Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: KK0mK185qvnK9oaIPRZWIj7u7OFKlJ/rK6it7PeEPS0=
Subject key identifier: FE:11:27:8E:4D:8A:72:FE:B5:5A:2E:0F:4F:1A:18:6D:D6:2C:14:2B
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019CACB4A445D495DC7BEB67B473C0B3550A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 14DC
Signing time: Mon 02 Mar 2026 04:00:45 +0000
Manifest this update: Mon 02 Mar 2026 04:00:45 +0000
Manifest next update: Tue 03 Mar 2026 04:00:45 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: jVTk8uMj4IUfQE6QSz3fm7VsKXk6mVdXDEUQU/FwpmQ=)
2: Jc3bkiFIpTCnI7iepJAdAbekabs.roa (hash: NwsftHfqSo5igUnmJFDaLhMgga9JlSbY/WwsognqQyI=)
3: e3q1V2fD2QBr302Nmb_jtOVn5-M.roa (hash: kNGhLH15D9N/CBFSD4P6hJtpDjbOe8kg0SMmM1H5/j0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a4:45:d4:95:dc:7b:eb:67:b4:73:c0:b3:55:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Mar 2 04:00:45 2026 GMT
Not After : Mar 3 04:00:45 2026 GMT
Subject: CN=fe11278e4d8a72feb55a2e0f4f1a186dd62c142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:2d:35:83:5e:c0:53:5c:ab:f7:c1:e5:7e:
51:9b:12:d8:6f:4d:1e:c3:1c:f6:19:55:56:b3:49:
eb:66:4a:e8:82:76:31:91:3e:2a:1b:3d:32:91:ba:
9a:c1:e0:ae:e8:8d:f5:1e:8f:76:56:d7:08:88:5e:
e7:3f:67:80:ae:99:e9:77:84:05:3f:cf:33:a9:37:
6e:7e:0b:81:c8:a3:02:d6:7b:2c:c3:b0:79:cf:8e:
45:d1:bb:01:7a:4f:53:bf:12:58:fa:eb:8e:6e:90:
9f:e0:ce:28:15:5c:54:8b:dc:da:cf:4b:d3:41:0a:
4a:04:cd:f6:3f:c3:e1:90:9d:8c:a6:3e:f6:c9:5c:
f5:7d:ba:9a:4b:d3:d8:3d:f6:50:2e:1e:01:3b:50:
d8:04:57:2a:0e:a7:0c:f1:fe:13:92:7b:96:2e:2a:
b7:03:3d:11:32:90:36:42:37:6b:02:83:3b:61:dd:
17:3f:37:1a:b8:3e:ec:64:84:70:20:0b:6e:c5:cd:
b7:cb:a3:7c:16:58:e6:79:58:9e:94:9e:00:65:7a:
71:e0:5e:ba:63:19:b0:75:2e:d0:ff:e1:a3:78:90:
bd:4e:5b:1b:82:e4:62:36:02:cf:56:26:86:3c:69:
48:c5:85:a9:0f:e4:6a:c6:cc:09:de:d2:c5:f1:13:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:11:27:8E:4D:8A:72:FE:B5:5A:2E:0F:4F:1A:18:6D:D6:2C:14:2B
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:df:5d:dd:2d:96:ea:6f:3d:dc:d7:3a:47:41:c9:0a:6d:7a:
3e:86:a3:7c:56:3c:4b:89:43:10:ed:b8:4f:eb:c7:bb:89:9c:
ba:f6:42:a6:db:01:73:a5:8b:f4:38:27:d6:8e:45:7b:47:3d:
39:74:5c:b8:b8:45:0b:be:df:5e:d7:eb:40:e6:cc:6c:2d:21:
57:01:bc:03:d7:73:b0:54:ac:01:9e:24:d1:14:52:8a:83:ff:
cf:e3:c0:b3:77:02:48:4d:e8:81:7d:1f:81:05:17:76:6f:c0:
bc:60:96:d4:00:c2:ec:bf:b6:b6:e9:f9:59:76:1e:65:09:aa:
7c:dc:a8:64:95:64:94:65:eb:f2:58:9f:94:ba:9f:e9:fc:46:
95:a1:13:11:c3:2d:7a:b7:69:7a:36:6c:bc:d3:cd:35:d6:81:
5b:a8:7e:47:26:cd:aa:d1:a1:a7:45:c5:40:05:fc:02:6b:82:
97:ac:30:b3:ff:5a:2f:57:c2:c0:02:3c:69:1c:73:2e:89:ba:
c0:c0:66:48:b7:79:55:cc:05:88:db:7b:46:2d:d8:98:eb:3b:
e9:01:39:87:4b:61:d5:f7:64:a5:92:1b:1f:c1:4f:0d:fd:63:
cc:37:dd:84:e5:f4:23:39:2e:30:b5:cc:b2:b5:bf:e7:0a:c1:
ed:ef:d3:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystKRF1JXce+tntHPAs1UKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGU5YWM2NDUxMGZhMzkxODQ2YmIxMzlhYjUyYjgwMDFk
NTgwMzgwHhcNMjYwMzAyMDQwMDQ1WhcNMjYwMzAzMDQwMDQ1WjAzMTEwLwYDVQQD
EyhmZTExMjc4ZTRkOGE3MmZlYjU1YTJlMGY0ZjFhMTg2ZGQ2MmMxNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOYtNYNewFNcq/fB5X5RmxLYb00e
wxz2GVVWs0nrZkrognYxkT4qGz0ykbqaweCu6I31Ho92VtcIiF7nP2eArpnpd4QF
P88zqTdufguByKMC1nssw7B5z45F0bsBek9TvxJY+uuObpCf4M4oFVxUi9zaz0vT
QQpKBM32P8PhkJ2Mpj72yVz1fbqaS9PYPfZQLh4BO1DYBFcqDqcM8f4TknuWLiq3
Az0RMpA2QjdrAoM7Yd0XPzcauD7sZIRwIAtuxc23y6N8FljmeVielJ4AZXpx4F66
YxmwdS7Q/+GjeJC9TlsbguRiNgLPViaGPGlIxYWpD+RqxswJ3tLF8ROvuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4RJ45NinL+tVouD08aGG3WLBQrMB8GA1UdIwQY
MBaAFCMOmsZFEPo5GEa7E5q1K4AB1YA4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQt
ZWE5MmQ4MGFiMTg4LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYTY4ZTgtNTE1Ny00NmI2LWI1ODQtZWE5MmQ4MGFiMTg4
LzEvSXc2YXhrVVEtamtZUnJzVG1yVXJnQUhWZ0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAId9d3S2W
6m893Nc6R0HJCm16PoajfFY8S4lDEO24T+vHu4mcuvZCptsBc6WL9Dgn1o5Fe0c9
OXRcuLhFC77fXtfrQObMbC0hVwG8A9dzsFSsAZ4k0RRSioP/z+PAs3cCSE3ogX0f
gQUXdm/AvGCW1ADC7L+2tun5WXYeZQmqfNyoZJVklGXr8liflLqf6fxGlaETEcMt
erdpejZsvNPNNdaBW6h+RybNqtGhp0XFQAX8AmuCl6wws/9aL1fCwAI8aRxzLom6
wMBmSLd5VcwFiNt7Ri3YmOs76QE5h0th1fdkpZIbH8FPDf1jzDfdhOX0IzkuMLXM
srW/5wrB7e/T4g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:20 2026 by rpki-client