Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: 5TzSsItxfPgNfVOYTjmbccsjDat6wrjrhTlrbjElGoQ=
Subject key identifier: 21:F5:1C:FF:78:39:ED:04:67:54:25:06:10:44:9C:9B:03:24:49:5F
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019CAD230C4D9C58DA8A9B0A720F73CC6622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 148C
Signing time: Mon 02 Mar 2026 06:01:21 +0000
Manifest this update: Mon 02 Mar 2026 06:01:21 +0000
Manifest next update: Tue 03 Mar 2026 06:01:21 +0000
Files and hashes: 1: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (hash: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko=)
2: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (hash: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8=)
3: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: mL73D6fsn90CmwF2hFXvkUmD7Q87713b38EwK7eRX8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0c:4d:9c:58:da:8a:9b:0a:72:0f:73:cc:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Mar 2 06:01:21 2026 GMT
Not After : Mar 3 06:01:21 2026 GMT
Subject: CN=21f51cff7839ed046754250610449c9b0324495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:9f:28:7f:72:c6:e4:2c:61:e8:90:08:28:
65:b7:fe:5e:cd:16:7a:9e:c6:0b:2c:7f:77:cb:08:
dd:0c:35:6e:87:14:43:4f:d7:e2:5f:f1:73:3f:51:
27:0a:7f:12:93:46:cc:c1:df:0e:69:5f:63:f9:e5:
a9:b8:1d:53:1c:ee:8f:b2:4c:13:ee:ff:26:ba:12:
74:b2:1d:7a:75:72:13:8a:cd:f0:86:40:32:64:c9:
bd:a4:85:96:24:33:2e:62:b5:f1:48:72:7b:a0:ca:
4d:e2:f1:fd:be:70:3b:19:b9:94:7b:79:1a:6e:00:
08:ac:7a:bf:0e:c1:12:27:53:ca:be:f2:24:35:7c:
61:4b:71:ef:91:3c:e7:95:6e:c4:25:3c:26:23:4d:
8b:d3:22:c6:e3:4f:e2:e4:77:30:55:92:42:d1:74:
08:5c:af:3b:aa:5d:b5:c0:49:a7:b6:cd:24:06:f8:
de:93:7c:6c:b6:99:14:97:69:09:68:28:90:1e:6b:
86:73:0a:a8:eb:fd:d6:c2:ab:00:46:5b:12:db:f9:
35:57:1e:36:9b:8b:a3:2f:2e:54:fe:ab:f1:4d:af:
5c:0f:98:1d:20:d3:30:e7:84:cd:b4:6c:ad:a1:d2:
55:d5:af:40:a3:3b:78:e6:f8:b1:56:fc:0a:4f:8c:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:1C:FF:78:39:ED:04:67:54:25:06:10:44:9C:9B:03:24:49:5F
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:16:a6:27:16:32:b8:17:17:26:70:93:dc:c7:3b:51:6e:d4:
1b:b3:69:e4:ee:cb:00:f1:88:b0:bd:08:fb:e5:61:36:2b:1a:
8f:6d:14:10:90:1f:c1:14:0d:f5:3f:c2:98:1c:47:de:a8:e0:
6b:37:f6:76:73:3f:54:a5:14:2c:ba:b6:78:2b:2b:c3:85:dc:
c0:bc:79:32:f8:09:39:cf:34:0f:98:b2:68:18:09:ab:66:07:
33:e4:b7:0d:6f:62:12:9b:fc:33:2d:e6:4c:7b:eb:e6:a3:7c:
25:87:4e:32:31:37:07:d2:fd:17:39:b2:75:37:10:3a:1d:07:
e4:90:57:bd:74:80:15:de:4c:df:d5:e8:d2:73:8c:aa:74:38:
78:d8:21:c5:a7:a4:2f:1e:3f:42:a6:10:d0:73:e3:4e:3b:d9:
54:5f:c4:39:18:87:14:5e:d6:fe:18:00:77:46:25:13:41:b7:
24:d0:34:47:59:db:b9:d2:60:b9:8f:99:78:4c:5e:c0:06:82:
36:16:cd:d6:0b:b6:84:19:80:68:ca:c9:80:17:28:68:d6:f4:
04:85:29:66:c3:ac:0b:ea:9a:cc:09:86:61:15:f8:d1:87:c7:
77:8e:d9:d7:fb:13:36:0b:2a:4a:44:d2:13:e6:2e:fe:fc:69:
f2:fb:b0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIwxNnFjaipsKcg9zzGYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODI5NmM1MGQ5NGJiZWQyMjVmMjg2NzIzMWZhNTA5M2Rl
YmVhOTEwHhcNMjYwMzAyMDYwMTIxWhcNMjYwMzAzMDYwMTIxWjAzMTEwLwYDVQQD
EygyMWY1MWNmZjc4MzllZDA0Njc1NDI1MDYxMDQ0OWM5YjAzMjQ0OTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJKfKH9yxuQsYeiQCChlt/5ezRZ6
nsYLLH93ywjdDDVuhxRDT9fiX/FzP1EnCn8Sk0bMwd8OaV9j+eWpuB1THO6PskwT
7v8muhJ0sh16dXITis3whkAyZMm9pIWWJDMuYrXxSHJ7oMpN4vH9vnA7GbmUe3ka
bgAIrHq/DsESJ1PKvvIkNXxhS3HvkTznlW7EJTwmI02L0yLG40/i5HcwVZJC0XQI
XK87ql21wEmnts0kBvjek3xstpkUl2kJaCiQHmuGcwqo6/3WwqsARlsS2/k1Vx42
m4ujLy5U/qvxTa9cD5gdINMw54TNtGytodJV1a9Aozt45vixVvwKT4xnUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH1HP94Oe0EZ1QlBhBEnJsDJElfMB8GA1UdIwQY
MBaAFJiClsUNlLvtIl8oZyMfpQk96+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMt
Mzk5M2I1MGIyMDY0LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMtMzk5M2I1MGIyMDY0
LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRamJxYy
uBcXJnCT3Mc7UW7UG7Np5O7LAPGIsL0I++VhNisaj20UEJAfwRQN9T/CmBxH3qjg
azf2dnM/VKUULLq2eCsrw4XcwLx5MvgJOc80D5iyaBgJq2YHM+S3DW9iEpv8My3m
THvr5qN8JYdOMjE3B9L9FzmydTcQOh0H5JBXvXSAFd5M39Xo0nOMqnQ4eNghxaek
Lx4/QqYQ0HPjTjvZVF/EORiHFF7W/hgAd0YlE0G3JNA0R1nbudJguY+ZeExewAaC
NhbN1gu2hBmAaMrJgBcoaNb0BIUpZsOsC+qazAmGYRX40YfHd47Z1/sTNgsqSkTS
E+Yu/vxp8vuwsg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:57 2026 by rpki-client