Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: JKifj6OSnQMc+Md+SqtFF3ZSrS7TxhPzRWsO+Avvi/g=
Subject key identifier: FA:55:60:15:5E:0C:80:31:D7:BB:4D:4E:B5:E8:79:E8:59:61:09:12
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 019CA9B3CD54BC8F04B6176C2604CBEF82C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 08E7
Signing time: Sun 01 Mar 2026 14:00:58 +0000
Manifest this update: Sun 01 Mar 2026 14:00:58 +0000
Manifest next update: Mon 02 Mar 2026 14:00:58 +0000
Files and hashes: 1: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (hash: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM=)
2: dnN8Qbgzlqa5jVekVWfdeYwMnr0.roa (hash: 2SBvdtsFiLZ+3pTsa8tg6rA3awhSjVKAsmyNnLuEU6w=)
3: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: vV5KoqaT6XNUp3m0BvBF24HYWTYgUo9gemYhR2pbJj8=)
4: qEOd0JSRITKmwn_MrAq43anHLe8.roa (hash: Mq7M3zfHqSv4p6zFUAXdeS8k6DJ4Psbdqulheqnt9F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:cd:54:bc:8f:04:b6:17:6c:26:04:cb:ef:82:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Mar 1 14:00:58 2026 GMT
Not After : Mar 2 14:00:58 2026 GMT
Subject: CN=fa5560155e0c8031d7bb4d4eb5e879e859610912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:b6:ce:f5:bf:f4:17:8a:5e:5d:32:c5:06:
de:48:2d:c2:18:81:f3:3b:e8:41:e2:55:f7:0a:b7:
c8:59:80:17:a4:f3:a8:5b:74:1a:fe:f9:90:3a:73:
84:8d:ca:5b:df:f1:1b:7e:b4:2d:36:fa:f2:e9:4f:
00:2d:b5:66:b7:bb:01:55:c9:f1:c3:5d:45:73:de:
1c:52:ce:10:ee:ba:ed:a7:be:51:e9:34:5d:06:30:
2c:02:98:21:5c:3c:5e:a2:68:f0:35:97:6c:6b:35:
18:53:18:14:f3:54:6c:36:44:7f:f0:5d:3b:4d:3c:
7e:8a:8f:a8:e9:7f:9a:8c:03:9b:56:71:40:23:b1:
ff:69:16:60:33:81:3a:c3:59:7f:20:be:7c:5b:4c:
e6:ae:71:76:a0:61:7b:44:95:94:6f:6b:0c:ab:d3:
2d:2f:9d:80:52:15:ee:0c:b3:fc:b7:50:1b:d5:96:
b7:a4:55:ac:c7:09:e6:32:65:c3:21:1f:00:2f:12:
ea:ce:3e:7f:63:2b:2b:d7:40:da:3c:81:43:a3:9a:
07:98:7d:d6:4d:6f:4b:84:9a:b9:cd:91:a9:16:7b:
c3:b3:4a:a4:3c:11:04:91:c3:c0:59:92:5f:3f:9c:
fe:e2:58:86:0b:4e:c5:63:7f:07:7b:4d:07:7f:e1:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:60:15:5E:0C:80:31:D7:BB:4D:4E:B5:E8:79:E8:59:61:09:12
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:31:eb:af:b1:de:43:25:94:9a:b9:2a:27:d8:d1:92:03:22:
7f:27:57:5e:69:1c:ba:e4:50:bf:1a:b0:ea:c5:87:e7:de:81:
14:b9:dc:20:c6:25:00:48:24:91:06:f5:fc:a2:ff:a7:8d:af:
3e:8f:59:c7:1d:00:bd:93:89:bd:ae:51:a4:4c:8c:b7:b4:44:
25:5b:e3:34:ec:d5:79:6b:85:c4:b4:81:17:05:bc:85:3b:c6:
48:47:c0:e0:8d:d7:00:48:ca:9e:d0:71:0e:cd:d0:9d:74:ee:
da:b1:04:db:42:77:72:2b:34:6a:2b:02:68:54:f3:53:da:0d:
95:4e:4c:96:5a:3b:3c:d4:15:53:08:5d:3a:9c:1f:31:8b:a0:
80:c5:37:d1:39:d5:ab:b1:95:3a:bd:e4:2e:83:6a:3c:41:7e:
68:5d:62:00:04:57:50:9b:02:c4:cf:41:a7:3b:78:1d:44:82:
7f:40:6e:93:51:a3:99:65:24:7d:c7:de:c9:03:a2:06:bf:08:
ba:f0:be:c1:cb:24:7f:8e:c0:ea:32:1e:e0:0d:82:10:9f:99:
0b:f3:6c:f7:b5:e7:aa:03:76:97:ab:16:39:80:2b:c6:fe:d8:
89:f7:3f:f8:af:64:4d:65:92:2c:75:30:0e:ac:7d:db:db:ec:
67:27:24:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps81UvI8EthdsJgTL74LHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi
ZGQwMDYwHhcNMjYwMzAxMTQwMDU4WhcNMjYwMzAyMTQwMDU4WjAzMTEwLwYDVQQD
EyhmYTU1NjAxNTVlMGM4MDMxZDdiYjRkNGViNWU4NzllODU5NjEwOTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqry2zvW/9BeKXl0yxQbeSC3CGIHz
O+hB4lX3CrfIWYAXpPOoW3Qa/vmQOnOEjcpb3/EbfrQtNvry6U8ALbVmt7sBVcnx
w11Fc94cUs4Q7rrtp75R6TRdBjAsApghXDxeomjwNZdsazUYUxgU81RsNkR/8F07
TTx+io+o6X+ajAObVnFAI7H/aRZgM4E6w1l/IL58W0zmrnF2oGF7RJWUb2sMq9Mt
L52AUhXuDLP8t1Ab1Za3pFWsxwnmMmXDIR8ALxLqzj5/Yysr10DaPIFDo5oHmH3W
TW9LhJq5zZGpFnvDs0qkPBEEkcPAWZJfP5z+4liGC07FY38He00Hf+GNYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpVYBVeDIAx17tNTrXoeehZYQkSMB8GA1UdIwQY
MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt
Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj
LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjHrr7He
QyWUmrkqJ9jRkgMifydXXmkcuuRQvxqw6sWH596BFLncIMYlAEgkkQb1/KL/p42v
Po9Zxx0AvZOJva5RpEyMt7REJVvjNOzVeWuFxLSBFwW8hTvGSEfA4I3XAEjKntBx
Ds3QnXTu2rEE20J3cis0aisCaFTzU9oNlU5Mllo7PNQVUwhdOpwfMYuggMU30TnV
q7GVOr3kLoNqPEF+aF1iAARXUJsCxM9Bpzt4HUSCf0Buk1GjmWUkfcfeyQOiBr8I
uvC+wcskf47A6jIe4A2CEJ+ZC/Ns97XnqgN2l6sWOYArxv7Yifc/+K9kTWWSLHUw
Dqx929vsZyckmg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:32 2026 by rpki-client