Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: lifGQoIPoh4rFR55GKFracRRmGUkvgDVn/uUuS7+zCs=
Subject key identifier: 36:0B:A1:2A:46:2A:BE:96:4A:5D:F7:A2:AD:15:C9:7E:DA:95:81:B4
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019E2091919A57F78DA5ACC21D3CCC372418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 160B
Signing time: Wed 13 May 2026 09:01:11 +0000
Manifest this update: Wed 13 May 2026 09:01:11 +0000
Manifest next update: Thu 14 May 2026 09:01:11 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: OHfKRo2XpxlldyxG2z3QRgCggi3a0aukuAxe/kYShEQ=)
2: MG5yZZgH1zr4vXzmpIfd0IJEQVc.roa (hash: USPyAwkBtx19X0Ssf1K78ZRsdXXiX1LtJ9zZ6Zz7UDM=)
3: hQTOuRw6qx1AcVubUofo6BPrH1w.roa (hash: MYw1x7TT9vrN92qevrPZraH9+ojPP3NcZFy8h3cQIvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:91:9a:57:f7:8d:a5:ac:c2:1d:3c:cc:37:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: May 13 09:01:11 2026 GMT
Not After : May 14 09:01:11 2026 GMT
Subject: CN=360ba12a462abe964a5df7a2ad15c97eda9581b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:de:a0:ae:38:34:59:3f:7e:df:de:55:43:
97:e1:04:77:11:1e:80:4f:bd:23:5d:15:63:e1:f2:
33:9e:b7:ec:f9:37:f9:7f:5c:76:af:53:e8:b3:f7:
aa:08:12:eb:e6:7f:05:fc:8c:92:a3:5d:7f:6d:f1:
08:08:cb:b9:07:a9:38:9f:58:b3:00:7a:5c:d7:75:
b5:05:90:ce:af:a4:78:57:5c:c7:59:cf:6a:e3:90:
bb:e2:08:11:5d:32:77:8c:21:f0:d5:92:b5:e1:e7:
5c:fc:70:ed:73:7b:27:31:e2:24:b5:46:4c:06:c8:
da:b4:e2:e5:38:f6:13:8f:d4:5e:a8:fd:68:53:f8:
24:25:ac:c0:f7:5b:7b:1d:ed:bf:7f:92:e8:0a:2e:
b2:e6:98:cc:8c:c7:8d:31:27:04:1a:9e:dc:9a:cd:
3f:f0:84:dd:e4:ab:64:ba:1c:a9:4a:95:0b:3c:da:
e8:a0:5c:a2:17:e5:31:08:c3:bb:32:5f:3e:a4:b9:
3a:78:d9:39:75:11:03:20:06:4a:b6:92:59:84:a6:
b5:37:09:83:12:50:4a:05:57:b2:4d:33:8b:f1:53:
2d:9c:17:06:d5:00:97:33:c3:c0:73:ed:13:b8:6a:
02:15:6c:7e:4e:ed:1e:1a:aa:df:5e:6b:7c:e9:5f:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0B:A1:2A:46:2A:BE:96:4A:5D:F7:A2:AD:15:C9:7E:DA:95:81:B4
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fc:5b:07:5c:96:65:68:88:fc:06:21:be:bd:0a:a0:a6:f7:
48:1e:f1:85:5a:bc:c9:32:98:28:b6:6b:16:29:5a:e6:f9:a4:
a1:ac:f4:9d:8d:85:f3:ff:89:ab:07:86:64:5f:11:9e:5e:c9:
f8:03:50:34:3e:76:37:e9:db:81:c7:5e:a9:5c:d2:69:c7:57:
ba:a7:54:5c:13:03:04:f2:c6:03:f5:fe:f6:e4:d2:3f:4e:57:
4e:8b:d2:46:3f:52:36:13:72:ee:c1:57:04:b1:94:d5:b1:ca:
62:74:c4:52:55:ae:6a:5d:18:ce:ee:2d:f8:9c:85:58:9a:5d:
08:f1:20:40:ef:9a:ff:e7:bb:84:6a:7b:64:71:92:40:d1:ef:
32:52:aa:65:a4:5f:e3:47:9d:6f:b9:97:52:2e:50:51:09:24:
8d:99:89:c7:bd:e1:ea:d7:a7:e3:ca:dc:ac:6a:0d:92:6c:48:
be:a4:cb:74:51:7c:0a:0d:5a:db:06:17:84:4d:e3:b3:cc:11:
c1:8e:b5:f3:aa:5f:60:f5:3e:e5:04:52:61:4a:23:04:29:a4:
34:cb:eb:86:74:cb:4c:40:e3:22:96:c8:0c:48:91:16:69:86:
bd:74:e9:1a:d2:f5:05:0c:ac:80:2e:da:9e:13:3e:54:6e:92:
da:af:ae:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkZGaV/eNpazCHTzMNyQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWU1ZTcxNDA5YjIxZmQ1YzgyMGYzZDNhYzNmZGMwZmNl
NzVhMGIwHhcNMjYwNTEzMDkwMTExWhcNMjYwNTE0MDkwMTExWjAzMTEwLwYDVQQD
EygzNjBiYTEyYTQ2MmFiZTk2NGE1ZGY3YTJhZDE1Yzk3ZWRhOTU4MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6LeoK44NFk/ft/eVUOX4QR3ER6A
T70jXRVj4fIznrfs+Tf5f1x2r1Pos/eqCBLr5n8F/IySo11/bfEICMu5B6k4n1iz
AHpc13W1BZDOr6R4V1zHWc9q45C74ggRXTJ3jCHw1ZK14edc/HDtc3snMeIktUZM
BsjatOLlOPYTj9ReqP1oU/gkJazA91t7He2/f5LoCi6y5pjMjMeNMScEGp7cms0/
8ITd5KtkuhypSpULPNrooFyiF+UxCMO7Ml8+pLk6eNk5dREDIAZKtpJZhKa1NwmD
ElBKBVeyTTOL8VMtnBcG1QCXM8PAc+0TuGoCFWx+Tu0eGqrfXmt86V8eGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYLoSpGKr6WSl33oq0VyX7alYG0MB8GA1UdIwQY
MBaAFCPuXnFAmyH9XIIPPTrD/cD851oLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMt
YmM2MzdhODUxMmIxLzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNGI5M2MtYTAzZC00YWRhLTgzZmMtYmM2MzdhODUxMmIx
LzEvSS01ZWNVQ2JJZjFjZ2c4OU9zUDl3UHpuV2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/xbB1yW
ZWiI/AYhvr0KoKb3SB7xhVq8yTKYKLZrFila5vmkoaz0nY2F8/+JqweGZF8Rnl7J
+ANQND52N+nbgcdeqVzSacdXuqdUXBMDBPLGA/X+9uTSP05XTovSRj9SNhNy7sFX
BLGU1bHKYnTEUlWual0Yzu4t+JyFWJpdCPEgQO+a/+e7hGp7ZHGSQNHvMlKqZaRf
40edb7mXUi5QUQkkjZmJx73h6ten48rcrGoNkmxIvqTLdFF8Cg1a2wYXhE3js8wR
wY6186pfYPU+5QRSYUojBCmkNMvrhnTLTEDjIpbIDEiRFmmGvXTpGtL1BQysgC7a
nhM+VG6S2q+uJg==
-----END CERTIFICATE-----
Generated at Wed May 13 14:06:56 2026 by rpki-client