Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: wTrumr6nZprzQjU8n4CgROWJ7UA85GiontTtjyUaNdY=
Subject key identifier: 4A:9A:4C:AC:83:78:A0:E8:D2:97:92:68:7E:6B:89:1D:69:BA:44:6A
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 019CADFE982F8732FD8727E6595DB2017101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 10:01:09 +0000
Manifest this update: Mon 02 Mar 2026 10:01:09 +0000
Manifest next update: Tue 03 Mar 2026 10:01:09 +0000
Files and hashes: 1: SheiKMejj2UlfePnEJK4YM6UYGQ.roa (hash: Ll9jhdHvmhGlynW15LRcU3rlqzasSbGuWZW11z3vQs0=)
2: auDg02aDw-Ng4UMnzRMAZPV_78A.roa (hash: A2MCkRQZ/VKnTqKHBJZ1hnIKYJGRR8Cd5N45/0b9lic=)
3: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: j+qNy0x6EZ4xuJtmNTFDQ9ibddslZCCxNqLztakJb1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:98:2f:87:32:fd:87:27:e6:59:5d:b2:01:71:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Mar 2 10:01:09 2026 GMT
Not After : Mar 3 10:01:09 2026 GMT
Subject: CN=4a9a4cac8378a0e8d29792687e6b891d69ba446a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:86:46:59:1d:b2:5e:4f:6c:b2:97:e1:33:
a6:0d:cb:8c:8c:b8:0f:01:38:f0:d8:88:e2:f8:69:
42:8c:a6:a2:61:e0:95:6d:b3:8c:28:99:41:73:bf:
39:83:b9:3c:67:1e:e5:40:f5:89:4e:45:90:f0:06:
9f:89:91:fd:90:83:b5:1d:2f:01:a4:94:4f:d1:a0:
40:48:52:a9:03:dc:2b:11:25:1d:5c:98:41:8f:02:
7f:64:c9:7c:03:50:7c:28:41:ec:4f:19:4c:e9:5c:
4c:2f:b0:bd:b3:2b:45:02:5a:c4:6a:86:d7:7f:e5:
f4:d3:bd:3e:a9:6d:85:8b:0b:72:ae:a0:80:de:06:
d9:8e:29:ab:ac:f7:3f:49:dd:2f:44:91:a7:79:2a:
48:b9:bb:4a:c8:c4:5a:41:40:97:8d:9d:cf:7c:a1:
d6:4a:bc:f4:aa:28:45:d5:da:aa:c9:b4:d1:b7:66:
c0:1b:0c:8b:64:eb:e6:86:2d:bf:5b:6b:91:57:86:
b4:aa:83:c4:48:2e:db:b1:0a:f8:50:80:f5:e4:e3:
d2:e4:88:dc:6b:d2:04:55:fb:8b:17:92:ac:4a:84:
3a:2e:b7:29:2a:d3:c8:aa:3e:ea:bb:ff:54:76:43:
24:56:97:e6:c9:8f:e8:4d:79:5f:77:17:05:81:24:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:4C:AC:83:78:A0:E8:D2:97:92:68:7E:6B:89:1D:69:BA:44:6A
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:90:b3:e4:56:2f:c0:b0:d5:89:ff:cb:12:0b:df:24:5a:58:
c6:4d:a5:7a:dc:e6:26:b5:e5:10:aa:5c:21:24:8c:42:e3:f6:
f9:ee:a9:b0:37:b7:d0:8e:46:e5:51:10:5f:e0:88:ae:fe:66:
7f:31:a1:6b:5f:bb:52:0c:f4:96:e1:71:9d:12:dd:82:f2:3c:
3e:a1:c5:49:76:10:47:14:e5:ae:dc:ae:29:bc:08:8c:a1:bf:
ac:32:64:19:ee:82:c8:f1:29:7e:80:af:16:3b:9f:c8:30:ff:
32:e8:e2:2c:50:82:1e:2c:b7:f5:d7:7e:4a:4b:f2:2b:de:6e:
87:54:4f:89:d7:9e:5b:b7:4a:e9:3e:4a:b9:f2:9a:b4:92:ed:
99:00:99:1c:d8:c9:03:34:56:87:c4:e2:6a:9a:f6:98:45:f9:
ed:71:02:ab:dd:4b:3b:c5:9c:c8:4f:2c:08:2b:a0:71:f6:46:
42:5d:4e:98:48:db:1c:3e:87:ec:36:c0:14:36:fc:53:12:28:
8a:4a:b6:2a:6c:b0:6e:23:b7:b4:7f:bf:fe:08:96:6d:04:90:
97:da:8b:ad:c4:d7:a9:56:45:e4:d8:79:35:76:af:d1:d1:0e:
e6:c8:fd:e8:66:e6:64:6a:54:88:63:98:3b:36:df:08:85:a2:
0d:c7:7e:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/pgvhzL9hyfmWV2yAXEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMTY2MThiNzFmZmM4MGUxYzNmNDFlZDBkZmM4OWFiNWU5
NjNmZDIwHhcNMjYwMzAyMTAwMTA5WhcNMjYwMzAzMTAwMTA5WjAzMTEwLwYDVQQD
Eyg0YTlhNGNhYzgzNzhhMGU4ZDI5NzkyNjg3ZTZiODkxZDY5YmE0NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjquGRlkdsl5PbLKX4TOmDcuMjLgP
ATjw2Iji+GlCjKaiYeCVbbOMKJlBc785g7k8Zx7lQPWJTkWQ8AafiZH9kIO1HS8B
pJRP0aBASFKpA9wrESUdXJhBjwJ/ZMl8A1B8KEHsTxlM6VxML7C9sytFAlrEaobX
f+X0070+qW2FiwtyrqCA3gbZjimrrPc/Sd0vRJGneSpIubtKyMRaQUCXjZ3PfKHW
Srz0qihF1dqqybTRt2bAGwyLZOvmhi2/W2uRV4a0qoPESC7bsQr4UID15OPS5Ijc
a9IEVfuLF5KsSoQ6LrcpKtPIqj7qu/9UdkMkVpfmyY/oTXlfdxcFgSQvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqaTKyDeKDo0peSaH5riR1pukRqMB8GA1UdIwQY
MBaAFIoWYYtx/8gOHD9B7Q38iatelj/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUt
MjkxYWFlZGQ1OGNjLzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81NWNmNzctNjM5NC00ODEyLTlmYjUtMjkxYWFlZGQ1OGNj
LzEvaWhaaGkzSF95QTRjUDBIdERmeUpxMTZXUDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApCz5FYv
wLDVif/LEgvfJFpYxk2letzmJrXlEKpcISSMQuP2+e6psDe30I5G5VEQX+CIrv5m
fzGha1+7Ugz0luFxnRLdgvI8PqHFSXYQRxTlrtyuKbwIjKG/rDJkGe6CyPEpfoCv
FjufyDD/MujiLFCCHiy39dd+SkvyK95uh1RPideeW7dK6T5KufKatJLtmQCZHNjJ
AzRWh8Tiapr2mEX57XECq91LO8WcyE8sCCugcfZGQl1OmEjbHD6H7DbAFDb8UxIo
ikq2KmywbiO3tH+//giWbQSQl9qLrcTXqVZF5Nh5NXav0dEO5sj96GbmZGpUiGOY
OzbfCIWiDcd+Zw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:39 2026 by rpki-client