Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: j3ez7VzLz3md0Wmo8F3Os6iu0P8vJB63BZKXxcEwbTw=
Subject key identifier: CE:12:E9:1E:A2:8E:99:6E:0B:E8:D3:20:23:9C:B9:79:8F:9E:66:2D
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 019CA94605D7E0F910D49A530B00D32F6392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 154D
Signing time: Sun 01 Mar 2026 12:01:04 +0000
Manifest this update: Sun 01 Mar 2026 12:01:04 +0000
Manifest next update: Mon 02 Mar 2026 12:01:04 +0000
Files and hashes: 1: JcXMDE3ebWSqfHBZs7VE5S6oxiE.roa (hash: qKO6wgBeY/Sj/PEf+kS+5gKnDMaY8bARW2HNfD5qpA0=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: clyjWFAMA3eqiADAyhKxMCZn3JkABfcbLvAZga5zg4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:05:d7:e0:f9:10:d4:9a:53:0b:00:d3:2f:63:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Mar 1 12:01:04 2026 GMT
Not After : Mar 2 12:01:04 2026 GMT
Subject: CN=ce12e91ea28e996e0be8d320239cb9798f9e662d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:65:95:74:13:d1:0f:e7:e5:78:84:ef:3e:
9d:07:dd:fa:b8:ed:25:20:89:7e:f7:f6:be:0f:1d:
b7:1f:58:4e:d1:36:57:7f:20:bc:21:0e:93:b5:b1:
a3:7e:53:c1:41:2a:f1:0b:6d:ab:12:29:45:45:f2:
2a:c9:5d:59:4c:01:d3:c3:8c:0b:dd:68:d5:41:b0:
67:a5:bc:1c:83:83:3e:5f:d9:3f:cb:61:51:a9:9c:
39:b8:23:2e:04:dd:20:9f:9a:83:e5:f0:98:ae:3c:
13:b1:0c:96:a8:bc:f0:99:d5:8e:d7:04:75:ee:3f:
27:37:79:6b:ce:e7:82:a9:60:b7:92:e3:30:67:f7:
6c:0c:e6:98:5d:8a:dc:6d:53:5e:af:a4:b0:15:2b:
01:d4:ec:01:5c:a9:9f:8b:d3:58:7e:bb:f6:43:50:
4d:16:0b:d8:00:2c:52:26:70:69:a1:fc:85:c2:11:
4c:71:c0:7f:11:3f:ab:60:56:cc:61:ac:bd:3a:a6:
0b:98:8c:ae:ad:73:b4:9e:58:e7:d9:18:93:7a:d0:
d7:0d:7c:27:2f:97:14:d6:d7:ce:b9:f0:04:19:81:
f1:09:1f:28:a4:da:58:6f:27:2f:66:c9:ff:7b:39:
ed:b7:41:f9:6c:99:7d:27:54:b4:a0:00:a9:ba:9d:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:12:E9:1E:A2:8E:99:6E:0B:E8:D3:20:23:9C:B9:79:8F:9E:66:2D
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fd:73:63:b0:1c:4f:47:a8:e9:c8:56:f4:aa:17:0c:58:46:
97:6f:94:1c:43:ba:25:fd:6b:ff:69:29:76:75:e8:99:81:42:
a8:ff:27:2e:63:8c:83:64:60:cd:ff:c3:49:80:5d:c3:7d:c9:
7f:f0:38:ae:64:33:88:68:f3:85:0b:99:7a:cf:c5:8d:4e:30:
02:09:f8:23:82:98:22:2a:3b:28:4d:54:f9:17:cb:7e:62:d2:
14:b2:b3:c2:19:66:6a:12:e4:fe:a6:08:00:e7:ec:08:1b:71:
b1:78:28:6c:b1:b9:19:a4:fc:d9:d2:0a:6d:3a:af:c8:db:0f:
04:b8:66:ff:70:4f:00:1f:d8:4a:ab:fa:3f:77:b8:92:4c:03:
df:3f:1d:23:3e:74:4d:1d:f0:79:fa:ce:20:6f:88:8a:61:22:
c1:de:12:04:cc:de:d4:63:23:a1:2f:36:f9:74:da:a3:81:87:
65:94:3d:62:ce:4d:ca:07:86:df:54:7a:38:25:7c:39:21:b1:
44:41:2d:e0:81:2d:8b:ff:0c:ef:6c:83:48:1e:16:64:36:fc:
5d:e8:25:34:70:21:25:cf:c3:41:b3:72:bf:61:5b:8d:f1:4f:
9d:cf:03:7e:62:4d:2e:28:47:21:38:e1:3c:6b:62:6a:fa:7a:
9a:51:46:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRgXX4PkQ1JpTCwDTL2OSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjI3YzM1ZjkyOGQ5YzhiOGZmN2MyNTcyMWVmZDQ3YTkw
ZGNiNjcwHhcNMjYwMzAxMTIwMTA0WhcNMjYwMzAyMTIwMTA0WjAzMTEwLwYDVQQD
EyhjZTEyZTkxZWEyOGU5OTZlMGJlOGQzMjAyMzljYjk3OThmOWU2NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH5llXQT0Q/n5XiE7z6dB936uO0l
IIl+9/a+Dx23H1hO0TZXfyC8IQ6TtbGjflPBQSrxC22rEilFRfIqyV1ZTAHTw4wL
3WjVQbBnpbwcg4M+X9k/y2FRqZw5uCMuBN0gn5qD5fCYrjwTsQyWqLzwmdWO1wR1
7j8nN3lrzueCqWC3kuMwZ/dsDOaYXYrcbVNer6SwFSsB1OwBXKmfi9NYfrv2Q1BN
FgvYACxSJnBpofyFwhFMccB/ET+rYFbMYay9OqYLmIyurXO0nljn2RiTetDXDXwn
L5cU1tfOufAEGYHxCR8opNpYbycvZsn/ezntt0H5bJl9J1S0oACpup0eNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4S6R6ijpluC+jTICOcuXmPnmYtMB8GA1UdIwQY
MBaAFIoifDX5KNnIuP98JXIe/UepDctnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUt
MzdiMGEyYWIzY2Q2LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85YWY3OGItNDFjNC00N2I3LWFmOTUtMzdiMGEyYWIzY2Q2
LzEvaWlKOE5ma28yY2k0XzN3bGNoNzlSNmtOeTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/1zY7Ac
T0eo6chW9KoXDFhGl2+UHEO6Jf1r/2kpdnXomYFCqP8nLmOMg2Rgzf/DSYBdw33J
f/A4rmQziGjzhQuZes/FjU4wAgn4I4KYIio7KE1U+RfLfmLSFLKzwhlmahLk/qYI
AOfsCBtxsXgobLG5GaT82dIKbTqvyNsPBLhm/3BPAB/YSqv6P3e4kkwD3z8dIz50
TR3wefrOIG+IimEiwd4SBMze1GMjoS82+XTao4GHZZQ9Ys5NygeG31R6OCV8OSGx
REEt4IEti/8M72yDSB4WZDb8XeglNHAhJc/DQbNyv2FbjfFPnc8DfmJNLihHITjh
PGtiavp6mlFG8g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client