Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File: IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier: +EJhPIbZl2rLGwazIUUO/p3dYuImCucK7C3hPPfxGs0=
Subject key identifier: 9C:9F:01:AD:3E:4E:C0:F9:9F:B4:D7:AA:38:A0:14:F6:9E:DB:6F:18
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial: 019E20FEFE32B53AA6F3569B6338AA3E2620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number: 10A7
Signing time: Wed 13 May 2026 11:00:42 +0000
Manifest this update: Wed 13 May 2026 11:00:42 +0000
Manifest next update: Thu 14 May 2026 11:00:42 +0000
Files and hashes: 1: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (hash: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw=)
2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: Iqm26fD5U1ZexXkS0IzemL6mttWL0VCdJgVYUJuq0oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:fe:32:b5:3a:a6:f3:56:9b:63:38:aa:3e:26:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
Validity
Not Before: May 13 11:00:42 2026 GMT
Not After : May 14 11:00:42 2026 GMT
Subject: CN=9c9f01ad3e4ec0f99fb4d7aa38a014f69edb6f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:5c:d6:9c:b9:7a:41:3d:f0:2b:d1:ed:f2:
78:c4:0f:60:e4:c7:ac:04:3b:05:be:75:f9:49:d2:
c9:6e:06:97:15:fd:8e:50:e6:4a:b9:42:10:bd:c6:
80:b4:74:ce:e9:75:8f:d4:4d:2f:a3:55:1c:d4:60:
bd:d8:b5:9d:0d:4d:e9:b3:7b:03:ad:8a:f6:94:d5:
25:3c:e0:72:06:3b:24:22:7b:d1:e9:64:5b:90:80:
86:fd:86:73:7e:78:52:6b:21:fd:63:cb:9b:14:79:
8b:60:4c:e8:17:d5:a0:86:d1:3b:7c:75:61:f2:28:
dd:f6:95:d5:7c:51:de:3c:8e:a9:7d:d1:b1:56:52:
35:f3:8d:6e:ed:89:05:0b:52:e7:57:11:43:40:c2:
17:04:18:61:18:db:da:f0:b1:b7:d1:38:27:46:36:
dd:4b:1d:98:be:20:53:cc:10:24:48:d7:ac:10:bd:
90:fa:33:16:a5:b4:14:12:e0:5c:bc:89:b5:9f:ed:
50:5a:f3:d4:60:33:a4:eb:0b:3a:20:ef:cc:cd:bf:
8b:39:07:eb:a5:fc:af:41:3d:99:5a:04:d0:16:cb:
da:2c:63:98:08:41:34:ea:c8:a1:de:ef:cf:1c:e4:
46:92:9c:94:b8:33:6d:eb:9d:36:81:95:87:e2:ac:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9F:01:AD:3E:4E:C0:F9:9F:B4:D7:AA:38:A0:14:F6:9E:DB:6F:18
X509v3 Authority Key Identifier:
keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e2:ff:0b:8a:c7:ae:25:a2:b1:4e:19:a3:58:5e:b7:27:7b:
80:60:ec:4d:e1:42:49:70:0b:75:9c:71:1c:e2:1a:bd:42:fc:
4c:13:88:59:fd:52:d9:a9:a7:5b:74:24:eb:3a:fc:00:83:e1:
8c:04:25:c8:df:2e:28:f6:c3:c6:5f:ec:1c:8e:25:0f:81:3b:
07:e6:59:fa:da:3b:8b:d5:02:b4:12:b1:7d:3a:da:8d:54:d4:
41:c3:56:f4:13:e3:b2:ea:09:af:6d:5b:a5:5d:1b:c3:9d:91:
00:03:8b:e6:d3:48:da:5a:3f:74:ec:cf:12:5e:41:7e:eb:df:
af:5e:bb:6e:c8:52:00:97:9f:13:75:48:67:a5:6d:85:e6:43:
82:4f:1f:58:b7:66:10:f0:25:e0:66:6a:d1:70:6d:7b:f0:0f:
cc:fd:e5:a3:ad:d2:03:8b:a5:ac:94:c1:a4:53:ed:b0:28:c2:
ab:39:94:38:1d:d4:b3:3a:37:0a:80:96:82:f9:66:33:71:32:
f3:57:0f:2a:cc:8e:22:fc:78:be:c7:7e:00:ff:66:23:ad:77:
a2:79:68:fc:89:64:7f:c0:7b:74:0a:0f:36:4c:25:23:82:c1:
96:2c:5c:93:e9:bc:69:d6:ef:37:ad:cf:88:c4:8e:5c:cf:b2:
02:32:b6:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/v4ytTqm81abYziqPiYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw
NTczOTEwHhcNMjYwNTEzMTEwMDQyWhcNMjYwNTE0MTEwMDQyWjAzMTEwLwYDVQQD
Eyg5YzlmMDFhZDNlNGVjMGY5OWZiNGQ3YWEzOGEwMTRmNjllZGI2ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPxc1py5ekE98CvR7fJ4xA9g5Mes
BDsFvnX5SdLJbgaXFf2OUOZKuUIQvcaAtHTO6XWP1E0vo1Uc1GC92LWdDU3ps3sD
rYr2lNUlPOByBjskInvR6WRbkICG/YZzfnhSayH9Y8ubFHmLYEzoF9WghtE7fHVh
8ijd9pXVfFHePI6pfdGxVlI1841u7YkFC1LnVxFDQMIXBBhhGNva8LG30TgnRjbd
Sx2YviBTzBAkSNesEL2Q+jMWpbQUEuBcvIm1n+1QWvPUYDOk6ws6IO/Mzb+LOQfr
pfyvQT2ZWgTQFsvaLGOYCEE06sih3u/PHORGkpyUuDNt6502gZWH4qwzrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyfAa0+TsD5n7TXqjigFPae228YMB8GA1UdIwQY
MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt
YTlhZWI0ODVkNTkyLzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky
LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+L/C4rH
riWisU4Zo1hetyd7gGDsTeFCSXALdZxxHOIavUL8TBOIWf1S2amnW3Qk6zr8AIPh
jAQlyN8uKPbDxl/sHI4lD4E7B+ZZ+to7i9UCtBKxfTrajVTUQcNW9BPjsuoJr21b
pV0bw52RAAOL5tNI2lo/dOzPEl5Bfuvfr167bshSAJefE3VIZ6VtheZDgk8fWLdm
EPAl4GZq0XBte/APzP3lo63SA4ulrJTBpFPtsCjCqzmUOB3Uszo3CoCWgvlmM3Ey
81cPKsyOIvx4vsd+AP9mI613onlo/Ilkf8B7dAoPNkwlI4LBlixck+m8adbvN63P
iMSOXM+yAjK27A==
-----END CERTIFICATE-----
Generated at Wed May 13 13:21:54 2026 by rpki-client