Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: wqZ5/T5s7OHQ+2DxAPqzLCUV2aGrm18n/CieiFpZdK4=
Subject key identifier: B6:62:C2:90:01:6D:84:8F:E4:75:F6:19:B6:55:82:78:68:6E:2D:CF
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019CAD227364217389A6EC7C721D14E6CAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0DC3
Signing time: Mon 02 Mar 2026 06:00:42 +0000
Manifest this update: Mon 02 Mar 2026 06:00:42 +0000
Manifest next update: Tue 03 Mar 2026 06:00:42 +0000
Files and hashes: 1: 1bz4VaBV4zDNPpHlEQ4nHg2og7c.roa (hash: AW/6Peh9HLcmvxwe2ZPJ0WiX9tfpgRcCEnLYZpk1F4s=)
2: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: BYoPJvchRHXAuAAn1OlRjKBy+QzvNf5u7PlNsx3s4SU=)
3: LxAfqO9DJb5pX4Ib_IiY5pQ6IIs.roa (hash: YzoiNF9QrUDbASLIJfkxXS0XmPF5J0XBaYWRaRu5sbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:73:64:21:73:89:a6:ec:7c:72:1d:14:e6:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Mar 2 06:00:42 2026 GMT
Not After : Mar 3 06:00:42 2026 GMT
Subject: CN=b662c290016d848fe475f619b6558278686e2dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:01:3d:d4:0f:eb:60:39:62:9b:9b:84:80:
02:ef:aa:3b:7b:10:65:64:fb:f5:a9:5e:c8:19:f2:
72:ec:b0:05:16:f7:e6:3b:6c:05:b3:07:39:2f:22:
ce:45:da:a8:e0:e0:57:6a:c1:0b:6c:1d:49:1c:80:
7c:a7:37:3d:07:63:75:37:f2:cf:3e:a8:b3:31:24:
7d:f6:f4:c2:5c:b0:c4:8e:f1:e8:ae:e9:cf:06:05:
02:d6:35:27:11:06:dc:e3:5b:b8:33:72:3d:c9:46:
7c:20:19:f7:d9:45:01:0e:a1:39:a1:0f:3d:16:af:
ae:06:ac:7a:c3:7a:e7:40:c0:0f:f3:e5:53:a0:b8:
4a:2a:1e:3c:86:7f:50:39:87:d0:33:74:69:db:f7:
fd:40:45:04:af:96:40:8c:b6:f3:76:4b:50:6c:81:
8e:6d:50:48:80:a7:56:0f:b7:b8:ed:12:ee:a4:03:
1a:ae:e4:82:10:5d:07:cd:e6:10:86:28:af:13:bd:
8b:74:71:fa:c0:59:39:2c:e5:6a:6c:66:8a:71:e5:
79:df:68:42:62:d0:cc:68:8b:99:7c:e8:84:f0:cf:
81:46:b6:73:54:62:05:38:c4:e2:e0:57:74:59:a3:
c3:6f:41:ba:b7:81:19:07:f2:47:5a:09:9c:0d:77:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:C2:90:01:6D:84:8F:E4:75:F6:19:B6:55:82:78:68:6E:2D:CF
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ac:50:e8:10:ee:6d:ed:30:e2:5f:4b:bc:6a:63:df:cc:e1:
01:14:47:1c:d2:1e:bb:bd:fe:f7:f6:45:e6:4c:d1:f1:8c:92:
89:43:1c:a8:46:4e:37:de:21:93:d5:9a:32:89:67:15:a5:2c:
41:02:e7:3c:09:f1:a6:ee:1f:b4:fd:02:8d:04:4a:ba:49:72:
9e:94:2a:66:40:4b:5f:dc:29:29:4a:f9:90:0a:b4:cf:1c:fc:
3f:06:5e:86:79:60:ac:16:51:b1:84:13:2b:db:f6:f6:3e:f5:
21:f4:96:50:dc:dc:d6:a8:8a:c6:f9:12:0f:60:c2:88:04:d5:
ee:3c:db:6d:37:47:37:3d:70:24:ca:28:f2:65:82:e9:ec:05:
f0:73:b8:93:1d:cf:0b:80:b2:76:2f:24:c4:db:86:6b:78:1a:
6b:22:54:a0:e1:51:1f:c2:96:bd:2c:4b:39:41:52:00:b7:c3:
13:6d:0a:b0:06:60:f3:6b:52:7b:9a:c0:35:d0:bb:1a:46:ee:
ac:5c:7a:16:d2:8d:d4:a1:f3:9e:0f:70:4c:0c:bb:a2:80:8a:
61:be:79:e8:9e:94:b4:6f:de:6c:72:7c:08:99:4b:e2:9a:e9:
94:d8:be:dd:fe:3d:68:d1:50:ca:d7:5d:8f:40:eb:e4:88:ff:
c7:a4:4b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytInNkIXOJpux8ch0U5sr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzBlMjYwNjA5MTNjNzU4MTM3NDg4YmZkN2FiMWJmZTll
MTBhZTIwHhcNMjYwMzAyMDYwMDQyWhcNMjYwMzAzMDYwMDQyWjAzMTEwLwYDVQQD
EyhiNjYyYzI5MDAxNmQ4NDhmZTQ3NWY2MTliNjU1ODI3ODY4NmUyZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcgBPdQP62A5YpubhIAC76o7exBl
ZPv1qV7IGfJy7LAFFvfmO2wFswc5LyLORdqo4OBXasELbB1JHIB8pzc9B2N1N/LP
PqizMSR99vTCXLDEjvHorunPBgUC1jUnEQbc41u4M3I9yUZ8IBn32UUBDqE5oQ89
Fq+uBqx6w3rnQMAP8+VToLhKKh48hn9QOYfQM3Rp2/f9QEUEr5ZAjLbzdktQbIGO
bVBIgKdWD7e47RLupAMaruSCEF0HzeYQhiivE72LdHH6wFk5LOVqbGaKceV532hC
YtDMaIuZfOiE8M+BRrZzVGIFOMTi4Fd0WaPDb0G6t4EZB/JHWgmcDXe4pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZiwpABbYSP5HX2GbZVgnhobi3PMB8GA1UdIwQY
MBaAFCMw4mBgkTx1gTdIi/16sb/p4QriMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0Yjkt
NzA2NzgyY2ZhMDNiLzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80NjkwYzAtMGI5MS00MzIyLTk0YjktNzA2NzgyY2ZhMDNi
LzEvSXpEaVlHQ1JQSFdCTjBpTF9YcXh2LW5oQ3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqxQ6BDu
be0w4l9LvGpj38zhARRHHNIeu73+9/ZF5kzR8YySiUMcqEZON94hk9WaMolnFaUs
QQLnPAnxpu4ftP0CjQRKuklynpQqZkBLX9wpKUr5kAq0zxz8PwZehnlgrBZRsYQT
K9v29j71IfSWUNzc1qiKxvkSD2DCiATV7jzbbTdHNz1wJMoo8mWC6ewF8HO4kx3P
C4Cydi8kxNuGa3gaayJUoOFRH8KWvSxLOUFSALfDE20KsAZg82tSe5rANdC7Gkbu
rFx6FtKN1KHzng9wTAy7ooCKYb556J6UtG/ebHJ8CJlL4prplNi+3f49aNFQytdd
j0Dr5Ij/x6RLJA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:16 2026 by rpki-client