Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: dvdGMISsyogfMm3clkS8+QHD8M+Xzzex3zdvULbR7v0=
Subject key identifier: 52:45:CA:1F:4F:23:67:D7:FE:54:04:B8:83:AA:2A:15:FF:14:92:00
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 019CAA58F759CC2776A5984D791601DBA1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 0FE5
Signing time: Sun 01 Mar 2026 17:01:22 +0000
Manifest this update: Sun 01 Mar 2026 17:01:22 +0000
Manifest next update: Mon 02 Mar 2026 17:01:22 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: c0Wc1x7IS7z065pRIsu8GdT0qiPiqiGu53XeIE8Dyvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f7:59:cc:27:76:a5:98:4d:79:16:01:db:a1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: Mar 1 17:01:22 2026 GMT
Not After : Mar 2 17:01:22 2026 GMT
Subject: CN=5245ca1f4f2367d7fe5404b883aa2a15ff149200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:f0:2b:49:a6:49:8f:ea:b6:e0:fa:bd:0e:
98:b6:47:9a:d9:e9:44:e5:fe:a1:cd:82:ae:17:c5:
80:da:60:d6:e2:a5:0d:c8:bc:82:5a:38:8b:a5:02:
6c:bb:22:67:41:95:9b:67:f7:f5:4e:cb:6c:a8:02:
5f:e1:f7:fe:3c:4c:12:08:a4:81:44:6b:bd:db:00:
39:15:ab:39:80:60:38:d2:dd:57:0b:07:7d:ec:8d:
03:69:bd:a0:c5:fb:96:81:c4:62:a2:4a:28:a0:50:
f6:04:1e:1f:2e:bd:20:d0:d3:65:6a:95:d0:26:60:
ea:66:02:1f:c6:67:20:14:19:de:2e:a3:6b:f8:23:
1b:50:b7:f7:0b:f3:63:80:15:55:27:1f:bc:19:b3:
5e:2f:df:3c:14:d5:ff:12:47:58:52:a9:74:20:fb:
bc:71:a8:cc:a2:8a:f7:56:f6:ea:aa:0a:bb:18:da:
42:e1:2a:8d:ff:b7:3e:ae:34:cb:c1:10:47:e1:9f:
bc:a7:69:a2:eb:24:2b:9e:bc:3f:33:ce:af:80:fa:
ae:67:ec:71:72:4d:4d:ab:0a:1f:47:3e:2b:5d:04:
e3:9a:ce:a2:f9:23:53:b8:2e:ed:58:02:65:62:bd:
25:11:77:ff:13:47:dd:78:54:ec:8a:54:0e:a1:d8:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:CA:1F:4F:23:67:D7:FE:54:04:B8:83:AA:2A:15:FF:14:92:00
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ed:2e:5e:85:a8:b8:b8:60:a5:6f:36:e4:5f:df:f3:31:85:
73:8c:bc:92:12:04:32:e2:0f:65:e5:79:f3:7b:ec:42:d4:7b:
c2:14:7d:7e:77:fb:a3:91:ee:6e:c0:68:70:7b:91:02:0d:e7:
bd:09:7e:50:53:0e:16:18:e4:e8:85:33:a4:7e:6e:c1:b7:17:
46:04:e5:f3:53:b0:fd:fe:45:a9:d2:78:1f:e4:7a:56:f8:bd:
ec:34:52:1a:3a:18:33:34:de:d1:ea:0b:41:df:20:6a:fe:f4:
24:fa:74:c7:61:ab:92:6f:c3:3e:8a:34:47:6c:6e:c6:4a:3e:
55:49:ef:e5:f1:bc:00:92:a7:c2:1d:5e:3a:f9:8d:36:f3:23:
f5:ab:09:7e:ea:cf:4c:31:79:82:1e:62:01:d0:78:9b:fd:ef:
4f:af:01:d6:8e:bd:ed:d6:c5:c9:8d:51:9c:7c:4d:04:a4:a6:
59:c1:12:3d:14:0d:05:b0:11:2d:80:dd:d4:85:15:80:62:1b:
db:e5:eb:9e:7d:3c:b0:a2:40:bd:15:d8:2a:77:97:73:d9:70:
b3:c5:41:79:1f:4c:ab:85:18:e0:0f:bf:41:0b:55:07:32:04:
82:15:92:78:2e:26:d5:ce:7a:6a:db:9b:69:88:b3:b2:21:11:
70:18:17:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWPdZzCd2pZhNeRYB26HhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw
NTczOTEwHhcNMjYwMzAxMTcwMTIyWhcNMjYwMzAyMTcwMTIyWjAzMTEwLwYDVQQD
Eyg1MjQ1Y2ExZjRmMjM2N2Q3ZmU1NDA0Yjg4M2FhMmExNWZmMTQ5MjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopfwK0mmSY/qtuD6vQ6Ytkea2elE
5f6hzYKuF8WA2mDW4qUNyLyCWjiLpQJsuyJnQZWbZ/f1TstsqAJf4ff+PEwSCKSB
RGu92wA5Fas5gGA40t1XCwd97I0Dab2gxfuWgcRiokoooFD2BB4fLr0g0NNlapXQ
JmDqZgIfxmcgFBneLqNr+CMbULf3C/NjgBVVJx+8GbNeL988FNX/EkdYUql0IPu8
cajMoor3Vvbqqgq7GNpC4SqN/7c+rjTLwRBH4Z+8p2mi6yQrnrw/M86vgPquZ+xx
ck1NqwofRz4rXQTjms6i+SNTuC7tWAJlYr0lEXf/E0fdeFTsilQOodg+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJFyh9PI2fX/lQEuIOqKhX/FJIAMB8GA1UdIwQY
MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt
YTlhZWI0ODVkNTkyLzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky
LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWe0uXoWo
uLhgpW825F/f8zGFc4y8khIEMuIPZeV583vsQtR7whR9fnf7o5HubsBocHuRAg3n
vQl+UFMOFhjk6IUzpH5uwbcXRgTl81Ow/f5FqdJ4H+R6Vvi97DRSGjoYMzTe0eoL
Qd8gav70JPp0x2Grkm/DPoo0R2xuxko+VUnv5fG8AJKnwh1eOvmNNvMj9asJfurP
TDF5gh5iAdB4m/3vT68B1o697dbFyY1RnHxNBKSmWcESPRQNBbARLYDd1IUVgGIb
2+Xrnn08sKJAvRXYKneXc9lws8VBeR9Mq4UY4A+/QQtVBzIEghWSeC4m1c56atub
aYizsiERcBgX+g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:29 2026 by rpki-client