Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: fU1Hxk7krR9WDNdbVDEgRNMd4ZAVA4f+Ix5P05n6bdE=
Subject key identifier: 73:51:FB:13:AE:67:C1:0A:5F:1E:E7:D4:41:7B:89:B7:2A:EE:3B:E7
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019E1EA2C82B48396B5A787FC2B47955E08B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:00:44 +0000
Manifest this update: Wed 13 May 2026 00:00:44 +0000
Manifest next update: Thu 14 May 2026 00:00:44 +0000
Files and hashes: 1: 0N9Uxg8fR7Nyrc_u_br799CvD3w.roa (hash: uOgfIOlH3kKqWEbcGQ4cdmk7+jvbyKuPe/nGe0W6i/Y=)
2: 1-Sx_jXGlBlQATOQ5K8nNNuSrK8M.roa (hash: J1Zq7teTeIcSMmJFWstQ0vbrU882ZzSFqMi7WzJyvRs=)
3: H5n8y-hjXK24thn7egOUXJVZq0U.roa (hash: 7e4HU9h3i7rv/jpYmlCXJPYTMbRgwEsVE53RAePC3yc=)
4: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: NCvVcBYlf798J72EdKUW1fuXH6NMeD98scVR66u2wR4=)
5: LdznHUG78Bp9I2Dc43gteEDaBDQ.roa (hash: +dMfTpGhmS4SyoMfOpUT8Rsq5hQCLovibVxni1srWPA=)
6: RNhe93FE6qEUnmI7KhC9QCPUKRE.roa (hash: +sF8WWUCiojfxzR+V4lEJDjHf4WmTy3H3whX2T288mI=)
7: ppWofpQW50E3NHiSmyWgHR4ILv8.roa (hash: jJuUGZv8Uf/IpTklcwXKZKYqGPYZrZ2MeGb3oJWtKa4=)
8: rpJcxi0ezsz1auru1a5EKwFCe6U.roa (hash: xVRYtB7vqri8W1Qa+Q3R/0ZiBHYX/xC5bFNeI81rOlw=)
9: sPNr1HqSOW9gPQD2njRcNYsq_nU.roa (hash: Rxx1CbY9JZ6FmKclFr3hxanK7IPpIKnWMWk/29TEk0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c8:2b:48:39:6b:5a:78:7f:c2:b4:79:55:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: May 13 00:00:44 2026 GMT
Not After : May 14 00:00:44 2026 GMT
Subject: CN=7351fb13ae67c10a5f1ee7d4417b89b72aee3be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:6a:b5:08:70:1c:45:2d:cf:d4:4e:1c:9c:
19:2d:17:f4:1b:34:ad:7e:fa:84:0b:ad:45:77:b0:
36:0e:7f:99:17:ce:be:92:7a:f5:09:c6:ab:26:bb:
c4:ff:1d:31:49:39:a5:fa:1b:c4:93:88:f1:4b:e9:
42:17:29:9b:0c:33:b9:cf:7b:af:b0:9f:27:bd:82:
90:20:54:34:34:88:ec:fc:88:a2:db:8a:b9:fb:d9:
2c:35:6f:63:ba:15:ce:01:c1:d6:c4:98:52:c4:7f:
45:4e:33:8e:e2:97:9f:84:c8:7d:2a:e0:f3:c6:9b:
71:cb:e2:cb:4b:0e:2d:5b:80:a9:f6:85:93:40:be:
ee:ed:c7:ce:3b:34:d8:6b:e9:38:88:e4:88:ca:71:
e5:4a:4b:d2:6e:58:1f:2c:e2:1a:57:8b:28:12:80:
ec:1f:30:49:d6:b5:c3:32:8d:f6:4c:d5:75:9a:f3:
63:36:c3:e7:20:23:9e:3c:fe:cb:5c:7d:4b:fb:69:
62:a3:e9:99:90:88:fe:fb:e8:07:5a:bd:2a:dc:2f:
d7:a5:01:c0:2c:c3:37:13:8a:0f:9e:1f:35:07:5c:
79:d2:a2:bd:95:79:0a:51:57:b4:0b:e7:56:f0:01:
2b:5c:80:41:c8:0a:2e:e5:8f:bd:55:8c:ad:91:b7:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:FB:13:AE:67:C1:0A:5F:1E:E7:D4:41:7B:89:B7:2A:EE:3B:E7
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d7:83:1c:9c:bf:cd:cd:09:fb:cd:38:46:cd:18:22:7e:fc:
fe:3a:55:72:45:37:27:0b:4c:ee:d6:be:b7:e9:8d:e7:ba:e5:
a5:7f:a7:b0:32:e4:a0:39:60:5f:74:41:2f:3a:9c:46:92:e2:
81:8d:13:e3:a3:d5:a0:26:3b:89:fb:97:13:b4:ea:0f:73:d9:
4f:46:97:57:62:fd:3d:8c:3c:fd:6e:b0:ca:e6:5f:c3:16:54:
ef:31:48:b2:cd:d7:43:8f:d3:cb:5a:4c:43:21:30:dc:eb:53:
a6:b7:30:a0:28:a9:81:cf:14:08:75:7f:7e:53:1a:49:8e:28:
0b:f2:1b:33:50:0f:e2:55:78:37:1a:0b:5f:47:a4:a1:dd:ee:
ae:fe:e4:39:b3:96:de:56:82:f5:2e:f0:62:49:0d:a9:8e:5a:
b8:42:cc:3d:2e:3b:e5:e5:94:c5:cd:a7:0d:c8:cb:44:d8:4b:
88:fd:3c:54:77:29:75:70:24:df:c6:2f:fe:44:f9:60:49:ff:
5d:79:e5:3c:9e:1c:09:d4:1c:2d:24:25:9d:a7:4b:f5:1f:6c:
cb:e2:7e:40:24:51:72:a7:23:8b:fd:6c:f9:85:71:55:02:5c:
d2:0f:30:b2:55:34:11:a5:3a:cf:b2:66:fd:4c:e4:70:77:0f:
1d:38:79:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eosgrSDlrWnh/wrR5VeCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj
ZDVhYWUwHhcNMjYwNTEzMDAwMDQ0WhcNMjYwNTE0MDAwMDQ0WjAzMTEwLwYDVQQD
Eyg3MzUxZmIxM2FlNjdjMTBhNWYxZWU3ZDQ0MTdiODliNzJhZWUzYmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7hqtQhwHEUtz9ROHJwZLRf0GzSt
fvqEC61Fd7A2Dn+ZF86+knr1CcarJrvE/x0xSTml+hvEk4jxS+lCFymbDDO5z3uv
sJ8nvYKQIFQ0NIjs/Iii24q5+9ksNW9juhXOAcHWxJhSxH9FTjOO4pefhMh9KuDz
xptxy+LLSw4tW4Cp9oWTQL7u7cfOOzTYa+k4iOSIynHlSkvSblgfLOIaV4soEoDs
HzBJ1rXDMo32TNV1mvNjNsPnICOePP7LXH1L+2lio+mZkIj+++gHWr0q3C/XpQHA
LMM3E4oPnh81B1x50qK9lXkKUVe0C+dW8AErXIBByAou5Y+9VYytkbfb1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNR+xOuZ8EKXx7n1EF7ibcq7jvnMB8GA1UdIwQY
MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt
ZjZiNzhlMmIxN2ExLzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex
LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9eDHJy/
zc0J+804Rs0YIn78/jpVckU3JwtM7ta+t+mN57rlpX+nsDLkoDlgX3RBLzqcRpLi
gY0T46PVoCY7ifuXE7TqD3PZT0aXV2L9PYw8/W6wyuZfwxZU7zFIss3XQ4/Ty1pM
QyEw3OtTprcwoCipgc8UCHV/flMaSY4oC/IbM1AP4lV4NxoLX0ekod3urv7kObOW
3laC9S7wYkkNqY5auELMPS475eWUxc2nDcjLRNhLiP08VHcpdXAk38Yv/kT5YEn/
XXnlPJ4cCdQcLSQlnadL9R9sy+J+QCRRcqcji/1s+YVxVQJc0g8wslU0EaU6z7Jm
/UzkcHcPHTh5+A==
-----END CERTIFICATE-----
Generated at Wed May 13 09:10:26 2026 by rpki-client