Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier: 3r5VqTNcZRdr12ct7kHe4VDCtQAuN2uELvox5pKoukY=
Subject key identifier: AE:58:36:FE:3A:28:28:69:A6:CF:5E:59:3C:23:F5:74:07:5D:30:E3
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 019CAAFCF4A59C903C793DD7E523DE47693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 20:00:30 +0000
Manifest this update: Sun 01 Mar 2026 20:00:30 +0000
Manifest next update: Mon 02 Mar 2026 20:00:30 +0000
Files and hashes: 1: C-j7DHdcPeX_wLaiQQCXx01sXKk.roa (hash: lDDZElowGuCMiUnBVx2Enp74tiPB1NbesCh32sGC/h0=)
2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: 5ZHf8Yxf9OYpTxS/PZ6M3eN/qOc5Fb31nXILO4LFtpg=)
3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f4:a5:9c:90:3c:79:3d:d7:e5:23:de:47:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Mar 1 20:00:30 2026 GMT
Not After : Mar 2 20:00:30 2026 GMT
Subject: CN=ae5836fe3a282869a6cf5e593c23f574075d30e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:14:f7:2f:b0:b5:35:2a:1a:3b:19:0d:e7:
7f:ec:3c:d9:6b:41:b1:4c:63:25:19:fa:9e:f9:98:
fb:61:06:d6:b6:42:08:b8:b3:47:da:58:7f:75:3b:
d0:be:27:73:d2:16:3e:d3:58:17:bc:4c:43:8e:e0:
26:61:a1:ee:2a:36:41:52:89:ab:82:a6:7d:39:09:
64:58:4c:c6:e3:d3:ae:9d:46:68:85:e7:88:c2:bd:
bc:a0:f8:eb:cf:62:89:dd:5e:89:9e:0a:7d:57:aa:
d1:0e:46:74:6f:2e:80:1b:4a:1e:ac:44:0f:dc:e8:
58:4f:58:10:64:38:a0:29:87:26:b4:10:04:46:b4:
e9:43:7c:16:08:2c:b1:f8:cd:d6:b4:9a:0e:dc:4f:
ed:d5:85:ca:ac:b9:ee:26:c0:a3:ed:83:fd:a7:ab:
8f:ae:8f:96:c2:84:07:2d:41:d1:a2:89:2d:9e:ed:
b3:52:7d:74:c6:2c:d1:bd:98:1a:e8:8a:f0:06:9f:
62:95:22:f7:64:dd:19:e6:b9:19:68:da:69:d8:e9:
65:6e:6c:12:b6:06:41:5d:f0:f1:cc:09:55:e9:a4:
6f:c3:71:e8:89:2f:1a:7f:77:88:84:79:b2:47:39:
0c:b5:05:2b:1b:8b:9c:d9:17:be:98:71:dd:30:c1:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:36:FE:3A:28:28:69:A6:CF:5E:59:3C:23:F5:74:07:5D:30:E3
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f6:b5:f6:82:e1:b8:02:55:17:08:e9:df:41:3f:54:f0:2c:
a8:01:cf:d1:5d:7f:77:a4:80:4e:2f:53:a0:66:37:13:90:2a:
ef:a0:55:e9:05:44:fa:c6:a9:78:9d:0a:13:30:e1:3b:6f:98:
b1:fc:93:33:c5:ee:5b:e4:40:b4:08:94:96:9e:44:86:d5:90:
37:55:1b:4b:93:d2:66:d6:6e:ba:54:e9:9e:ae:f4:30:ca:e7:
bd:a0:4c:1d:aa:75:35:0f:cc:37:96:c0:e2:d5:2b:7a:18:f3:
cc:90:26:30:ae:06:2e:c1:69:7b:b7:85:8d:1c:aa:ec:5d:37:
e2:74:39:c8:bc:51:14:88:56:04:67:fb:c6:5e:43:4e:e1:b5:
b8:25:cb:70:17:08:18:80:dc:cb:b3:b8:12:78:73:40:00:11:
43:3d:bd:21:7d:ef:fc:1a:10:90:d4:25:c0:22:6c:cb:ad:40:
5c:a6:14:d6:18:fd:27:5a:fa:fd:06:4d:44:e5:fe:76:75:1e:
ef:6c:a6:51:8a:3d:40:19:48:82:04:1c:4b:3c:0c:1e:f7:fb:
98:26:d6:ca:3e:47:40:61:41:a0:a8:7d:fd:9c:8c:8b:22:69:
64:bc:48:46:cc:e1:2e:6f:be:dc:6d:ee:f0:85:b8:a5:78:da:
a1:76:e7:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/PSlnJA8eT3X5SPeR2k/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx
NDlhZmEwHhcNMjYwMzAxMjAwMDMwWhcNMjYwMzAyMjAwMDMwWjAzMTEwLwYDVQQD
EyhhZTU4MzZmZTNhMjgyODY5YTZjZjVlNTkzYzIzZjU3NDA3NWQzMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWQU9y+wtTUqGjsZDed/7DzZa0Gx
TGMlGfqe+Zj7YQbWtkIIuLNH2lh/dTvQvidz0hY+01gXvExDjuAmYaHuKjZBUomr
gqZ9OQlkWEzG49OunUZoheeIwr28oPjrz2KJ3V6Jngp9V6rRDkZ0by6AG0oerEQP
3OhYT1gQZDigKYcmtBAERrTpQ3wWCCyx+M3WtJoO3E/t1YXKrLnuJsCj7YP9p6uP
ro+WwoQHLUHRooktnu2zUn10xizRvZga6IrwBp9ilSL3ZN0Z5rkZaNpp2OllbmwS
tgZBXfDxzAlV6aRvw3HoiS8af3eIhHmyRzkMtQUrG4uc2Re+mHHdMMEEkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5YNv46KChpps9eWTwj9XQHXTDjMB8GA1UdIwQY
MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt
ZWYyZDUzYjVhMzRkLzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk
LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/a19oLh
uAJVFwjp30E/VPAsqAHP0V1/d6SATi9ToGY3E5Aq76BV6QVE+sapeJ0KEzDhO2+Y
sfyTM8XuW+RAtAiUlp5EhtWQN1UbS5PSZtZuulTpnq70MMrnvaBMHap1NQ/MN5bA
4tUrehjzzJAmMK4GLsFpe7eFjRyq7F034nQ5yLxRFIhWBGf7xl5DTuG1uCXLcBcI
GIDcy7O4EnhzQAARQz29IX3v/BoQkNQlwCJsy61AXKYU1hj9J1r6/QZNROX+dnUe
72ymUYo9QBlIggQcSzwMHvf7mCbWyj5HQGFBoKh9/ZyMiyJpZLxIRszhLm++3G3u
8IW4pXjaoXbnVg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:36 2026 by rpki-client