D03CA201D536FE00C8055931C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 19:01:16 +0000
Manifest this update: Sun 01 Mar 2026 19:01:16 +0000
Manifest next update: Mon 02 Mar 2026 19:01:16 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: lqEEj77nu4g1jzhz6MBL44ePuAVB8GeKJ+qoHWgBPjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b9:0d:03:ca:20:1d:53:6f:e0:0c:80:55:93:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Mar 1 19:01:16 2026 GMT
Not After : Mar 2 19:01:16 2026 GMT
Subject: CN=8f4ba00d5117e26c9ad42abb3151000c13363493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:28:05:2c:7f:43:8f:b8:d2:86:9a:b9:ba:
93:a8:fe:89:ec:81:d9:a4:be:2f:87:1f:f0:fb:06:
e2:7c:81:39:20:69:af:3a:16:17:f7:50:4d:00:2c:
6a:46:8b:4f:87:86:ac:c2:98:9a:0d:6a:2a:ef:92:
e8:14:63:24:07:16:60:0e:c8:01:b8:3b:f5:36:16:
f8:03:9d:57:29:e3:01:b8:b4:cb:68:99:3e:18:41:
78:94:fc:b7:5a:a7:4f:f6:3b:26:a3:be:39:61:91:
29:f1:41:e7:d2:29:ac:b1:7a:36:e5:79:f5:a7:e3:
9c:03:47:ab:ca:14:06:d0:d2:be:2a:df:f4:ee:4d:
fe:ab:93:01:36:ba:42:9f:1f:40:90:4d:1a:78:c7:
85:59:5a:a1:89:10:85:be:b1:df:ca:7f:50:fe:85:
43:fb:27:78:8d:b1:77:4b:07:5c:95:d4:bf:85:e0:
12:72:7d:51:d4:7a:df:92:67:4e:8b:75:1c:48:1d:
ee:32:07:5d:64:2e:5a:0a:e3:4a:b3:45:1f:0d:1f:
5a:e5:3e:86:df:13:33:d3:b6:a7:7a:3d:f5:e1:f7:
4c:eb:71:36:56:1a:41:32:8d:35:e0:fe:5a:17:1a:
85:c3:1a:fa:89:80:46:fd:12:b9:4c:19:53:76:50:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:A0:0D:51:17:E2:6C:9A:D4:2A:BB:31:51:00:0C:13:36:34:93
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:11:54:31:eb:6d:b6:c4:67:ee:7f:cf:07:c1:4f:cc:83:67:
d7:0d:b2:01:32:fa:28:4d:6b:ab:11:92:d7:52:52:b6:df:a5:
b4:77:71:ef:39:fb:64:fb:c8:14:0d:7d:36:39:ed:d0:8d:3f:
9c:ff:f3:97:08:53:c3:5e:f4:df:d6:a0:4f:35:0c:de:56:e4:
1d:fa:4f:55:6a:b3:93:38:d0:b8:7c:15:5a:19:7f:51:bb:60:
19:d0:1f:11:66:63:c2:18:94:97:5d:0f:27:52:91:0a:49:22:
14:ee:b4:5e:c8:64:97:5e:5e:0b:c8:3e:12:44:8e:0c:0c:fe:
a7:79:8f:eb:09:a2:aa:79:39:78:11:32:59:71:f1:3c:37:c6:
78:da:24:4d:f4:d5:05:40:d9:5d:26:6e:ab:38:dd:ab:f1:59:
6a:eb:41:54:e0:6c:4a:ea:7d:98:e7:69:59:09:a4:20:9e:ee:
4d:18:ea:4b:4e:25:1d:d8:c0:0c:7b:9d:3c:86:dd:c0:37:ac:
d5:10:b8:36:ba:a0:3e:33:69:bf:cb:7d:19:c3:26:6c:bf:de:
33:72:d8:24:da:73:18:2e:1c:6f:96:d8:e1:41:23:74:eb:20:
e1:9b:98:89:aa:93:fb:6e:f7:42:24:c2:c5:cb:96:b0:ec:28:
9a:02:ef:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxrkNA8ogHVNv4AyAVZMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjg5ZjU3ZDA3Mjg0OWUwY2FiMjE5NWNkMGJhZjI1NTc5
MzVlYTAwHhcNMjYwMzAxMTkwMTE2WhcNMjYwMzAyMTkwMTE2WjAzMTEwLwYDVQQD
Eyg4ZjRiYTAwZDUxMTdlMjZjOWFkNDJhYmIzMTUxMDAwYzEzMzYzNDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsgoBSx/Q4+40oaaubqTqP6J7IHZ
pL4vhx/w+wbifIE5IGmvOhYX91BNACxqRotPh4aswpiaDWoq75LoFGMkBxZgDsgB
uDv1Nhb4A51XKeMBuLTLaJk+GEF4lPy3WqdP9jsmo745YZEp8UHn0imssXo25Xn1
p+OcA0eryhQG0NK+Kt/07k3+q5MBNrpCnx9AkE0aeMeFWVqhiRCFvrHfyn9Q/oVD
+yd4jbF3SwdcldS/heAScn1R1HrfkmdOi3UcSB3uMgddZC5aCuNKs0UfDR9a5T6G
3xMz07anej314fdM63E2VhpBMo014P5aFxqFwxr6iYBG/RK5TBlTdlDVdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9LoA1RF+JsmtQquzFRAAwTNjSTMB8GA1UdIwQY
MBaAFCP4n1fQcoSeDKshlc0LryVXk16gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTIt
MmVhNmY1ZWZiMjdmLzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTItMmVhNmY1ZWZiMjdm
LzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhFUMett
tsRn7n/PB8FPzINn1w2yATL6KE1rqxGS11JStt+ltHdx7zn7ZPvIFA19Njnt0I0/
nP/zlwhTw17039agTzUM3lbkHfpPVWqzkzjQuHwVWhl/UbtgGdAfEWZjwhiUl10P
J1KRCkkiFO60Xshkl15eC8g+EkSODAz+p3mP6wmiqnk5eBEyWXHxPDfGeNokTfTV
BUDZXSZuqzjdq/FZautBVOBsSup9mOdpWQmkIJ7uTRjqS04lHdjADHudPIbdwDes
1RC4NrqgPjNpv8t9GcMmbL/eM3LYJNpzGC4cb5bY4UEjdOsg4ZuYiaqT+273QiTC
xcuWsOwomgLvsw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:17 2026 by rpki-client