Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: UVH6mBGlrip/iSE62ihfmGi0d7VAOgtm08nEyPi21Rc=
Subject key identifier: AF:50:12:4E:8B:BC:23:1B:81:A2:57:8D:DD:2E:84:DC:C7:C6:D1:AE
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019CAAC66328DD3EAA625A4A3D4CE033288C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 1612
Signing time: Sun 01 Mar 2026 19:00:54 +0000
Manifest this update: Sun 01 Mar 2026 19:00:54 +0000
Manifest next update: Mon 02 Mar 2026 19:00:54 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: aVs_pTCF35izq7eFYVQj7GDKKKg.roa (hash: HUtPfJfh73XSHYvTDAm1hqZnRW91m33+bqE8cdLnnnE=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: D9D4m3R6j7X2+ADdTap/QEXIrMP3UCfMe5fOP3C9i+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:63:28:dd:3e:aa:62:5a:4a:3d:4c:e0:33:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Mar 1 19:00:54 2026 GMT
Not After : Mar 2 19:00:54 2026 GMT
Subject: CN=af50124e8bbc231b81a2578ddd2e84dcc7c6d1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:4c:d4:b3:17:02:1e:41:42:ed:48:02:d5:
cd:4f:60:5b:d6:9e:be:9b:0f:56:1c:27:83:ef:e9:
52:b2:82:2f:d3:4c:c6:78:76:b9:e5:75:15:10:93:
2c:be:54:39:68:21:51:e3:62:08:e7:85:67:73:c5:
ee:82:8c:a4:92:81:88:56:1d:d1:0d:3b:3b:2f:9f:
30:b5:5c:f9:a5:5a:ac:bf:b0:4e:e3:40:67:12:ee:
d8:85:65:67:b8:99:6e:39:3e:8c:d3:7d:fd:a7:20:
7a:56:6c:98:c5:2c:fb:ee:34:f8:9c:59:83:c4:8e:
21:78:b6:60:82:f2:f8:f8:3a:a8:e6:3a:98:a7:be:
17:9b:a6:10:de:db:be:4e:a4:59:a1:35:db:32:32:
53:b0:3d:6f:83:55:cb:00:cd:f3:e9:ec:ce:32:d8:
23:75:bb:f7:98:2d:7f:5c:1c:c1:a8:0f:ff:1c:bd:
00:54:75:c6:33:51:34:49:e7:32:7f:cd:ce:81:29:
c8:ee:3f:4d:f4:b3:55:85:bc:16:65:7f:f4:8c:2f:
0a:64:88:ad:a1:0c:9b:94:5a:14:ce:ee:f8:9e:f1:
a2:2f:83:5f:9f:a2:eb:f4:17:bd:3e:2f:38:ac:af:
39:0a:3b:d8:00:e0:d6:0d:0c:95:06:d8:32:8f:92:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:50:12:4E:8B:BC:23:1B:81:A2:57:8D:DD:2E:84:DC:C7:C6:D1:AE
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:66:0b:ab:af:4d:7b:c9:4d:62:56:ca:0b:80:8c:93:c8:72:
46:a6:c8:2b:c9:47:ac:20:56:e8:69:a2:80:28:b5:30:15:39:
9b:de:c7:aa:33:ed:31:0f:ff:dd:67:03:26:50:4b:cc:7c:b4:
18:14:a3:b9:17:02:eb:bb:f5:fc:85:1e:4b:94:3a:ab:35:d3:
1b:7e:5e:34:3a:b8:ce:94:f6:4b:fc:a7:ae:73:b9:e0:70:fa:
21:2d:10:34:f0:1a:e7:01:a2:cc:af:3b:49:82:32:d8:04:06:
25:a1:b2:81:00:a7:90:2b:08:7e:da:42:ea:ea:b1:a9:3e:fa:
89:1b:03:f6:6f:b6:5a:bf:71:ce:1e:c4:b0:ac:0c:55:b6:30:
b2:8a:d0:46:50:a1:61:40:48:ed:2e:7a:60:3c:dc:7c:89:53:
ed:00:13:05:9b:f8:89:e2:7e:a3:f3:34:1b:5d:dc:79:da:85:
81:19:38:2f:aa:64:cb:0d:f7:42:48:62:28:03:5b:96:88:d4:
79:23:34:fa:2e:3e:73:af:64:97:a7:40:48:6d:12:a1:dd:87:
5f:3b:ae:9d:b7:4e:de:49:72:cb:d3:53:a3:c4:cf:b3:97:5d:
0a:41:8d:4f:41:45:81:7c:82:11:60:f6:0e:3e:66:ff:b8:f5:
2f:8e:b1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxmMo3T6qYlpKPUzgMyiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjYwMzAxMTkwMDU0WhcNMjYwMzAyMTkwMDU0WjAzMTEwLwYDVQQD
EyhhZjUwMTI0ZThiYmMyMzFiODFhMjU3OGRkZDJlODRkY2M3YzZkMWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3pM1LMXAh5BQu1IAtXNT2Bb1p6+
mw9WHCeD7+lSsoIv00zGeHa55XUVEJMsvlQ5aCFR42II54Vnc8XugoykkoGIVh3R
DTs7L58wtVz5pVqsv7BO40BnEu7YhWVnuJluOT6M0339pyB6VmyYxSz77jT4nFmD
xI4heLZggvL4+Dqo5jqYp74Xm6YQ3tu+TqRZoTXbMjJTsD1vg1XLAM3z6ezOMtgj
dbv3mC1/XBzBqA//HL0AVHXGM1E0Secyf83OgSnI7j9N9LNVhbwWZX/0jC8KZIit
oQyblFoUzu74nvGiL4Nfn6Lr9Be9Pi84rK85CjvYAODWDQyVBtgyj5L4CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9QEk6LvCMbgaJXjd0uhNzHxtGuMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWYLq69N
e8lNYlbKC4CMk8hyRqbIK8lHrCBW6GmigCi1MBU5m97HqjPtMQ//3WcDJlBLzHy0
GBSjuRcC67v1/IUeS5Q6qzXTG35eNDq4zpT2S/ynrnO54HD6IS0QNPAa5wGizK87
SYIy2AQGJaGygQCnkCsIftpC6uqxqT76iRsD9m+2Wr9xzh7EsKwMVbYwsorQRlCh
YUBI7S56YDzcfIlT7QATBZv4ieJ+o/M0G13cedqFgRk4L6pkyw33QkhiKANblojU
eSM0+i4+c69kl6dASG0Sod2HXzuunbdO3klyy9NTo8TPs5ddCkGNT0FFgXyCEWD2
Dj5m/7j1L46xOA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:11 2026 by rpki-client