Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: QDM3RNmmkSxZR4qExTSktRPbdFj1/TcsGjJzifZ+Cfw=
Subject key identifier: 42:94:23:80:E7:1F:B4:9B:51:F4:B0:C9:79:23:3D:B7:22:7C:2B:F2
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019CABA23CED56566CB15F60CA6961C7D1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:02 +0000
Manifest this update: Sun 01 Mar 2026 23:01:02 +0000
Manifest next update: Mon 02 Mar 2026 23:01:02 +0000
Files and hashes: 1: BTEAuUNa_YsO4Msc4ADixEUAqHw.roa (hash: RPWke+z8J8p3T5a+cxL5wCmrsKLPXY/+WIucQz9R2x4=)
2: Fdb2MRiz20g2xgX0HTiyiVn6wdM.roa (hash: P7ndLT2N2wnmbFCzRdtX0zBZJo6QlqplqMU+f7R4Fys=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: A/BG/UVoGonMV4+2QbuZ8U/axD3NYtDwqAMj7orgr88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3c:ed:56:56:6c:b1:5f:60:ca:69:61:c7:d1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Mar 1 23:01:02 2026 GMT
Not After : Mar 2 23:01:02 2026 GMT
Subject: CN=42942380e71fb49b51f4b0c979233db7227c2bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:86:97:5a:5f:3c:56:4a:72:2b:17:60:b6:
57:ef:f1:4b:f2:26:22:66:d9:e2:4a:67:7d:8b:c1:
6e:ce:4f:02:ad:80:30:41:63:61:67:28:be:41:88:
4e:5e:47:d3:b0:c9:67:dd:a9:e4:16:18:ea:80:08:
62:28:dd:1c:50:40:5a:f9:cd:24:4a:ee:fd:ef:af:
6b:a9:32:e5:d4:21:ba:eb:de:52:bf:75:44:14:88:
b9:39:7c:6a:f8:57:11:e7:36:74:6b:4e:50:76:6a:
fc:f6:f3:f1:bd:89:a8:1a:96:b9:0d:8a:14:b9:e5:
42:ce:1a:2b:eb:31:6e:1b:ff:dc:4d:91:20:77:f1:
6c:9f:86:55:35:95:ae:9a:62:09:6e:63:20:29:ba:
5c:69:4e:60:7d:b7:eb:a6:7e:ce:17:56:5b:8a:34:
fb:4a:1f:4f:32:93:8e:e0:1f:a0:13:17:4b:33:c3:
35:61:3c:e5:b1:85:cd:93:0e:e8:ce:ff:7d:d4:01:
aa:7b:34:53:76:f1:62:76:07:19:02:29:ab:be:24:
93:21:18:24:bb:20:58:8c:5d:f3:65:65:ec:a5:e4:
3a:3d:8e:9b:ac:4f:1b:d8:6a:6e:34:2e:0f:8b:1c:
1f:53:8d:05:21:a7:65:79:17:11:5f:4e:c6:ae:8b:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:94:23:80:E7:1F:B4:9B:51:F4:B0:C9:79:23:3D:B7:22:7C:2B:F2
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:aa:fc:b2:1f:a1:f8:33:49:7f:c3:5a:72:ae:9a:fc:09:1d:
ea:17:1e:43:56:1d:d3:dd:3b:06:e6:51:8a:8f:71:1c:0f:72:
94:2c:ed:04:9e:75:e8:00:2e:e7:89:7b:dc:cb:3e:d1:bb:f1:
d1:bc:dc:e2:b5:0f:9b:e2:52:fc:91:05:6d:a4:66:4b:57:f6:
58:fe:70:74:d3:b4:e1:10:b7:a8:9d:56:cf:02:17:d9:b9:b9:
b9:e2:ac:1a:54:37:c5:05:60:75:4c:6b:7a:f8:83:e0:c3:21:
62:d8:6c:22:0d:79:7b:e5:1d:c6:e8:f3:79:34:61:26:fd:83:
34:11:52:d1:9d:cd:92:bd:68:40:6b:c7:0b:24:a9:87:fe:c9:
ea:f0:bf:45:33:4b:5f:d7:08:97:42:6b:1b:ff:81:d4:e9:ff:
fa:0f:ae:23:b8:b1:96:67:34:76:95:23:f4:19:e4:9e:a9:e1:
08:b4:72:cd:0c:06:20:a0:2f:12:58:b7:c1:fa:9f:34:c0:3f:
ca:65:f8:01:01:65:62:fb:89:1a:ac:f6:d1:6b:ec:43:2b:f7:
91:c2:67:85:08:3e:c6:e3:36:0b:bb:74:c2:01:3d:82:95:16:
c0:0b:fd:b7:76:e6:06:d3:e6:6f:df:75:fc:8f:f6:c4:d6:24:
4f:bc:03:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojztVlZssV9gymlhx9HEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNmEyM2EyZmQxYTA5NTYzNzhhMzdkNGZjZTI1OWRmMmJk
Nzk0YTcwHhcNMjYwMzAxMjMwMTAyWhcNMjYwMzAyMjMwMTAyWjAzMTEwLwYDVQQD
Eyg0Mjk0MjM4MGU3MWZiNDliNTFmNGIwYzk3OTIzM2RiNzIyN2MyYmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOiGl1pfPFZKcisXYLZX7/FL8iYi
ZtniSmd9i8Fuzk8CrYAwQWNhZyi+QYhOXkfTsMln3ankFhjqgAhiKN0cUEBa+c0k
Su79769rqTLl1CG6695Sv3VEFIi5OXxq+FcR5zZ0a05Qdmr89vPxvYmoGpa5DYoU
ueVCzhor6zFuG//cTZEgd/Fsn4ZVNZWummIJbmMgKbpcaU5gfbfrpn7OF1ZbijT7
Sh9PMpOO4B+gExdLM8M1YTzlsYXNkw7ozv991AGqezRTdvFidgcZAimrviSTIRgk
uyBYjF3zZWXspeQ6PY6brE8b2GpuNC4PixwfU40FIadleRcRX07Grotb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKUI4DnH7SbUfSwyXkjPbcifCvyMB8GA1UdIwQY
MBaAFItqI6L9GglWN4o31PziWd8r15SnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAt
OWE0NmVkNWI0MmRiLzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mOTFiMmMtYzVmZS00NjI1LWExODAtOWE0NmVkNWI0MmRi
LzEvaTJvam92MGFDVlkzaWpmVV9PSlozeXZYbEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6r8sh+h
+DNJf8Nacq6a/Akd6hceQ1Yd0907BuZRio9xHA9ylCztBJ516AAu54l73Ms+0bvx
0bzc4rUPm+JS/JEFbaRmS1f2WP5wdNO04RC3qJ1WzwIX2bm5ueKsGlQ3xQVgdUxr
eviD4MMhYthsIg15e+UdxujzeTRhJv2DNBFS0Z3Nkr1oQGvHCySph/7J6vC/RTNL
X9cIl0JrG/+B1On/+g+uI7ixlmc0dpUj9BnknqnhCLRyzQwGIKAvEli3wfqfNMA/
ymX4AQFlYvuJGqz20WvsQyv3kcJnhQg+xuM2C7t0wgE9gpUWwAv9t3bmBtPmb991
/I/2xNYkT7wDSw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:08 2026 by rpki-client