Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File: ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier: Hq4FQywME71Tj077P/CWelps8wwa4b+BGhaCtRvYp78=
Subject key identifier: A9:84:E4:93:52:B8:BA:89:A4:F4:3A:26:B1:B1:78:50:4A:7A:02:AE
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer: /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial: 019CAD907FA91C75C852E04074120A11B955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number: 0CBD
Signing time: Mon 02 Mar 2026 08:00:54 +0000
Manifest this update: Mon 02 Mar 2026 08:00:54 +0000
Manifest next update: Tue 03 Mar 2026 08:00:54 +0000
Files and hashes: 1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: UrkJDIX4kRU7lToOMgcCab3uXmpf5lBdZxbIRH4whWs=)
2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7f:a9:1c:75:c8:52:e0:40:74:12:0a:11:b9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
Validity
Not Before: Mar 2 08:00:54 2026 GMT
Not After : Mar 3 08:00:54 2026 GMT
Subject: CN=a984e49352b8ba89a4f43a26b1b178504a7a02ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:68:9d:f8:5c:0b:28:5c:de:2e:5c:7c:ec:
3c:5d:fe:59:ee:a2:d5:2d:bd:7f:7f:3e:32:88:63:
8b:ca:de:2a:3f:0b:bd:57:3d:6c:17:bd:2a:75:0e:
b3:55:2a:32:e3:5f:51:9a:e4:2c:d1:47:92:09:07:
6b:14:73:50:1c:5b:40:a0:9b:17:e5:45:d8:fb:32:
7c:18:b8:96:10:94:d0:bf:b4:30:93:9c:fc:19:df:
65:c1:f6:45:ae:90:7a:6e:82:af:62:b6:29:2c:5d:
78:5d:72:4b:82:7b:e3:62:2a:a1:13:b8:eb:5d:fe:
e0:21:c8:1b:e2:36:30:0d:a3:c6:ab:38:ad:46:e5:
e5:be:91:cb:ca:e1:17:b8:fb:3b:8f:1b:10:4b:89:
87:20:7b:88:15:d1:4d:d2:3b:62:8d:2b:f7:7c:9f:
db:3c:72:45:b7:47:fe:04:18:b5:4b:2b:37:59:cf:
b8:e4:bc:f1:0f:7d:8a:40:51:b0:f5:9f:d0:04:6e:
6e:b0:c8:8e:c7:c9:0a:24:cf:ae:79:de:61:aa:1b:
31:c5:6b:17:bd:aa:55:97:a6:48:06:d6:16:35:04:
c2:90:8a:ac:d5:d9:20:c2:41:c1:83:a0:ce:50:07:
da:24:ef:aa:a9:55:41:7c:00:80:02:a2:20:41:05:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:E4:93:52:B8:BA:89:A4:F4:3A:26:B1:B1:78:50:4A:7A:02:AE
X509v3 Authority Key Identifier:
keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c0:4f:d6:b9:79:fa:ce:a1:34:10:9c:2a:17:bf:74:54:dd:
83:f0:71:81:b2:d0:33:21:26:c2:f7:05:54:90:70:d5:33:05:
bf:89:61:4d:dd:cb:91:06:62:7c:37:c4:5e:60:89:fe:56:84:
31:de:f0:49:c4:f4:c4:39:dd:11:b4:93:bc:cb:1e:cc:15:b2:
d7:64:e5:f7:d9:4a:4f:6e:11:af:09:9e:37:83:8c:be:c0:7c:
db:ea:31:84:93:14:ea:a5:89:31:be:97:4f:1a:05:5f:70:3e:
b7:dd:65:7d:f7:01:34:ad:b2:37:58:c0:3f:36:ec:01:67:f8:
80:ba:58:f1:79:28:9a:a8:2e:da:f6:82:c2:10:5b:4d:f3:20:
14:a4:68:6c:ad:96:87:70:52:76:cb:3e:28:60:a4:79:20:30:
aa:f3:1f:42:92:6f:68:c5:de:77:2b:ae:6b:ad:09:3c:64:dd:
1e:23:7c:fe:b3:ab:e9:30:86:8f:7a:6d:0c:2b:c9:01:da:76:
e6:cf:2c:10:2e:a2:aa:12:02:a4:c7:2c:ba:36:56:cb:1f:85:
a1:b4:29:32:1e:37:18:ed:7e:3f:67:e4:18:62:2d:39:77:24:
0e:63:a6:99:03:d7:a8:26:14:2b:9b:d7:d4:88:91:4e:39:99:
1f:1b:40:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkH+pHHXIUuBAdBIKEblVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTVlYjFlMTIwOTg5Nzg3NDVkNTQwZGNhOTZjZmYwZGU0
NzA0ZGEwHhcNMjYwMzAyMDgwMDU0WhcNMjYwMzAzMDgwMDU0WjAzMTEwLwYDVQQD
EyhhOTg0ZTQ5MzUyYjhiYTg5YTRmNDNhMjZiMWIxNzg1MDRhN2EwMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc5onfhcCyhc3i5cfOw8Xf5Z7qLV
Lb1/fz4yiGOLyt4qPwu9Vz1sF70qdQ6zVSoy419RmuQs0UeSCQdrFHNQHFtAoJsX
5UXY+zJ8GLiWEJTQv7Qwk5z8Gd9lwfZFrpB6boKvYrYpLF14XXJLgnvjYiqhE7jr
Xf7gIcgb4jYwDaPGqzitRuXlvpHLyuEXuPs7jxsQS4mHIHuIFdFN0jtijSv3fJ/b
PHJFt0f+BBi1Sys3Wc+45LzxD32KQFGw9Z/QBG5usMiOx8kKJM+ued5hqhsxxWsX
vapVl6ZIBtYWNQTCkIqs1dkgwkHBg6DOUAfaJO+qqVVBfACAAqIgQQWbGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmE5JNSuLqJpPQ6JrGxeFBKegKuMB8GA1UdIwQY
MBaAFInl6x4SCYl4dF1UDcqWz/DeRwTaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1Njkt
NGFjYTA5NTY0ZmE4LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lMTNiMzItMWJhOS00ZGI5LWE1NjktNGFjYTA5NTY0ZmE4
LzEvaWVYckhoSUppWGgwWFZRTnlwYlA4TjVIQk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8BP1rl5
+s6hNBCcKhe/dFTdg/BxgbLQMyEmwvcFVJBw1TMFv4lhTd3LkQZifDfEXmCJ/laE
Md7wScT0xDndEbSTvMsezBWy12Tl99lKT24RrwmeN4OMvsB82+oxhJMU6qWJMb6X
TxoFX3A+t91lffcBNK2yN1jAPzbsAWf4gLpY8Xkomqgu2vaCwhBbTfMgFKRobK2W
h3BSdss+KGCkeSAwqvMfQpJvaMXedyuua60JPGTdHiN8/rOr6TCGj3ptDCvJAdp2
5s8sEC6iqhICpMcsujZWyx+FobQpMh43GO1+P2fkGGItOXckDmOmmQPXqCYUK5vX
1IiRTjmZHxtA9Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:33 2026 by rpki-client