Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: GAgrR53ImaCGxjiw/yvON82tWCeCl6qLP8Bkvg/atsE=
Subject key identifier: 83:DC:12:0F:D4:4E:DF:06:CF:64:4D:8C:F1:AC:2F:DE:57:6B:4A:2D
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 019CAA592E6F4766B717AD3BC8150FAB51AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 0FFB
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: ljVlu8jQczDJSfvg2vPAbNV+vPrx1CignNtN+U49Oyw=)
2: swlvSyg5P2tG5hf6QszpyWKMn_k.roa (hash: bb3L+IeAkS1sZt2NMi7C0qunZyUMt8jC260rx3ny2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2e:6f:47:66:b7:17:ad:3b:c8:15:0f:ab:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=83dc120fd44edf06cf644d8cf1ac2fde576b4a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:7c:f1:40:c6:1d:7e:26:52:0e:a3:ed:4c:
70:3f:62:a5:59:36:43:45:b8:d7:91:62:a3:5b:1a:
a8:69:7a:ba:5f:a6:68:25:12:a4:3f:78:ab:4c:97:
72:91:a6:6e:ac:4e:1b:15:e1:df:4c:49:d0:8a:54:
a1:34:e3:eb:8d:8a:55:d1:3e:a5:75:ff:b6:92:93:
ab:45:80:d9:32:1a:9c:42:5d:fe:3a:f8:aa:d0:bf:
92:f9:ea:b7:85:2b:5d:2a:89:5c:af:3f:20:6b:8b:
c7:9c:72:c6:0a:8a:40:e2:8e:0c:19:e9:aa:55:3d:
7b:f7:e2:3c:03:93:73:dd:47:58:3e:90:ae:36:24:
a5:6d:b2:61:a8:0a:a0:90:e5:ee:f6:16:d5:62:8a:
0f:75:76:e0:76:16:1a:b0:9b:50:71:fd:c9:51:e6:
14:ba:9a:89:64:b7:86:f0:1e:fb:f5:8e:9f:2c:7d:
1b:27:fe:12:15:d8:9a:76:de:a1:34:2f:77:10:da:
4e:aa:c4:45:ac:6b:b8:fb:d6:aa:14:7c:ff:49:07:
b7:70:be:6d:31:37:f1:7b:d7:23:4f:fa:9c:1d:80:
0e:d6:de:c8:33:fe:ab:7d:3c:11:bf:2b:17:05:ee:
4b:94:58:48:8f:56:3f:89:cd:82:e6:c5:1a:ae:da:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:12:0F:D4:4E:DF:06:CF:64:4D:8C:F1:AC:2F:DE:57:6B:4A:2D
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c0:c8:d6:ca:a7:a5:9c:f8:ea:4e:9e:6d:e6:af:c1:e8:25:
89:98:e3:2f:42:11:d1:44:23:6e:69:80:a5:55:92:e2:5a:6d:
e3:85:4a:b0:10:66:b2:61:c9:c4:58:6e:30:a6:95:ba:c1:7a:
2d:b1:32:c3:55:50:0f:1a:91:34:ab:c1:92:e7:92:82:7e:2b:
2b:56:4e:12:2d:32:9c:07:3c:9d:25:37:ff:bd:fa:ff:f0:92:
00:86:98:76:17:d7:70:91:f3:0f:36:91:0a:af:c2:85:ef:56:
e6:d9:1e:86:89:8b:3f:a1:57:7b:f0:b4:5d:da:47:9b:23:44:
6b:91:01:78:c6:13:42:72:62:e7:d0:51:a3:af:e9:dc:b6:de:
7d:18:1c:63:db:93:18:4c:a3:23:ad:a3:1e:fc:bb:57:3c:8b:
85:cb:02:76:99:1f:c4:ff:d3:94:c5:e8:84:d7:45:9c:b8:32:
8f:3b:56:34:93:e1:f3:11:63:83:92:5b:20:2a:44:3c:21:66:
96:35:ba:11:e1:0b:e8:c9:19:0a:c1:7a:61:94:9d:bb:89:42:
17:d0:9c:64:86:9e:38:20:02:52:43:f9:1e:de:b9:a6:81:0a:
55:40:ac:0e:53:5e:9e:29:77:35:af:c0:a4:a0:7f:8d:3b:c5:
b0:94:59:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWS5vR2a3F607yBUPq1GrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWUyMjBiNDc2OGRhNmUyNzZlNmE2MmVkZDY3NDZkOGZj
M2MxZmIwHhcNMjYwMzAxMTcwMTM3WhcNMjYwMzAyMTcwMTM3WjAzMTEwLwYDVQQD
Eyg4M2RjMTIwZmQ0NGVkZjA2Y2Y2NDRkOGNmMWFjMmZkZTU3NmI0YTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY588UDGHX4mUg6j7UxwP2KlWTZD
RbjXkWKjWxqoaXq6X6ZoJRKkP3irTJdykaZurE4bFeHfTEnQilShNOPrjYpV0T6l
df+2kpOrRYDZMhqcQl3+Oviq0L+S+eq3hStdKolcrz8ga4vHnHLGCopA4o4MGemq
VT179+I8A5Nz3UdYPpCuNiSlbbJhqAqgkOXu9hbVYooPdXbgdhYasJtQcf3JUeYU
upqJZLeG8B779Y6fLH0bJ/4SFdiadt6hNC93ENpOqsRFrGu4+9aqFHz/SQe3cL5t
MTfxe9cjT/qcHYAO1t7IM/6rfTwRvysXBe5LlFhIj1Y/ic2C5sUartq8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPcEg/UTt8Gz2RNjPGsL95Xa0otMB8GA1UdIwQY
MBaAFImuIgtHaNpuJ25qYu3WdG2Pw8H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzct
NzQxZmE0ZTEwZTM2LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYjhhNDAtNzYxMC00ZTRkLTliMzctNzQxZmE0ZTEwZTM2
LzEvaWE0aUMwZG8ybTRuYm1waTdkWjBiWV9Ed2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8DI1sqn
pZz46k6ebeavwegliZjjL0IR0UQjbmmApVWS4lpt44VKsBBmsmHJxFhuMKaVusF6
LbEyw1VQDxqRNKvBkueSgn4rK1ZOEi0ynAc8nSU3/736//CSAIaYdhfXcJHzDzaR
Cq/Che9W5tkehomLP6FXe/C0XdpHmyNEa5EBeMYTQnJi59BRo6/p3LbefRgcY9uT
GEyjI62jHvy7VzyLhcsCdpkfxP/TlMXohNdFnLgyjztWNJPh8xFjg5JbICpEPCFm
ljW6EeEL6MkZCsF6YZSdu4lCF9CcZIaeOCACUkP5Ht65poEKVUCsDlNenil3Na/A
pKB/jTvFsJRZOw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:21:25 2026 by rpki-client