Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: N28mC4QZ7JeoTNjOiicnFBp1t7YED0K/mAptQ+UhztI=
Subject key identifier: EB:13:FC:AC:F9:36:D2:65:7F:63:46:27:A3:78:6C:0B:F1:D6:45:AA
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019CA9B3E850D869FE1538A10C1966B3C835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 128E
Signing time: Sun 01 Mar 2026 14:01:05 +0000
Manifest this update: Sun 01 Mar 2026 14:01:05 +0000
Manifest next update: Mon 02 Mar 2026 14:01:05 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: TU4WYeeRD65QUC/XxsE/3u/t9cVPihnwHpMF0sf/LYw=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e8:50:d8:69:fe:15:38:a1:0c:19:66:b3:c8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Mar 1 14:01:05 2026 GMT
Not After : Mar 2 14:01:05 2026 GMT
Subject: CN=eb13fcacf936d2657f634627a3786c0bf1d645aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:28:21:b2:34:5a:76:eb:4a:2e:a1:2a:db:
0c:84:cf:cf:3f:5b:14:d1:9a:e4:30:a5:ab:0b:94:
c2:85:a0:3a:28:3d:7c:43:15:90:49:63:fc:94:15:
ba:09:d5:60:bc:59:be:05:c1:3e:57:20:40:dc:89:
ea:78:a8:cc:5d:f6:32:46:64:22:ce:3c:f0:ec:ba:
fa:3d:e1:3c:18:e4:3d:ec:02:5b:c0:92:2f:35:24:
08:7a:66:4f:ba:ac:68:57:a5:ac:36:a4:57:5d:2a:
15:70:9f:c1:8e:05:26:b4:5b:50:14:1b:7e:3f:1b:
74:ca:df:df:2e:d2:40:9f:4c:4c:78:d2:f8:bb:c0:
0c:cd:95:69:2d:7c:49:f0:31:b9:78:89:07:50:e2:
c9:4d:d3:2d:ec:5b:5c:bd:ad:9e:6a:43:6d:82:94:
08:98:7c:21:c0:11:7a:db:6f:45:05:3a:ff:be:64:
d5:c9:6c:11:40:5d:9b:a1:8f:de:2a:8f:e0:ee:50:
f4:cf:ed:4e:e7:70:ae:51:32:3d:47:64:72:46:14:
10:47:a9:8f:e5:c1:0c:02:3e:c3:61:c6:26:13:de:
c2:0e:e2:53:2f:e6:1b:95:52:2e:46:ab:1f:61:74:
d8:7f:de:d8:15:94:9a:9f:f8:62:dc:0a:cb:ee:b1:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:13:FC:AC:F9:36:D2:65:7F:63:46:27:A3:78:6C:0B:F1:D6:45:AA
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:7c:eb:9b:a8:41:78:bc:06:9c:bf:1e:74:2a:8e:1f:74:
6e:2d:9a:2a:6f:e1:5d:78:54:23:89:43:f5:62:ec:9d:af:58:
96:c3:4e:6b:0b:d9:d6:34:31:5f:1f:2e:c3:42:18:d6:18:aa:
30:4a:c2:cf:5d:d4:4c:35:92:92:5b:7d:d6:2d:42:8d:c7:51:
f5:ef:c5:d8:61:ba:47:9c:af:2b:a5:77:57:eb:dc:3f:41:8f:
63:2c:d4:7c:30:0e:39:67:17:3f:42:4c:9f:f6:b4:3d:36:9b:
89:33:db:39:9e:6f:11:bb:a4:6f:f3:4b:d8:63:0f:9d:00:21:
37:2b:03:30:1d:57:df:ef:f1:f4:e8:8e:42:95:80:f2:55:b9:
16:41:97:0f:08:4a:61:5e:b6:bc:72:aa:72:53:f1:dc:cf:9f:
e7:71:53:f0:84:cd:57:dc:3b:b1:a8:26:19:da:16:1e:93:b9:
e4:00:1a:2f:32:dd:8b:1e:a3:88:b0:c5:6b:fa:93:ca:ad:78:
0a:29:7b:9f:09:bc:5e:7a:14:2b:a9:95:ca:62:79:b8:cd:ae:
c1:c8:06:5a:0e:d6:f1:cc:40:d8:04:9f:a5:c1:8c:ba:59:70:
e1:fd:3b:55:67:3a:2b:2f:ce:c6:aa:46:11:f3:e1:af:60:56:
05:98:21:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps+hQ2Gn+FTihDBlms8g1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjYwMzAxMTQwMTA1WhcNMjYwMzAyMTQwMTA1WjAzMTEwLwYDVQQD
EyhlYjEzZmNhY2Y5MzZkMjY1N2Y2MzQ2MjdhMzc4NmMwYmYxZDY0NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrwoIbI0WnbrSi6hKtsMhM/PP1sU
0ZrkMKWrC5TChaA6KD18QxWQSWP8lBW6CdVgvFm+BcE+VyBA3InqeKjMXfYyRmQi
zjzw7Lr6PeE8GOQ97AJbwJIvNSQIemZPuqxoV6WsNqRXXSoVcJ/BjgUmtFtQFBt+
Pxt0yt/fLtJAn0xMeNL4u8AMzZVpLXxJ8DG5eIkHUOLJTdMt7Ftcva2eakNtgpQI
mHwhwBF6229FBTr/vmTVyWwRQF2boY/eKo/g7lD0z+1O53CuUTI9R2RyRhQQR6mP
5cEMAj7DYcYmE97CDuJTL+YblVIuRqsfYXTYf97YFZSan/hi3ArL7rE9WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsT/Kz5NtJlf2NGJ6N4bAvx1kWqMB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrN865uo
QXi8Bpy/HnQqjh90bi2aKm/hXXhUI4lD9WLsna9YlsNOawvZ1jQxXx8uw0IY1hiq
MErCz13UTDWSklt91i1CjcdR9e/F2GG6R5yvK6V3V+vcP0GPYyzUfDAOOWcXP0JM
n/a0PTabiTPbOZ5vEbukb/NL2GMPnQAhNysDMB1X3+/x9OiOQpWA8lW5FkGXDwhK
YV62vHKqclPx3M+f53FT8ITNV9w7sagmGdoWHpO55AAaLzLdix6jiLDFa/qTyq14
Cil7nwm8XnoUK6mVymJ5uM2uwcgGWg7W8cxA2ASfpcGMullw4f07VWc6Ky/OxqpG
EfPhr2BWBZghwg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:39 2026 by rpki-client