Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: Ld2fNllxfwuIrIptLBX128BzR43oldL0WVmaLSx1W4c=
Subject key identifier: 72:07:39:11:5C:0C:15:C1:29:8E:F7:B3:77:88:3B:72:EF:F1:62:10
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019CADFE40E654C24C9F50298F4FF2D2C86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0380
Signing time: Mon 02 Mar 2026 10:00:46 +0000
Manifest this update: Mon 02 Mar 2026 10:00:46 +0000
Manifest next update: Tue 03 Mar 2026 10:00:46 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: uApyTunLG+yZzKpBpGJ3UvCiDie/awq2nRPhz+mt2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:40:e6:54:c2:4c:9f:50:29:8f:4f:f2:d2:c8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Mar 2 10:00:46 2026 GMT
Not After : Mar 3 10:00:46 2026 GMT
Subject: CN=720739115c0c15c1298ef7b377883b72eff16210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:4f:c1:5e:54:13:ee:3f:d3:b2:9c:34:6e:
9b:20:92:8b:76:fb:1c:5c:bf:d2:37:26:3e:e4:42:
f1:a9:4a:ed:a1:68:18:dd:ef:94:ba:6a:a5:c6:d0:
b8:c6:9b:1e:df:7c:f2:6a:49:97:25:55:62:3e:38:
42:13:28:5e:ea:37:48:59:a9:49:59:f3:aa:39:e9:
c6:39:26:fe:d3:1f:4d:52:f2:91:14:6a:35:2a:91:
5c:d2:a1:f4:dd:9f:75:6f:92:77:99:a1:af:5c:cd:
02:a9:13:dc:d0:df:46:9d:19:79:6e:e5:4d:62:15:
31:19:dc:da:11:c2:7a:0e:ec:63:d1:87:68:87:f9:
a4:e4:67:7b:66:e0:24:cd:04:ee:d1:50:b8:0d:d4:
21:57:64:f9:79:18:d4:c1:3f:c0:93:f8:39:54:d9:
e3:1c:6e:2f:27:6b:ec:82:a3:8f:3e:c3:42:c5:d6:
58:e3:fd:7f:a4:17:51:d4:e2:7d:f7:15:45:08:f2:
96:31:95:52:7b:6e:fe:ef:4e:06:75:c0:8c:e5:91:
9a:8b:6b:f9:67:f6:b1:42:5c:bc:a8:69:57:22:27:
71:fe:15:5b:2d:c4:9f:5a:80:30:77:6f:69:f7:a8:
09:06:fa:33:ea:02:10:b7:92:26:74:61:c4:04:79:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:39:11:5C:0C:15:C1:29:8E:F7:B3:77:88:3B:72:EF:F1:62:10
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:01:aa:4f:12:82:b5:5d:92:20:c3:09:43:44:ef:5b:1e:67:
3a:28:60:73:00:9a:bc:4e:56:64:99:5e:8c:ae:97:fe:5e:e7:
0f:c6:85:ce:7c:5d:8a:ec:94:14:60:65:98:d2:c3:5d:74:7b:
3c:df:f9:1d:36:07:4e:20:92:6d:a2:25:00:3f:01:7b:2b:1e:
c1:b4:cc:ce:35:ff:f4:c1:07:74:3a:0c:28:2d:ed:c4:1b:87:
e8:7a:c0:7d:3d:48:39:ca:ca:b2:8d:fd:b5:ee:34:2a:44:4b:
42:7c:61:41:4b:4d:2c:76:3d:b7:ef:b2:17:4d:92:2c:33:75:
3a:22:14:0b:3b:c6:d4:70:e5:fc:c2:96:96:b4:f6:45:a1:5b:
7a:18:50:e8:1e:23:7c:d2:20:ea:ae:9c:a5:a7:1e:f3:8b:eb:
3d:57:38:33:78:f2:de:13:16:93:27:bf:df:a4:f7:aa:c5:31:
64:a3:6c:3d:ac:64:10:d9:d1:d9:9e:b5:2b:6f:88:70:69:db:
77:fd:03:c8:e8:da:f8:ba:bf:69:58:01:15:08:62:cd:62:23:
09:85:5d:90:3b:7b:a5:de:34:eb:e3:80:0a:2b:9c:c1:99:4a:
e0:7b:d6:65:3b:1b:5a:49:21:cc:85:27:34:f0:fb:90:e9:10:
8b:7c:ce:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/kDmVMJMn1Apj0/y0shsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjYwMzAyMTAwMDQ2WhcNMjYwMzAzMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg3MjA3MzkxMTVjMGMxNWMxMjk4ZWY3YjM3Nzg4M2I3MmVmZjE2MjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t1PwV5UE+4/07KcNG6bIJKLdvsc
XL/SNyY+5ELxqUrtoWgY3e+UumqlxtC4xpse33zyakmXJVViPjhCEyhe6jdIWalJ
WfOqOenGOSb+0x9NUvKRFGo1KpFc0qH03Z91b5J3maGvXM0CqRPc0N9GnRl5buVN
YhUxGdzaEcJ6Duxj0Ydoh/mk5Gd7ZuAkzQTu0VC4DdQhV2T5eRjUwT/Ak/g5VNnj
HG4vJ2vsgqOPPsNCxdZY4/1/pBdR1OJ99xVFCPKWMZVSe27+704GdcCM5ZGai2v5
Z/axQly8qGlXIidx/hVbLcSfWoAwd29p96gJBvoz6gIQt5ImdGHEBHnB5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIHORFcDBXBKY73s3eIO3Lv8WIQMB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgGqTxKC
tV2SIMMJQ0TvWx5nOihgcwCavE5WZJlejK6X/l7nD8aFznxdiuyUFGBlmNLDXXR7
PN/5HTYHTiCSbaIlAD8BeysewbTMzjX/9MEHdDoMKC3txBuH6HrAfT1IOcrKso39
te40KkRLQnxhQUtNLHY9t++yF02SLDN1OiIUCzvG1HDl/MKWlrT2RaFbehhQ6B4j
fNIg6q6cpace84vrPVc4M3jy3hMWkye/36T3qsUxZKNsPaxkENnR2Z61K2+IcGnb
d/0DyOja+Lq/aVgBFQhizWIjCYVdkDt7pd406+OACiucwZlK4HvWZTsbWkkhzIUn
NPD7kOkQi3zOlA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:33 2026 by rpki-client