Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: +NnLE/1Mh9rD8lsJ4QAX6RVG1TZujOOOqJiS77qPAE4=
Subject key identifier: DB:2F:4D:2C:63:6E:7D:50:8D:5D:17:59:6F:0C:7B:D8:71:3B:69:9E
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019CACB5637074175857BEEC344BEE37F944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 10B0
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=)
2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=)
3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: k7cNTSK/8ETpUfnXDg2Fg6wmVDwikaHliOvsYiPaAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:63:70:74:17:58:57:be:ec:34:4b:ee:37:f9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=db2f4d2c636e7d508d5d17596f0c7bd8713b699e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:1c:db:a8:ca:29:29:68:46:02:54:bd:bd:
48:51:5e:bc:69:b7:36:5d:b0:20:6c:31:22:ea:19:
8c:a8:f5:f4:72:a7:30:bc:cc:93:e4:e5:94:db:da:
a9:fa:e9:52:a2:40:8e:f1:ea:4d:4a:63:8a:f6:c7:
ba:f9:eb:8c:6e:f0:17:6d:de:ac:89:6f:be:fa:af:
fa:e1:96:b5:91:2a:dc:14:45:4a:99:91:93:08:93:
4c:fc:db:94:c3:3c:c8:bf:be:41:b2:f2:e4:11:fc:
b1:78:61:30:32:06:b9:3d:f9:5e:87:e4:a8:d1:ff:
06:b8:ef:4b:b7:92:08:b1:ac:c5:3f:19:16:52:74:
72:50:7c:a8:79:f2:05:f5:fd:53:4c:64:eb:a7:5c:
33:76:fb:0d:62:45:db:08:cc:d5:90:3c:76:69:c9:
d2:87:9b:5a:00:4b:6d:94:ec:e6:09:8d:cb:14:22:
dd:fe:b5:f2:a4:e1:38:21:0f:30:28:5e:b4:1d:52:
7c:24:a3:a9:72:ee:6c:f2:fd:e8:0d:c6:6f:6d:99:
be:35:3c:93:43:24:39:12:68:e3:a2:0e:68:6e:cc:
ae:69:4d:ad:ba:35:b1:7a:01:11:36:ea:f0:ad:b2:
e9:61:64:6c:92:3a:a0:2c:52:cf:0d:55:57:98:ab:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2F:4D:2C:63:6E:7D:50:8D:5D:17:59:6F:0C:7B:D8:71:3B:69:9E
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ed:48:a3:de:d6:cb:ae:bb:86:a6:ca:2d:63:83:4d:52:58:
17:e5:79:19:79:82:36:84:73:7b:9b:b1:6c:ff:d4:2f:b5:79:
cd:6f:68:e7:e9:92:45:e5:d8:61:0a:a8:4a:2f:77:8b:0d:5f:
3c:db:15:1b:ad:5c:31:a8:a9:9e:06:7a:ee:67:d8:0b:82:be:
b9:aa:74:57:94:75:2a:3f:f1:76:a6:dc:f3:78:12:b6:2f:48:
f5:31:a1:c7:06:00:a9:a7:e4:52:40:49:03:f6:2a:01:65:33:
66:2d:48:b6:ae:e6:e3:a5:d6:4e:c0:73:ce:dd:d1:75:23:a4:
43:6c:38:91:71:4e:43:c5:9b:e8:76:f9:61:ec:60:e9:7c:93:
00:6b:39:2f:43:59:10:70:e2:53:60:1a:24:44:33:fa:f8:6a:
a3:ad:a6:dd:12:88:53:49:9f:07:33:8b:61:d0:c0:0d:07:60:
5c:77:cd:d6:1f:c8:12:c0:7d:38:53:ac:78:d4:ff:24:f6:c8:
93:e8:c0:ab:7b:68:22:ba:7a:0f:a3:d1:1f:f5:f5:5c:1e:12:
95:36:f5:58:de:99:0b:0c:45:1f:ec:15:44:ec:c5:35:46:47:
62:bd:14:d3:31:dc:ae:d6:18:cf:e0:8b:bf:3f:4c:01:e1:94:
b5:aa:bf:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystWNwdBdYV77sNEvuN/lEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj
ZGIxNGUwHhcNMjYwMzAyMDQwMTM0WhcNMjYwMzAzMDQwMTM0WjAzMTEwLwYDVQQD
EyhkYjJmNGQyYzYzNmU3ZDUwOGQ1ZDE3NTk2ZjBjN2JkODcxM2I2OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUAc26jKKSloRgJUvb1IUV68abc2
XbAgbDEi6hmMqPX0cqcwvMyT5OWU29qp+ulSokCO8epNSmOK9se6+euMbvAXbd6s
iW+++q/64Za1kSrcFEVKmZGTCJNM/NuUwzzIv75BsvLkEfyxeGEwMga5Pfleh+So
0f8GuO9Lt5IIsazFPxkWUnRyUHyoefIF9f1TTGTrp1wzdvsNYkXbCMzVkDx2acnS
h5taAEttlOzmCY3LFCLd/rXypOE4IQ8wKF60HVJ8JKOpcu5s8v3oDcZvbZm+NTyT
QyQ5Emjjog5obsyuaU2tujWxegERNurwrbLpYWRskjqgLFLPDVVXmKvwdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsvTSxjbn1QjV0XWW8Me9hxO2meMB8GA1UdIwQY
MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt
MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh
LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+1Io97W
y667hqbKLWODTVJYF+V5GXmCNoRze5uxbP/UL7V5zW9o5+mSReXYYQqoSi93iw1f
PNsVG61cMaipngZ67mfYC4K+uap0V5R1Kj/xdqbc83gSti9I9TGhxwYAqafkUkBJ
A/YqAWUzZi1Itq7m46XWTsBzzt3RdSOkQ2w4kXFOQ8Wb6Hb5Yexg6XyTAGs5L0NZ
EHDiU2AaJEQz+vhqo62m3RKIU0mfBzOLYdDADQdgXHfN1h/IEsB9OFOseNT/JPbI
k+jAq3toIrp6D6PRH/X1XB4SlTb1WN6ZCwxFH+wVROzFNUZHYr0U0zHcrtYYz+CL
vz9MAeGUtaq/JA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:48 2026 by rpki-client