Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: DD+z5Kw8jRzBo1EZYWLjqtmNUNzVRPkLy7A/U3J5KOQ=
Subject key identifier: C4:EE:F1:BD:7F:A4:94:FA:1E:E8:F8:50:51:31:D0:13:DC:AF:F2:09
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 019CAD2291823783FEED9CFD5856C901308C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 06:00:49 +0000
Manifest this update: Mon 02 Mar 2026 06:00:49 +0000
Manifest next update: Tue 03 Mar 2026 06:00:49 +0000
Files and hashes: 1: VzL5RLnlQJ3wSeF6IZXD0hLHbzI.roa (hash: rYHDP0eMxniB9OvjMw+m6Idpm0cWRBfVpSJ7IC660D8=)
2: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: c3Eb/oEOpn3AxNyXaZ9iZrRgJpiZ3M+/wqzFfavYsnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:91:82:37:83:fe:ed:9c:fd:58:56:c9:01:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Mar 2 06:00:49 2026 GMT
Not After : Mar 3 06:00:49 2026 GMT
Subject: CN=c4eef1bd7fa494fa1ee8f8505131d013dcaff209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:b2:f2:9c:32:88:bc:2b:aa:ee:82:b6:9a:
0c:ac:86:1e:de:b6:a6:62:16:3e:25:ab:58:14:58:
7d:aa:5a:24:3f:08:e0:24:27:d3:07:37:cc:dc:b1:
2b:43:72:d1:f5:22:d2:1a:e3:66:fa:51:b9:52:6a:
4a:6c:4b:0e:c4:8a:1c:0e:c7:43:85:e1:93:ef:89:
68:cb:9b:33:d3:25:74:85:a7:63:08:63:d0:30:2c:
44:8c:3e:44:ab:03:86:06:e0:38:7b:2c:08:e4:b8:
9f:9e:24:95:d6:96:b4:a5:c3:c6:c5:4e:1d:f2:71:
93:8a:ea:77:83:52:ab:9f:b0:49:68:a2:14:67:b3:
8e:61:21:cc:f2:ca:51:43:bd:be:ab:7e:00:5e:0a:
34:cd:16:d1:e1:84:ac:7c:5d:5a:ee:6a:9b:c6:76:
3f:16:03:cb:f5:3f:3b:26:26:a5:26:bf:b6:fc:29:
13:10:1c:44:0c:8f:c6:6c:ce:28:cf:5c:72:58:da:
a3:4c:50:85:1a:90:b7:ed:2c:1b:f3:bf:a2:80:54:
56:69:b5:a7:5f:8e:d8:ff:27:e1:c3:b2:4e:85:ae:
14:62:20:fc:f0:d3:8c:2d:de:89:4e:30:87:37:ea:
dc:3c:05:a9:e5:ea:b2:5d:82:da:00:45:1c:ff:8e:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:F1:BD:7F:A4:94:FA:1E:E8:F8:50:51:31:D0:13:DC:AF:F2:09
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b7:f2:0a:e4:6a:63:75:29:5b:31:43:87:a2:f8:c9:fa:63:
e1:0c:3e:ce:cf:45:ab:6a:fb:17:36:59:50:78:5f:61:d7:1c:
c5:98:df:34:9a:e9:6f:e5:36:b7:af:e9:db:cc:db:e2:3a:01:
b3:ea:81:ad:a3:7a:50:10:f4:94:9f:b4:6b:fe:e6:ca:f2:a7:
cb:48:2d:ed:bb:26:e4:8d:1b:98:9b:6f:7b:7a:e4:ad:dc:c0:
d9:6f:09:3b:3d:c9:c4:ac:83:7c:d6:3f:89:d5:8c:60:63:9b:
74:52:09:42:e0:10:ac:09:cd:41:1f:6f:ae:90:15:65:a8:96:
97:b5:18:f4:f5:d0:ee:95:8b:bc:5e:57:71:27:da:66:bc:92:
fb:fc:9a:46:91:62:fa:44:52:e0:bc:8b:92:10:44:e8:45:d1:
4a:0b:10:a1:c5:c7:9c:84:26:00:72:71:30:d6:9d:d9:fd:58:
5b:4a:31:c5:44:5c:d7:c9:0a:9c:07:b6:ce:f2:fe:2a:18:46:
f6:16:13:ab:d1:dd:0f:24:57:67:e9:d7:22:98:96:aa:99:d6:
83:29:2d:13:fe:a0:db:61:10:81:fc:63:08:20:8a:cd:bc:7d:
74:be:17:ff:df:85:b5:3a:72:9e:18:8d:d6:60:0e:8c:6b:4f:
45:60:0f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIpGCN4P+7Zz9WFbJATCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NTM2NGRkOGZmNzMwYTkwOGIwOWI1Zjk5MTNjMTUzZmMx
NmFhM2MwHhcNMjYwMzAyMDYwMDQ5WhcNMjYwMzAzMDYwMDQ5WjAzMTEwLwYDVQQD
EyhjNGVlZjFiZDdmYTQ5NGZhMWVlOGY4NTA1MTMxZDAxM2RjYWZmMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12y8pwyiLwrqu6CtpoMrIYe3ram
YhY+JatYFFh9qlokPwjgJCfTBzfM3LErQ3LR9SLSGuNm+lG5UmpKbEsOxIocDsdD
heGT74loy5sz0yV0hadjCGPQMCxEjD5EqwOGBuA4eywI5LifniSV1pa0pcPGxU4d
8nGTiup3g1Krn7BJaKIUZ7OOYSHM8spRQ72+q34AXgo0zRbR4YSsfF1a7mqbxnY/
FgPL9T87JialJr+2/CkTEBxEDI/GbM4oz1xyWNqjTFCFGpC37Swb87+igFRWabWn
X47Y/yfhw7JOha4UYiD88NOMLd6JTjCHN+rcPAWp5eqyXYLaAEUc/451uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTu8b1/pJT6Huj4UFEx0BPcr/IJMB8GA1UdIwQY
MBaAFIlTZN2P9zCpCLCbX5kTwVP8Fqo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMt
Mjk0YjFhYTE0ODY2LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85MjJiY2QtZjFhZC00ZDYzLTgyNDMtMjk0YjFhYTE0ODY2
LzEvaVZOazNZXzNNS2tJc0p0Zm1SUEJVX3dXcWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7fyCuRq
Y3UpWzFDh6L4yfpj4Qw+zs9Fq2r7FzZZUHhfYdccxZjfNJrpb+U2t6/p28zb4joB
s+qBraN6UBD0lJ+0a/7myvKny0gt7bsm5I0bmJtve3rkrdzA2W8JOz3JxKyDfNY/
idWMYGObdFIJQuAQrAnNQR9vrpAVZaiWl7UY9PXQ7pWLvF5XcSfaZryS+/yaRpFi
+kRS4LyLkhBE6EXRSgsQocXHnIQmAHJxMNad2f1YW0oxxURc18kKnAe2zvL+KhhG
9hYTq9HdDyRXZ+nXIpiWqpnWgyktE/6g22EQgfxjCCCKzbx9dL4X/9+FtTpynhiN
1mAOjGtPRWAPMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:50 2026 by rpki-client