Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: voaEt2PYV1qIMj0d+2s4c8Gs/HnxBswg8dMgGBan0Cg=
Subject key identifier: 65:FF:2B:04:15:FB:53:5A:FD:6E:DC:FA:82:AE:6D:1A:2E:93:FF:D9
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019CADFE4D7F0D3BF8E3E7F9FE38E3A0D8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 17A0
Signing time: Mon 02 Mar 2026 10:00:49 +0000
Manifest this update: Mon 02 Mar 2026 10:00:49 +0000
Manifest next update: Tue 03 Mar 2026 10:00:49 +0000
Files and hashes: 1: aeU9_Yx1c9nw1y-4xtz44SqG1m0.roa (hash: 0t0fFg5NYuzbKW5UvLMqmaiFIgFM8FNQ8jsxvVeiMB0=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: PfQQwsJVQa7AVTZR5jdRil8z7ggZBoLiZPt3gXO6br0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:4d:7f:0d:3b:f8:e3:e7:f9:fe:38:e3:a0:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Mar 2 10:00:49 2026 GMT
Not After : Mar 3 10:00:49 2026 GMT
Subject: CN=65ff2b0415fb535afd6edcfa82ae6d1a2e93ffd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:01:b5:a4:34:ec:89:bd:e3:11:75:b0:a3:
3e:94:45:2d:f4:47:f9:8d:3d:c4:73:66:f2:d1:bf:
c7:fd:2d:90:60:74:55:c7:8c:9e:bb:dc:09:e0:64:
77:c1:1b:65:70:d6:73:c7:57:9c:c2:6d:42:26:8a:
47:0d:60:2f:51:35:3d:b1:a5:c5:83:b5:70:4a:91:
fb:0e:57:28:3b:21:fc:a2:c7:c4:c8:00:06:de:c4:
11:57:c2:a7:4c:de:10:cd:95:4a:3f:32:78:5f:d9:
b0:c7:f4:04:e5:bf:e3:57:33:8c:c2:90:b7:a1:01:
ba:40:68:de:65:61:cc:a3:a9:6b:05:f3:91:c7:9f:
6e:8a:7d:2a:13:fc:f6:b7:88:6c:70:ba:62:c1:0d:
75:67:4a:3a:08:27:23:fb:41:15:a5:fc:eb:f1:cb:
24:ed:74:c4:34:cc:91:73:19:05:7c:18:b9:0f:e6:
02:a5:85:eb:73:0d:d1:e6:89:c2:ea:bc:a2:bc:d7:
c2:fa:ff:f6:e7:fb:6e:08:95:8b:2e:c3:28:55:20:
04:31:cc:8b:60:9c:0a:70:ab:68:73:75:60:69:74:
53:44:a6:02:7b:66:89:b9:8b:f6:ef:06:1a:fd:4a:
61:c6:a0:69:9d:62:82:67:5b:b8:de:d9:0e:82:57:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:2B:04:15:FB:53:5A:FD:6E:DC:FA:82:AE:6D:1A:2E:93:FF:D9
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:63:47:27:73:f1:ae:41:b1:0f:10:a3:8e:bd:b4:3c:56:
40:30:4b:a4:65:36:80:32:a9:94:12:fc:c7:d0:77:64:b2:20:
e4:4b:a8:4d:b9:b8:7e:ae:99:93:d3:5d:92:7a:78:84:4c:8f:
13:ac:3d:fb:8a:85:d1:c4:0c:ce:b2:1d:04:85:d7:d9:07:37:
12:6a:f9:d2:6c:91:b9:de:ec:60:d1:c6:41:3a:ed:30:88:bf:
9d:4d:e2:19:ae:bd:d9:f5:24:8b:74:0e:24:91:44:d7:41:59:
51:35:e1:f8:ff:cb:37:6f:25:68:30:ec:1d:26:43:17:c7:4a:
be:3a:ce:f2:df:f4:c0:52:f4:13:08:43:4c:4b:e8:be:41:ab:
14:56:4a:cd:c4:bb:55:4e:b1:65:15:7f:81:58:f2:91:2c:da:
a8:54:f5:e6:a3:a9:3a:e0:ad:b8:bb:42:77:c1:7e:b9:2a:94:
79:a0:9e:de:43:d9:bb:73:41:5c:3b:6e:c5:60:3f:c7:fa:1c:
5d:6c:a4:17:64:9e:a0:e5:5b:d8:93:aa:1b:78:97:e5:eb:82:
e8:b5:3b:ee:8f:bc:3a:33:ed:8d:b5:e7:b5:5a:8f:25:aa:58:
53:07:65:b8:44:64:38:11:48:7b:fb:c1:a9:de:76:2a:07:fa:
0c:5b:77:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/k1/DTv44+f5/jjjoNjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NDRmYzRhZTEwNjQ5OWUwNTc1ZmYzY2ExNTU2ZGJjMGQ5
YjQ2NTEwHhcNMjYwMzAyMTAwMDQ5WhcNMjYwMzAzMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg2NWZmMmIwNDE1ZmI1MzVhZmQ2ZWRjZmE4MmFlNmQxYTJlOTNmZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyYBtaQ07Im94xF1sKM+lEUt9Ef5
jT3Ec2by0b/H/S2QYHRVx4yeu9wJ4GR3wRtlcNZzx1ecwm1CJopHDWAvUTU9saXF
g7VwSpH7DlcoOyH8osfEyAAG3sQRV8KnTN4QzZVKPzJ4X9mwx/QE5b/jVzOMwpC3
oQG6QGjeZWHMo6lrBfORx59uin0qE/z2t4hscLpiwQ11Z0o6CCcj+0EVpfzr8csk
7XTENMyRcxkFfBi5D+YCpYXrcw3R5onC6ryivNfC+v/25/tuCJWLLsMoVSAEMcyL
YJwKcKtoc3VgaXRTRKYCe2aJuYv27wYa/UphxqBpnWKCZ1u43tkOglf7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX/KwQV+1Na/W7c+oKubRouk//ZMB8GA1UdIwQY
MBaAFIhE/ErhBkmeBXX/PKFVbbwNm0ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2Mt
MzE3NjQ1Y2Q3ODg1LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kZDQyZDktZmY4OC00Y2EwLTg4M2MtMzE3NjQ1Y2Q3ODg1
LzEvaUVUOFN1RUdTWjRGZGY4OG9WVnR2QTJiUmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxRjRydz
8a5BsQ8Qo469tDxWQDBLpGU2gDKplBL8x9B3ZLIg5EuoTbm4fq6Zk9Ndknp4hEyP
E6w9+4qF0cQMzrIdBIXX2Qc3Emr50myRud7sYNHGQTrtMIi/nU3iGa692fUki3QO
JJFE10FZUTXh+P/LN28laDDsHSZDF8dKvjrO8t/0wFL0EwhDTEvovkGrFFZKzcS7
VU6xZRV/gVjykSzaqFT15qOpOuCtuLtCd8F+uSqUeaCe3kPZu3NBXDtuxWA/x/oc
XWykF2SeoOVb2JOqG3iX5euC6LU77o+8OjPtjbXntVqPJapYUwdluERkOBFIe/vB
qd52Kgf6DFt3Cg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:09 2026 by rpki-client