Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: iXPKUpMfe1lU8WM+vVJsM1bgTL/ygsCv47J04nqi96g=
Subject key identifier: 4A:5B:F0:AC:3C:F4:CC:EB:E9:9A:10:2F:D1:ED:B5:94:26:E5:44:34
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 019F9248BE1C8AF96D9ECB4FB089F8F68E68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 13D6
Signing time: Fri 24 Jul 2026 04:01:08 +0000
Manifest this update: Fri 24 Jul 2026 04:01:08 +0000
Manifest next update: Sat 25 Jul 2026 04:01:08 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: B/i4spMfpVo41vDYVMV97Dezjk5Ymfhkz05Zn7nmvJg=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:be:1c:8a:f9:6d:9e:cb:4f:b0:89:f8:f6:8e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Jul 24 04:01:08 2026 GMT
Not After : Jul 25 04:01:08 2026 GMT
Subject: CN=4a5bf0ac3cf4ccebe99a102fd1edb59426e54434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:d0:08:cc:97:b8:84:43:e4:ac:e3:ed:a3:
61:1c:f1:09:50:e3:3e:47:70:94:f3:e8:4b:d0:c4:
1c:1e:e2:d4:61:4b:d3:6b:46:6e:72:5e:47:52:44:
6f:01:e8:8f:35:29:2f:4f:fa:a8:ca:8a:39:5d:0f:
8a:f8:f3:8e:ef:6d:c9:eb:17:cd:a6:db:08:42:fe:
36:26:4d:66:ce:8e:75:26:ab:3f:84:d9:5a:09:91:
53:e7:76:b7:00:08:84:9b:79:32:38:f3:47:32:8b:
8c:8a:6d:69:a7:bf:d4:57:20:5b:11:43:a5:e7:e1:
40:5b:14:da:a4:ed:5d:09:f7:2c:27:18:94:a7:21:
ea:22:c6:24:97:d5:33:d0:65:51:7c:db:84:64:9f:
59:65:c9:54:af:85:41:18:dc:fd:74:d0:5f:da:08:
0a:4b:21:a1:07:a7:d3:9d:9a:f6:59:e6:f7:e0:cc:
61:bc:09:99:0a:e0:57:2b:7f:f6:14:28:c5:8c:ae:
71:dd:60:a4:2d:3c:d7:94:87:1a:09:f7:cb:77:f3:
42:03:ba:d1:ef:f9:dd:c0:75:1e:fc:5a:bb:91:7e:
4a:e1:94:d4:0a:bf:49:49:6c:1c:83:06:a2:5d:01:
59:ef:d6:ea:bc:df:23:1c:f1:c5:41:fd:c3:47:d8:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:F0:AC:3C:F4:CC:EB:E9:9A:10:2F:D1:ED:B5:94:26:E5:44:34
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5b:87:e3:b5:dd:c3:48:de:ab:43:0a:1c:1c:d4:12:bf:86:
0d:7a:33:95:ba:4d:e9:11:5f:e2:46:84:59:fc:a4:7f:b6:28:
a8:03:ca:6d:e8:d9:1b:1e:14:57:07:72:12:52:dd:f3:ec:09:
84:6d:8b:36:9e:49:63:bf:be:90:7d:a8:16:62:3b:45:cd:6f:
e3:f2:42:73:87:b2:d2:a2:d7:12:a3:f6:a4:d9:cd:0b:84:85:
25:57:1a:c8:8c:8b:61:72:d4:d5:0c:4a:f2:bc:a5:8c:0a:92:
1f:91:4a:08:e3:a1:b8:1b:2b:aa:1b:d1:57:4c:42:26:38:90:
14:2b:7d:26:ba:0a:aa:2b:a7:53:59:17:34:94:0c:02:54:15:
f4:8d:f0:de:cc:c5:5f:5d:85:b9:a9:41:4c:6f:a6:03:25:be:
0e:d9:a0:7b:c9:47:9d:7d:93:cf:a0:70:e0:31:d1:b1:8a:3e:
83:c2:e2:58:62:97:6a:75:0b:a4:7e:2d:34:c9:90:e9:eb:5f:
8d:2f:f2:4f:de:a1:aa:9f:05:5b:8a:50:83:36:f7:46:5d:fe:
5e:ab:a2:e6:dc:65:19:8a:34:c5:2e:0f:dd:83:9d:aa:25:e9:
3a:da:72:12:85:b8:00:8e:2b:a7:27:d3:84:24:ea:8f:7a:32:
b8:fd:00:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSL4civltnstPsIn49o5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTFlMGExMDRiNWIzZGRmMWY1ZDA4ZTdhY2IyYjc5ZTBk
NTY2ZjkwHhcNMjYwNzI0MDQwMTA4WhcNMjYwNzI1MDQwMTA4WjAzMTEwLwYDVQQD
Eyg0YTViZjBhYzNjZjRjY2ViZTk5YTEwMmZkMWVkYjU5NDI2ZTU0NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn3QCMyXuIRD5Kzj7aNhHPEJUOM+
R3CU8+hL0MQcHuLUYUvTa0Zucl5HUkRvAeiPNSkvT/qoyoo5XQ+K+POO723J6xfN
ptsIQv42Jk1mzo51Jqs/hNlaCZFT53a3AAiEm3kyOPNHMouMim1pp7/UVyBbEUOl
5+FAWxTapO1dCfcsJxiUpyHqIsYkl9Uz0GVRfNuEZJ9ZZclUr4VBGNz9dNBf2ggK
SyGhB6fTnZr2Web34MxhvAmZCuBXK3/2FCjFjK5x3WCkLTzXlIcaCffLd/NCA7rR
7/ndwHUe/Fq7kX5K4ZTUCr9JSWwcgwaiXQFZ79bqvN8jHPHFQf3DR9hpjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpb8Kw89Mzr6ZoQL9HttZQm5UQ0MB8GA1UdIwQY
MBaAFIuR4KEEtbPd8fXQjnrLK3ng1Wb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYt
YThjNTc2MjI0YmEyLzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kZmJmYzQtY2MzZi00NzdjLThkNzYtYThjNTc2MjI0YmEy
LzEvaTVIZ29RUzFzOTN4OWRDT2Vzc3JlZURWWnZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOluH47Xd
w0jeq0MKHBzUEr+GDXozlbpN6RFf4kaEWfykf7YoqAPKbejZGx4UVwdyElLd8+wJ
hG2LNp5JY7++kH2oFmI7Rc1v4/JCc4ey0qLXEqP2pNnNC4SFJVcayIyLYXLU1QxK
8ryljAqSH5FKCOOhuBsrqhvRV0xCJjiQFCt9JroKqiunU1kXNJQMAlQV9I3w3szF
X12FualBTG+mAyW+Dtmge8lHnX2Tz6Bw4DHRsYo+g8LiWGKXanULpH4tNMmQ6etf
jS/yT96hqp8FW4pQgzb3Rl3+Xqui5txlGYo0xS4P3YOdqiXpOtpyEoW4AI4rpyfT
hCTqj3oyuP0AVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:22 2026 by rpki-client