Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File: igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier: nKr23GpgukBE9kSbbi3MTeQ01rvdDVlji5KtGbOrZAg=
Subject key identifier: D7:73:69:45:BD:33:38:A0:96:24:40:EA:AD:93:56:8A:F9:5A:ED:D1
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer: /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial: 019CACB4A15D533F3677BFDF026770374578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 04:00:44 +0000
Manifest this update: Mon 02 Mar 2026 04:00:44 +0000
Manifest next update: Tue 03 Mar 2026 04:00:44 +0000
Files and hashes: 1: LeacyVsv1RcXFogC-zGtNs0rOAM.roa (hash: j3qojoQtMWggtkDzJQQqZamlkQYEGNHbKlwdO2tUD/I=)
2: c3WNo_4_81YtKAlp0VRoL7cFPtg.roa (hash: TP+B2IitpNpDU5H0sLBuUI5Oz9mFfqDfIHOQCcHsUyc=)
3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: /4HACSDY7EgiOg14Uq5r+2GFt+cce3jy59k4EkYAS28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a1:5d:53:3f:36:77:bf:df:02:67:70:37:45:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Validity
Not Before: Mar 2 04:00:44 2026 GMT
Not After : Mar 3 04:00:44 2026 GMT
Subject: CN=d7736945bd3338a0962440eaad93568af95aedd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:eb:c4:ca:2f:d5:c9:c6:ad:1b:7d:dd:93:
34:7c:c3:c2:1e:e2:22:61:3f:d2:7e:4f:70:0e:8d:
44:59:4e:87:2d:06:66:90:a3:67:b3:06:e5:ab:c9:
aa:e5:e9:79:1c:79:e1:b2:d6:7a:e2:b5:5f:2a:1d:
b7:bc:cf:ee:d1:d9:aa:2e:08:ff:49:3f:76:39:13:
17:69:59:86:54:98:04:1d:40:37:58:1d:dc:62:e7:
06:9d:10:43:65:38:96:40:58:db:8e:1f:93:12:ef:
11:8f:98:52:48:de:a9:26:2e:8a:0f:a0:4a:5d:05:
3e:ec:a7:af:d2:e8:ea:7e:e0:87:2d:10:0c:4f:27:
f3:d4:8b:b5:a8:a2:dc:7b:0e:76:97:9a:74:d1:62:
49:86:e4:37:c9:ee:37:77:8d:4e:31:60:5c:11:52:
53:32:9d:4b:86:77:b8:14:9c:6b:5f:66:79:a6:3f:
9a:e9:a9:df:22:51:aa:82:ab:40:a6:c5:70:6f:0b:
21:7b:35:0a:44:12:87:21:76:4a:8b:ab:04:06:d1:
7f:52:7a:ff:3a:a8:0a:99:50:93:3b:9f:5b:26:8b:
45:66:e2:9c:d3:89:b1:f9:6d:49:cb:62:d1:7a:29:
bd:64:e3:88:0c:ab:58:c2:24:d6:6e:9d:97:e5:44:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:69:45:BD:33:38:A0:96:24:40:EA:AD:93:56:8A:F9:5A:ED:D1
X509v3 Authority Key Identifier:
keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:53:15:67:c0:38:48:f5:99:cc:8b:4d:2d:f1:d7:de:1e:be:
05:16:b2:08:b6:b8:9c:b4:94:3b:a8:2c:b8:9e:82:d4:7a:09:
42:89:ba:81:06:f3:dc:d8:de:2f:af:98:c0:d9:15:46:6e:6c:
a5:02:3b:6e:ea:0e:c2:de:2b:35:b6:f5:bd:31:94:5a:37:67:
58:57:3f:cf:c7:1e:5d:34:77:16:58:7b:eb:88:fa:b4:7b:47:
84:91:bc:54:7f:95:42:ee:75:b4:3d:44:03:4e:97:04:43:ca:
aa:31:30:c5:ab:55:c9:b3:88:88:eb:dc:21:31:80:d1:84:dd:
1a:6b:54:c7:d2:0d:c2:a8:9a:68:6b:49:a8:3b:db:f4:be:c8:
35:b1:5a:2a:1b:1a:9c:17:e4:b9:4e:e2:06:20:8a:58:b1:16:
3a:b6:39:e7:20:92:dc:f3:54:58:72:64:3b:b3:d2:e7:3b:31:
a7:aa:30:c8:80:58:7f:dc:16:f7:80:a1:c3:7e:64:02:2b:27:
d2:29:25:7d:82:f3:e2:20:df:ef:e3:93:d7:65:77:fc:cc:ff:
e1:85:88:49:2a:b4:a7:96:c8:65:72:a1:fd:49:81:e1:fe:78:
2f:5e:1f:ab:3c:fc:93:30:58:59:e0:50:26:a5:c4:ae:27:4e:
a4:92:ba:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystKFdUz82d7/fAmdwN0V4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDhjMjhiZTE1NTE2MjkwYjlkYTUxMzVlNThmNTVmYmI4
MGZmYjQwHhcNMjYwMzAyMDQwMDQ0WhcNMjYwMzAzMDQwMDQ0WjAzMTEwLwYDVQQD
EyhkNzczNjk0NWJkMzMzOGEwOTYyNDQwZWFhZDkzNTY4YWY5NWFlZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQLrxMov1cnGrRt93ZM0fMPCHuIi
YT/Sfk9wDo1EWU6HLQZmkKNnswblq8mq5el5HHnhstZ64rVfKh23vM/u0dmqLgj/
ST92ORMXaVmGVJgEHUA3WB3cYucGnRBDZTiWQFjbjh+TEu8Rj5hSSN6pJi6KD6BK
XQU+7Kev0ujqfuCHLRAMTyfz1Iu1qKLcew52l5p00WJJhuQ3ye43d41OMWBcEVJT
Mp1Lhne4FJxrX2Z5pj+a6anfIlGqgqtApsVwbwshezUKRBKHIXZKi6sEBtF/Unr/
OqgKmVCTO59bJotFZuKc04mx+W1Jy2LReim9ZOOIDKtYwiTWbp2X5UQEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdzaUW9MzigliRA6q2TVor5Wu3RMB8GA1UdIwQY
MBaAFIoIwovhVRYpC52lE15Y9V+7gP+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2Mt
MDYxOGM5YThjYWM0LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82NzJhZjgtMzM0OC00MjEzLWI0N2MtMDYxOGM5YThjYWM0
LzEvaWdqQ2ktRlZGaWtMbmFVVFhsajFYN3VBXzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFMVZ8A4
SPWZzItNLfHX3h6+BRayCLa4nLSUO6gsuJ6C1HoJQom6gQbz3NjeL6+YwNkVRm5s
pQI7buoOwt4rNbb1vTGUWjdnWFc/z8ceXTR3Flh764j6tHtHhJG8VH+VQu51tD1E
A06XBEPKqjEwxatVybOIiOvcITGA0YTdGmtUx9INwqiaaGtJqDvb9L7INbFaKhsa
nBfkuU7iBiCKWLEWOrY55yCS3PNUWHJkO7PS5zsxp6owyIBYf9wW94Chw35kAisn
0iklfYLz4iDf7+OT12V3/Mz/4YWISSq0p5bIZXKh/UmB4f54L14fqzz8kzBYWeBQ
JqXEridOpJK6gQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:18 2026 by rpki-client