Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: FT/ZBXK3ZJAvWxQINY4WlbmamwMUgLWovrLJb7JzYcs=
Subject key identifier: 6F:99:8C:95:38:44:CA:BB:07:E0:CD:8E:55:ED:5C:CA:1A:17:B5:29
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 019E1D908455E3A95DA406F3B5587EC6D89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: PqxQNvDA4lA1YSS4nKt186vKxvocl6L7vSG2lshAxMk=)
2: tsdEYosuda0mGshkl10-Ftg6W4Y.roa (hash: a/sn0U4F/EkCXhkwAu+cTtnXnfLtOqn3iL2j2IEJCMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:84:55:e3:a9:5d:a4:06:f3:b5:58:7e:c6:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=6f998c953844cabb07e0cd8e55ed5cca1a17b529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:02:d3:3b:a1:c2:ce:57:30:33:09:e0:7c:
d9:fc:d9:eb:c3:c0:92:04:86:44:8f:d1:2c:4d:90:
62:97:3c:56:9b:ae:2c:65:66:1d:92:a9:5b:bf:50:
a1:6e:3e:4a:07:55:d9:cd:c8:88:26:bd:7d:90:09:
ab:86:62:06:9f:8f:c1:1e:7e:63:2f:68:fd:d5:4d:
98:f4:a5:21:a2:c9:5c:67:79:f0:90:81:bc:98:80:
82:bc:3d:57:c7:65:92:26:d7:99:9f:63:22:bb:b4:
c6:93:2c:dc:0f:77:c8:69:ad:78:15:9a:58:f3:15:
82:a7:9a:d7:4b:e7:e7:e2:e5:81:ec:d1:1b:12:ec:
bb:b5:f5:ae:66:c8:8a:ba:d2:d4:99:c5:f2:cb:cb:
04:44:85:e1:c2:54:ba:16:ed:2e:b4:f8:6e:5c:64:
23:a9:c2:92:80:e5:53:d4:f8:fe:c0:aa:76:c2:32:
69:c1:b9:c6:aa:13:d2:07:92:7f:1f:ea:f6:fb:ba:
53:49:55:f7:cc:4e:85:e2:03:f3:2d:b1:2d:bc:41:
e4:c3:13:d8:f0:cf:31:14:b5:d4:c6:8e:35:d8:b1:
a1:d1:8b:aa:9c:5e:5f:c0:27:39:fb:77:b4:7f:71:
e5:b8:de:ba:37:06:14:92:ff:e0:89:69:42:15:96:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:8C:95:38:44:CA:BB:07:E0:CD:8E:55:ED:5C:CA:1A:17:B5:29
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:84:86:a5:c8:0c:7e:ff:80:ff:6c:2a:41:46:7d:83:4c:b1:
ac:ba:88:80:b4:1b:39:5b:f2:b5:61:f5:1a:15:47:c2:ae:53:
37:39:70:e4:65:5a:ea:cb:2b:6c:cb:d0:e6:55:18:90:b2:47:
df:f8:5a:03:aa:d7:cf:e1:91:60:c6:41:b3:53:9b:6f:03:c6:
66:bb:e3:a9:f6:b7:ec:07:ee:e7:3a:6c:c1:e4:8d:32:75:89:
ee:27:ec:92:c0:f5:99:0f:ba:be:82:e4:f8:57:fd:9f:43:b7:
a6:0a:1e:f2:b0:30:87:82:36:5f:34:3c:bf:0a:57:65:ff:fa:
d4:90:a6:ca:d4:b8:97:2e:fc:e5:16:4c:8b:ab:71:a1:46:cc:
de:d9:8c:9d:7c:10:e6:55:c8:d1:25:e8:03:82:37:7e:65:89:
4e:57:c0:1b:56:3c:09:d0:67:b1:26:1c:3f:56:5c:f0:46:07:
02:2d:93:c7:e3:38:c6:ab:71:ee:2b:16:8e:85:cb:ef:ad:ab:
ca:d8:a9:86:2b:43:22:a2:c1:a9:b6:3f:d1:74:53:ea:85:f1:
e7:fe:f5:40:71:26:02:5b:6f:46:e8:84:36:a2:af:1f:bd:51:
49:15:0e:1d:b3:df:f0:a9:76:ad:23:ef:36:64:98:a4:cb:9c:
4d:70:64:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkIRV46ldpAbztVh+xtieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZjM0MmRkMTEyN2M2N2FmMTExNmFiMWY5OTdlMjdjYjRj
ODg0ZTgwHhcNMjYwNTEyMTkwMTEwWhcNMjYwNTEzMTkwMTEwWjAzMTEwLwYDVQQD
Eyg2Zjk5OGM5NTM4NDRjYWJiMDdlMGNkOGU1NWVkNWNjYTFhMTdiNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgQC0zuhws5XMDMJ4HzZ/Nnrw8CS
BIZEj9EsTZBilzxWm64sZWYdkqlbv1Chbj5KB1XZzciIJr19kAmrhmIGn4/BHn5j
L2j91U2Y9KUhoslcZ3nwkIG8mICCvD1Xx2WSJteZn2Miu7TGkyzcD3fIaa14FZpY
8xWCp5rXS+fn4uWB7NEbEuy7tfWuZsiKutLUmcXyy8sERIXhwlS6Fu0utPhuXGQj
qcKSgOVT1Pj+wKp2wjJpwbnGqhPSB5J/H+r2+7pTSVX3zE6F4gPzLbEtvEHkwxPY
8M8xFLXUxo412LGh0YuqnF5fwCc5+3e0f3HluN66NwYUkv/giWlCFZZEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+ZjJU4RMq7B+DNjlXtXMoaF7UpMB8GA1UdIwQY
MBaAFIjzQt0RJ8Z68RFqsfmX4ny0yIToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzIt
OGIzNmU5ZDA2M2ExLzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNGZkMTUtMjJhOS00YmQ2LWEyMzItOGIzNmU5ZDA2M2Ex
LzEvaVBOQzNSRW54bnJ4RVdxeC1aZmlmTFRJaE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYSGpcgM
fv+A/2wqQUZ9g0yxrLqIgLQbOVvytWH1GhVHwq5TNzlw5GVa6ssrbMvQ5lUYkLJH
3/haA6rXz+GRYMZBs1ObbwPGZrvjqfa37Afu5zpsweSNMnWJ7ifsksD1mQ+6voLk
+Ff9n0O3pgoe8rAwh4I2XzQ8vwpXZf/61JCmytS4ly785RZMi6txoUbM3tmMnXwQ
5lXI0SXoA4I3fmWJTlfAG1Y8CdBnsSYcP1Zc8EYHAi2Tx+M4xqtx7isWjoXL762r
ytiphitDIqLBqbY/0XRT6oXx5/71QHEmAltvRuiENqKvH71RSRUOHbPf8Kl2rSPv
NmSYpMucTXBkTA==
-----END CERTIFICATE-----
Generated at Wed May 13 06:44:26 2026 by rpki-client