Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: cHUjdld4F2dmP7tgmSAMD/OggeGuyIiknNKj8I3kgXc=
Subject key identifier: 33:F5:EE:CB:60:F4:4F:12:2B:C0:44:58:84:1A:59:EE:BA:14:4C:9E
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019CAEA2D4D926BDF6C2F533E799F3FFF4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 184D
Signing time: Mon 02 Mar 2026 13:00:32 +0000
Manifest this update: Mon 02 Mar 2026 13:00:32 +0000
Manifest next update: Tue 03 Mar 2026 13:00:32 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: 4UxDEreVZ+x50O4ZA53EYKWecKbesGEQz+SdWj53av4=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a2:d4:d9:26:bd:f6:c2:f5:33:e7:99:f3:ff:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Mar 2 13:00:32 2026 GMT
Not After : Mar 3 13:00:32 2026 GMT
Subject: CN=33f5eecb60f44f122bc04458841a59eeba144c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:97:6c:47:81:19:8a:91:c7:04:bf:56:e5:c5:
b8:cf:79:42:74:a5:82:23:1c:08:82:fa:ee:66:4a:
36:04:ac:0a:a3:ab:6e:a0:27:69:2e:ea:ec:45:3e:
ac:87:8a:fe:c5:3e:92:0b:ad:3d:5c:3e:05:f2:d4:
21:48:cf:e1:f8:45:f4:be:c7:e1:8f:95:de:79:a9:
f9:be:7c:1d:d9:3c:6a:69:4d:67:74:f1:81:43:5a:
b8:2b:a1:42:bb:cd:46:ac:24:0d:a2:f2:28:52:65:
fb:32:6f:e4:ce:2e:42:c9:13:35:07:2e:8c:11:59:
2e:72:5c:d9:34:6a:d3:6b:da:b5:c9:f9:ce:f3:af:
60:d5:d2:48:b9:ef:d3:59:64:8e:cd:0b:aa:94:81:
38:8c:61:5b:01:e0:57:b9:55:97:39:05:b1:c0:77:
29:93:d6:36:92:bd:19:1c:39:93:02:c3:5d:f6:57:
ff:e9:46:f7:7d:76:82:c6:81:6d:ba:99:0f:c6:95:
d2:89:17:69:52:f3:a2:65:d1:99:aa:eb:38:34:99:
7d:1f:92:5c:7e:5e:a7:64:9c:5d:5b:8c:e9:c5:f5:
b7:c2:a9:e9:89:f2:a8:5e:99:db:dd:b0:4a:04:a1:
63:b0:45:37:a0:f3:61:6b:44:8c:6f:7c:a4:d1:c3:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:EE:CB:60:F4:4F:12:2B:C0:44:58:84:1A:59:EE:BA:14:4C:9E
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:76:04:f1:ef:cb:b7:26:bc:45:65:17:fa:65:60:db:c0:78:
b2:5c:54:f8:99:6c:ee:94:94:bd:f8:60:a4:cf:0d:cc:ca:c8:
a3:70:e1:49:f3:b1:8a:f1:eb:bc:37:69:db:99:75:c2:8e:98:
20:95:81:b8:42:ac:f2:a9:56:53:dc:fd:5d:1c:fe:58:9d:1d:
89:5a:27:af:6f:c1:5b:13:a8:e6:20:a8:6d:aa:95:21:48:59:
fc:76:f5:96:15:61:2e:62:08:96:b3:d5:9d:71:cf:73:6c:2f:
ed:b2:9b:ea:d4:b7:94:81:2d:0e:82:a2:4e:5e:01:83:b0:7d:
b8:8c:f6:19:1c:ee:aa:8f:80:14:47:9f:d0:74:e0:7c:a4:c9:
8e:a4:c8:0a:e8:9e:ee:7e:e1:57:b8:3f:c6:ea:a8:21:2d:c7:
63:48:b4:dd:a1:00:4e:57:cd:26:5c:fb:d4:35:b2:9f:92:c7:
51:3f:e1:54:78:0b:92:11:0d:6f:3e:fb:44:12:e0:0a:dd:0f:
39:e8:a8:13:f0:b4:67:a2:bc:9c:ab:66:0f:ac:40:80:2c:91:
f2:c0:c3:0f:01:2b:7b:7c:10:c7:8a:6f:be:87:f7:ed:8a:aa:
37:53:25:a3:3a:2b:77:45:1c:5f:b4:25:1c:d0:5e:bb:ba:a8:
b7:71:b9:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuotTZJr32wvUz55nz//TLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjYwMzAyMTMwMDMyWhcNMjYwMzAzMTMwMDMyWjAzMTEwLwYDVQQD
EygzM2Y1ZWVjYjYwZjQ0ZjEyMmJjMDQ0NTg4NDFhNTllZWJhMTQ0YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspdsR4EZipHHBL9W5cW4z3lCdKWC
IxwIgvruZko2BKwKo6tuoCdpLursRT6sh4r+xT6SC609XD4F8tQhSM/h+EX0vsfh
j5Xeean5vnwd2TxqaU1ndPGBQ1q4K6FCu81GrCQNovIoUmX7Mm/kzi5CyRM1By6M
EVkuclzZNGrTa9q1yfnO869g1dJIue/TWWSOzQuqlIE4jGFbAeBXuVWXOQWxwHcp
k9Y2kr0ZHDmTAsNd9lf/6Ub3fXaCxoFtupkPxpXSiRdpUvOiZdGZqus4NJl9H5Jc
fl6nZJxdW4zpxfW3wqnpifKoXpnb3bBKBKFjsEU3oPNha0SMb3yk0cMcpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDP17stg9E8SK8BEWIQaWe66FEyeMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHYE8e/L
tya8RWUX+mVg28B4slxU+Jls7pSUvfhgpM8NzMrIo3DhSfOxivHrvDdp25l1wo6Y
IJWBuEKs8qlWU9z9XRz+WJ0diVonr2/BWxOo5iCobaqVIUhZ/Hb1lhVhLmIIlrPV
nXHPc2wv7bKb6tS3lIEtDoKiTl4Bg7B9uIz2GRzuqo+AFEef0HTgfKTJjqTICuie
7n7hV7g/xuqoIS3HY0i03aEATlfNJlz71DWyn5LHUT/hVHgLkhENbz77RBLgCt0P
OeioE/C0Z6K8nKtmD6xAgCyR8sDDDwEre3wQx4pvvof37YqqN1Mlozord0UcX7Ql
HNBeu7qot3G5dw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:01 2026 by rpki-client