Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: 3Fqxp/Lf9VJ0wsKLDTfBXg+EixfMjhgc44o/q48eBRI=
Subject key identifier: 3D:BC:02:07:9F:4A:15:60:48:99:12:A6:AD:20:59:6F:96:EC:CB:79
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019CA9EB933B716C09E4AC67EB2F24CA4D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:53 +0000
Manifest this update: Sun 01 Mar 2026 15:01:53 +0000
Manifest next update: Mon 02 Mar 2026 15:01:53 +0000
Files and hashes: 1: 0N9Uxg8fR7Nyrc_u_br799CvD3w.roa (hash: uOgfIOlH3kKqWEbcGQ4cdmk7+jvbyKuPe/nGe0W6i/Y=)
2: 1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa (hash: J1Zq7teTeIcSMmJFWstQ0vbrU882ZzSFqMi7WzJyvRs=)
3: H5n8y-hjXK24thn7egOUXJVZq0U.roa (hash: 7e4HU9h3i7rv/jpYmlCXJPYTMbRgwEsVE53RAePC3yc=)
4: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: GkAqe2IwoclJBo0Rkh5o38j0ThyTZNT1Bw1WKgCza0g=)
5: LdznHUG78Bp9I2Dc43gteEDaBDQ.roa (hash: +dMfTpGhmS4SyoMfOpUT8Rsq5hQCLovibVxni1srWPA=)
6: RNhe93FE6qEUnmI7KhC9QCPUKRE.roa (hash: +sF8WWUCiojfxzR+V4lEJDjHf4WmTy3H3whX2T288mI=)
7: ppWofpQW50E3NHiSmyWgHR4ILv8.roa (hash: jJuUGZv8Uf/IpTklcwXKZKYqGPYZrZ2MeGb3oJWtKa4=)
8: rpJcxi0ezsz1auru1a5EKwFCe6U.roa (hash: xVRYtB7vqri8W1Qa+Q3R/0ZiBHYX/xC5bFNeI81rOlw=)
9: sPNr1HqSOW9gPQD2njRcNYsq_nU.roa (hash: Rxx1CbY9JZ6FmKclFr3hxanK7IPpIKnWMWk/29TEk0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:93:3b:71:6c:09:e4:ac:67:eb:2f:24:ca:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Mar 1 15:01:53 2026 GMT
Not After : Mar 2 15:01:53 2026 GMT
Subject: CN=3dbc02079f4a1560489912a6ad20596f96eccb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:83:cc:f4:4a:04:dc:21:60:33:e5:1b:ca:
5a:d6:76:09:0d:ce:3b:ce:3e:b4:bc:28:27:b5:b7:
32:eb:53:54:e2:9e:88:2d:96:37:e7:15:7d:79:05:
b0:5e:65:45:39:c4:ae:bf:69:d1:3c:c0:3d:d9:2d:
28:25:7d:87:ed:fd:9a:ff:e3:b2:56:de:42:de:85:
08:3f:34:cb:23:c6:e1:d9:f1:42:62:dd:de:41:91:
03:bb:69:d4:2b:cb:5b:ff:cd:d6:30:61:e3:70:f5:
00:2f:7f:b1:fd:25:3f:5f:10:5a:96:2c:1a:bf:e9:
8e:c9:7e:cd:3f:5a:41:81:a2:a4:cb:bd:05:36:bb:
f1:1c:fa:f9:0d:e9:ea:3f:cd:cc:9f:8b:7d:a5:22:
14:b2:28:0c:31:24:7a:de:e8:c1:79:7a:1b:14:90:
9e:01:03:0d:47:56:71:2b:dc:d2:af:f4:52:7a:86:
6a:29:a3:eb:13:5f:f5:03:5f:ee:5e:8a:f0:20:6b:
b0:57:06:65:95:04:33:e5:8e:dc:7e:73:ef:c2:34:
3f:f4:ea:a5:d2:86:32:e3:8a:c3:58:fa:f0:98:de:
0e:b0:8c:67:9a:b2:52:09:e8:e6:b2:dc:39:a2:e4:
2d:0d:17:ad:2e:46:b4:3c:8e:55:32:b4:35:b9:bf:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BC:02:07:9F:4A:15:60:48:99:12:A6:AD:20:59:6F:96:EC:CB:79
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:17:15:56:34:c3:cb:13:85:39:b2:21:72:a3:a8:5a:7f:f0:
a2:30:57:ca:dc:66:6d:30:09:4b:fb:fd:b2:d5:39:29:c7:32:
d1:ff:c2:b8:2f:b5:73:ae:17:e4:22:ee:35:79:36:44:5e:20:
6c:86:2b:5a:c6:b2:dd:7a:d2:b3:12:e8:00:e9:cb:79:04:a0:
17:6e:b8:b5:17:a8:b3:4c:e7:14:c1:ea:ae:fc:e7:a4:cd:96:
69:b9:b9:db:0e:f7:16:35:2e:77:9d:e7:fd:4d:d0:94:e9:fc:
e7:bf:e4:fa:cd:85:44:e2:02:dc:f0:ab:ea:a3:c9:6c:04:9f:
62:19:c5:82:3b:c6:f5:2f:b6:2e:54:74:f4:67:e2:b0:39:93:
00:c2:47:ff:51:a0:b9:1a:bb:9f:6f:09:8c:a7:20:f3:28:a7:
e5:66:f4:6f:f6:10:82:ef:1b:ca:86:ce:60:1f:86:5d:1b:9a:
bd:7e:69:27:a3:c1:2d:db:8d:7b:98:9e:08:dd:e7:e7:75:b4:
17:b1:78:17:06:d7:19:c5:4c:8a:b9:66:b4:77:1e:27:ca:8e:
b3:3b:6f:3e:2d:ce:5a:8a:df:93:a3:a4:fa:44:d8:41:72:86:
72:b7:f2:9f:e2:bb:35:48:d5:c4:18:c5:6d:ba:8d:60:f6:96:
e0:fa:88:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp65M7cWwJ5Kxn6y8kyk1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj
ZDVhYWUwHhcNMjYwMzAxMTUwMTUzWhcNMjYwMzAyMTUwMTUzWjAzMTEwLwYDVQQD
EygzZGJjMDIwNzlmNGExNTYwNDg5OTEyYTZhZDIwNTk2Zjk2ZWNjYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqaDzPRKBNwhYDPlG8pa1nYJDc47
zj60vCgntbcy61NU4p6ILZY35xV9eQWwXmVFOcSuv2nRPMA92S0oJX2H7f2a/+Oy
Vt5C3oUIPzTLI8bh2fFCYt3eQZEDu2nUK8tb/83WMGHjcPUAL3+x/SU/XxBaliwa
v+mOyX7NP1pBgaKky70FNrvxHPr5DenqP83Mn4t9pSIUsigMMSR63ujBeXobFJCe
AQMNR1ZxK9zSr/RSeoZqKaPrE1/1A1/uXorwIGuwVwZllQQz5Y7cfnPvwjQ/9Oql
0oYy44rDWPrwmN4OsIxnmrJSCejmstw5ouQtDRetLka0PI5VMrQ1ub/k4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD28AgefShVgSJkSpq0gWW+W7Mt5MB8GA1UdIwQY
MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRcVVjTD
yxOFObIhcqOoWn/wojBXytxmbTAJS/v9stU5Kccy0f/CuC+1c64X5CLuNXk2RF4g
bIYrWsay3XrSsxLoAOnLeQSgF264tReos0znFMHqrvznpM2Wabm52w73FjUud53n
/U3QlOn857/k+s2FROIC3PCr6qPJbASfYhnFgjvG9S+2LlR09GfisDmTAMJH/1Gg
uRq7n28JjKcg8yin5Wb0b/YQgu8byobOYB+GXRuavX5pJ6PBLduNe5ieCN3n53W0
F7F4FwbXGcVMirlmtHceJ8qOsztvPi3OWorfk6Ok+kTYQXKGcrfyn+K7NUjVxBjF
bbqNYPaW4PqImw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:55 2026 by rpki-client