Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: +4ltdK4oM2D7MSD7slTdSeuun5kRNTNOeCXmN8BwgHU=
Subject key identifier: EB:5E:F7:3F:1A:5A:4F:E8:C7:44:F7:AF:41:12:C4:07:E2:1B:6A:F2
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019E1F7F2A2577B58A679D56A9823C541539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:01:27 +0000
Manifest this update: Wed 13 May 2026 04:01:27 +0000
Manifest next update: Thu 14 May 2026 04:01:27 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: e0DIwbf8BqdI4c7Zzyokb48Y4PsGwUe1AnkrBW+UMYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:2a:25:77:b5:8a:67:9d:56:a9:82:3c:54:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: May 13 04:01:27 2026 GMT
Not After : May 14 04:01:27 2026 GMT
Subject: CN=eb5ef73f1a5a4fe8c744f7af4112c407e21b6af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:6d:a9:4f:8d:9e:ca:3d:bf:61:55:f9:bd:
33:f9:a6:05:83:f3:64:32:bb:bc:4b:88:a2:8d:00:
96:01:ce:d0:a4:1a:aa:fc:00:36:68:23:4e:ca:67:
4d:2c:26:03:d4:b2:40:29:f9:2e:0e:2a:9f:b8:a1:
62:c1:81:1d:ce:46:75:53:b4:e5:90:c9:0f:99:a8:
38:0b:17:f2:c7:c3:d0:3a:5d:9d:9d:bc:07:93:2c:
b9:d6:6c:0a:68:1f:98:f6:2c:33:10:a8:98:d7:c0:
d9:a6:57:c8:11:65:5d:f4:65:89:62:2e:87:b7:57:
d1:c5:53:58:93:fd:b8:8e:c5:2a:40:61:e4:3f:47:
ad:20:b2:be:9c:9b:7d:68:25:38:da:67:0a:42:ab:
a0:41:fc:c6:c3:fd:2a:69:7c:92:3a:ee:e0:0a:f4:
9d:6d:bc:b6:31:68:7e:62:cb:7c:20:75:cf:ce:93:
14:0c:6b:bf:d9:b2:58:0e:e2:a2:db:b4:28:69:fb:
96:c1:51:be:3b:59:85:28:b8:0b:45:53:45:a9:d0:
2c:80:0c:0f:f7:9a:44:7d:dc:8d:94:a3:89:34:9b:
37:f8:fb:bd:ea:9c:af:84:dc:f0:05:42:b7:03:b7:
6f:bf:0e:7b:da:97:99:95:71:40:a5:96:3c:4f:dd:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:F7:3F:1A:5A:4F:E8:C7:44:F7:AF:41:12:C4:07:E2:1B:6A:F2
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5a:da:62:2c:26:cc:5f:7d:60:5d:89:93:eb:8a:ce:b9:7f:
63:92:4f:df:b7:f7:93:b4:14:68:9a:31:ee:29:07:96:0e:f0:
24:68:ea:bb:ec:f3:58:18:db:e4:d6:c3:2b:92:57:28:6d:f4:
c6:1f:9c:89:2f:df:f2:ad:84:a3:dd:08:eb:92:70:21:33:2f:
b5:b6:6a:b7:eb:fc:29:cf:53:3e:55:e4:d5:50:d2:76:3b:fe:
97:47:d6:21:f8:54:0b:af:32:23:0d:77:0d:4e:13:4c:da:2c:
8b:48:2e:19:c1:a7:3e:1e:72:a4:45:ee:43:be:8d:b5:45:88:
a6:02:ad:1d:5f:5f:d5:40:d7:89:3e:27:6b:9f:71:a7:c8:b1:
58:6f:97:fb:85:bb:e6:00:83:ca:6f:d8:6b:55:be:07:af:83:
3d:d0:1d:a2:73:99:78:38:f1:95:a8:d2:89:03:79:c0:c2:eb:
ee:3a:07:9c:2c:ec:43:85:99:ea:b6:2c:87:a0:c5:eb:a0:0f:
37:4c:07:37:72:ac:12:a2:0f:8b:f4:14:10:f6:49:80:da:0a:
e0:0d:c0:90:9c:da:2d:ef:f9:4b:6b:dd:79:98:1f:ae:a2:74:
84:34:f4:e7:91:dd:9e:0c:f6:e4:0b:5d:c3:e2:72:79:82:b5:
6c:af:3f:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffyold7WKZ51WqYI8VBU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjYwNTEzMDQwMTI3WhcNMjYwNTE0MDQwMTI3WjAzMTEwLwYDVQQD
EyhlYjVlZjczZjFhNWE0ZmU4Yzc0NGY3YWY0MTEyYzQwN2UyMWI2YWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBNtqU+Nnso9v2FV+b0z+aYFg/Nk
Mru8S4iijQCWAc7QpBqq/AA2aCNOymdNLCYD1LJAKfkuDiqfuKFiwYEdzkZ1U7Tl
kMkPmag4Cxfyx8PQOl2dnbwHkyy51mwKaB+Y9iwzEKiY18DZplfIEWVd9GWJYi6H
t1fRxVNYk/24jsUqQGHkP0etILK+nJt9aCU42mcKQqugQfzGw/0qaXySOu7gCvSd
bby2MWh+Yst8IHXPzpMUDGu/2bJYDuKi27QoafuWwVG+O1mFKLgLRVNFqdAsgAwP
95pEfdyNlKOJNJs3+Pu96pyvhNzwBUK3A7dvvw572peZlXFApZY8T930oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOte9z8aWk/ox0T3r0ESxAfiG2ryMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1raYiwm
zF99YF2Jk+uKzrl/Y5JP37f3k7QUaJox7ikHlg7wJGjqu+zzWBjb5NbDK5JXKG30
xh+ciS/f8q2Eo90I65JwITMvtbZqt+v8Kc9TPlXk1VDSdjv+l0fWIfhUC68yIw13
DU4TTNosi0guGcGnPh5ypEXuQ76NtUWIpgKtHV9f1UDXiT4na59xp8ixWG+X+4W7
5gCDym/Ya1W+B6+DPdAdonOZeDjxlajSiQN5wMLr7joHnCzsQ4WZ6rYsh6DF66AP
N0wHN3KsEqIPi/QUEPZJgNoK4A3AkJzaLe/5S2vdeZgfrqJ0hDT055Hdngz25Atd
w+JyeYK1bK8/0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 08:21:57 2026 by rpki-client