Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: 4Z95ZmIhWa+qcwqxBl6ENePCsH5mpA3PFQAI++wm1VI=
Subject key identifier: C6:07:85:E3:90:E8:65:EC:94:BE:75:B6:B2:FA:FA:9F:26:6D:5C:EC
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019CABA1C1409DCAC729A4BF4C0DB616D23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 23:00:30 +0000
Manifest this update: Sun 01 Mar 2026 23:00:30 +0000
Manifest next update: Mon 02 Mar 2026 23:00:30 +0000
Files and hashes: 1: 0wgf23tvdSjDuy36oum4E_5sBcQ.roa (hash: DMJE3y5rVfgLLy+PLJs0X0RhRoSjVQhQBLKFeetfmGY=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: uObtJMI/SIOocqsrDWno7jw9+rsm0qPM/ycB4Pv1qvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:c1:40:9d:ca:c7:29:a4:bf:4c:0d:b6:16:d2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Mar 1 23:00:30 2026 GMT
Not After : Mar 2 23:00:30 2026 GMT
Subject: CN=c60785e390e865ec94be75b6b2fafa9f266d5cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:41:bf:34:78:b6:92:ec:e7:8b:23:c7:ba:
ef:bf:d6:e0:40:a5:25:5d:0b:95:27:9f:98:e6:ed:
20:b4:f2:02:9c:5f:8e:21:00:83:1f:f6:23:09:a0:
90:3f:84:04:3a:39:b3:1b:d6:72:11:00:98:e3:c8:
73:be:33:93:2a:60:fc:70:7e:76:fd:7c:96:10:84:
19:8f:f7:c2:a2:b0:24:43:8b:e6:7c:a1:9e:89:8b:
2d:01:7a:f4:69:3a:49:91:c6:95:90:bb:8f:4f:79:
d8:c1:9f:a2:5b:9d:f4:d0:80:ea:d8:00:d8:03:91:
ea:54:3e:52:b6:22:21:ae:f4:f4:13:bf:a4:0a:b2:
d7:d9:d7:a2:b0:24:d4:66:9f:17:24:3a:b1:fd:f0:
48:c8:67:df:59:ca:e2:cd:64:2e:10:a3:43:57:67:
68:28:17:d7:80:37:0c:a4:61:e6:53:88:bb:8e:d6:
e7:c6:2a:b2:8a:6b:49:d7:1b:4b:4d:90:ca:2b:65:
77:f9:b8:70:0b:be:b4:f5:9c:a5:08:7e:75:8c:c6:
04:b5:40:ef:b8:67:1e:69:de:b5:25:ab:e1:e1:57:
9e:80:10:99:2a:3e:d0:01:ba:4e:65:80:65:ef:f4:
03:a5:ff:35:10:2f:94:16:b0:10:6c:98:4a:e0:d7:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:07:85:E3:90:E8:65:EC:94:BE:75:B6:B2:FA:FA:9F:26:6D:5C:EC
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:21:1f:64:c2:3f:cb:b9:22:da:bf:d9:dc:64:9f:e9:da:17:
c6:c7:bb:23:a4:95:0e:d9:16:d3:21:44:13:e5:14:3b:90:ab:
ad:28:70:d4:99:7d:8c:40:52:87:76:28:be:e8:44:75:09:4c:
b8:4d:da:ab:1a:ec:69:ac:1f:3c:d4:34:49:07:16:81:e0:c9:
55:73:d3:c9:7c:72:96:2b:49:76:d5:1b:f5:f1:3e:e9:d7:78:
ef:24:c0:97:1b:69:5d:45:fa:68:5b:16:a5:1c:b4:9d:ae:2e:
e9:be:bc:77:d0:b6:12:26:72:5f:9f:5d:dc:9c:f4:af:97:fc:
c3:45:18:ff:cb:a1:b2:b9:53:4d:c1:78:73:a2:8f:01:bb:e5:
d3:57:d4:f9:29:e9:af:09:2c:93:78:49:5a:cb:93:b7:32:f2:
40:18:0e:87:40:ee:8c:34:23:2f:a8:49:cd:45:12:8d:12:18:
1b:75:6f:66:54:31:55:64:44:9d:9c:b8:cd:65:71:77:ec:b2:
b7:67:9e:3d:da:e2:6e:48:94:c1:82:8d:67:a6:8d:7d:89:06:
e9:6f:39:b4:5a:90:ea:a4:7b:3f:88:87:d7:32:07:43:ea:40:
12:96:aa:81:9d:b7:da:89:2b:12:71:17:fa:38:19:e1:dd:09:
60:b7:81:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocFAncrHKaS/TA22FtI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NmFhMWYwZWQ0NTk2ZTczM2Y4YjYyZDM5ZTM3YjhkZTUw
ODVlZDcwHhcNMjYwMzAxMjMwMDMwWhcNMjYwMzAyMjMwMDMwWjAzMTEwLwYDVQQD
EyhjNjA3ODVlMzkwZTg2NWVjOTRiZTc1YjZiMmZhZmE5ZjI2NmQ1Y2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuJBvzR4tpLs54sjx7rvv9bgQKUl
XQuVJ5+Y5u0gtPICnF+OIQCDH/YjCaCQP4QEOjmzG9ZyEQCY48hzvjOTKmD8cH52
/XyWEIQZj/fCorAkQ4vmfKGeiYstAXr0aTpJkcaVkLuPT3nYwZ+iW5300IDq2ADY
A5HqVD5StiIhrvT0E7+kCrLX2deisCTUZp8XJDqx/fBIyGffWcrizWQuEKNDV2do
KBfXgDcMpGHmU4i7jtbnxiqyimtJ1xtLTZDKK2V3+bhwC7609ZylCH51jMYEtUDv
uGcead61Javh4VeegBCZKj7QAbpOZYBl7/QDpf81EC+UFrAQbJhK4NfKfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYHheOQ6GXslL51trL6+p8mbVzsMB8GA1UdIwQY
MBaAFIlqofDtRZbnM/i2LTnje43lCF7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMt
YTI4NmQwMjUzMmQzLzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yMGUxNjItMmNiYy00YmUzLWE1MGMtYTI4NmQwMjUzMmQz
LzEvaVdxaDhPMUZsdWN6LUxZdE9lTjdqZVVJWHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2iEfZMI/
y7ki2r/Z3GSf6doXxse7I6SVDtkW0yFEE+UUO5CrrShw1Jl9jEBSh3YovuhEdQlM
uE3aqxrsaawfPNQ0SQcWgeDJVXPTyXxylitJdtUb9fE+6dd47yTAlxtpXUX6aFsW
pRy0na4u6b68d9C2EiZyX59d3Jz0r5f8w0UY/8uhsrlTTcF4c6KPAbvl01fU+Snp
rwksk3hJWsuTtzLyQBgOh0DujDQjL6hJzUUSjRIYG3VvZlQxVWREnZy4zWVxd+yy
t2eePdribkiUwYKNZ6aNfYkG6W85tFqQ6qR7P4iH1zIHQ+pAEpaqgZ232okrEnEX
+jgZ4d0JYLeBIw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:12 2026 by rpki-client