Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File: iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier: l7nhCQT7SKihukRCzgAwM2GwEprsXrQa60W1TPFGhmw=
Subject key identifier: 1E:D4:98:5C:B5:16:3B:7A:31:AD:EA:D5:38:B5:B5:DD:3F:38:77:C9
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 019E1EDA3F584BD6301CF32796ECE9357376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number: 04AE
Signing time: Wed 13 May 2026 01:01:19 +0000
Manifest this update: Wed 13 May 2026 01:01:19 +0000
Manifest next update: Thu 14 May 2026 01:01:19 +0000
Files and hashes: 1: CJHjJvBxO_A1o29RU77bYDobb1Y.asa (hash: OiQ96AcIrfdWv9rYq7YRunMZUUkm1k1hxiflexmUSCE=)
2: ZsGtqMxH4nL8S3-yctBXEQDc62g.roa (hash: +ZsU9QUE73+Gn9nFEGhVwL2RW/GlaE2Pf3U5DjyGOtE=)
3: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: FDfCciPjqT1av6dJ/CF7WAhKY/tXuVja/cyTBboZA8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:3f:58:4b:d6:30:1c:f3:27:96:ec:e9:35:73:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: May 13 01:01:19 2026 GMT
Not After : May 14 01:01:19 2026 GMT
Subject: CN=1ed4985cb5163b7a31adead538b5b5dd3f3877c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:19:7b:dd:08:73:70:4a:58:4b:e7:0a:14:
79:c3:46:8d:be:b3:1e:62:c1:b4:d7:d2:4c:bd:a5:
c2:55:18:e3:3f:56:96:ae:51:bd:25:75:1f:07:81:
d1:75:18:aa:24:13:81:f7:01:ab:03:e9:32:b4:56:
fa:49:29:8e:73:5a:94:e6:53:54:a7:f2:1d:1d:c8:
91:a6:42:a7:fe:a1:9d:01:25:31:50:86:36:50:5e:
e9:43:ba:15:f2:71:0e:d6:60:5e:87:a2:d1:6f:11:
ac:a2:5b:18:3f:ae:bc:91:2a:9e:f8:fe:22:1c:f1:
53:0e:9d:e1:dc:69:12:8d:07:65:db:8e:f4:48:2f:
c2:1d:61:7b:c6:14:37:81:6c:4e:16:64:27:6b:ba:
2b:e8:7f:d1:47:56:a9:64:17:34:11:b4:8c:2c:3e:
50:11:36:4f:02:67:f9:3c:46:a7:7f:f4:bb:59:73:
40:18:fa:81:ce:7a:8f:17:b4:c5:b8:b6:cf:70:fe:
42:06:0b:7c:58:ac:8b:cc:4a:32:e1:11:15:7f:16:
2a:75:2e:c5:64:83:13:dc:45:65:ae:2f:aa:36:7f:
65:32:eb:3b:09:9b:d9:39:f7:e1:4d:eb:c3:e0:ff:
2d:e8:2e:f0:76:23:45:13:3c:e7:89:1d:64:cc:3f:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D4:98:5C:B5:16:3B:7A:31:AD:EA:D5:38:B5:B5:DD:3F:38:77:C9
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d5:09:70:e4:93:ca:b8:69:be:22:01:84:ff:b4:7a:c0:1d:
b5:17:7f:68:d5:c4:c5:3d:c3:1b:95:d8:cc:10:1d:1d:c2:fc:
13:b0:1f:1b:63:45:56:8c:62:e6:0b:c2:09:b5:b1:a9:a6:1e:
50:53:88:80:b2:3c:b5:14:bd:b8:d9:e0:ba:e0:f1:01:d6:d6:
5a:ec:fa:fe:12:39:b1:9e:1d:5c:dd:4d:e1:e8:b0:d6:1d:94:
77:44:91:92:49:b7:e7:08:7c:c6:ac:27:f0:78:e5:69:e8:80:
e2:fa:94:f0:6f:6c:8a:28:76:5b:51:21:9c:98:63:20:70:99:
fe:84:6a:a2:e5:f4:a2:10:c4:11:d1:d8:e8:49:f3:b4:09:e3:
b6:f6:5d:c8:85:fc:19:45:d9:a0:8a:92:11:27:a4:c9:b3:62:
87:b6:8b:45:a1:85:69:87:2b:b9:83:75:bf:87:90:f8:61:37:
5e:b8:00:ed:a1:19:02:80:b8:79:2e:5c:c0:67:b5:2c:fc:b1:
60:41:c8:ef:40:7f:62:5b:c6:05:67:83:44:5a:7f:ba:6f:a9:
4b:98:91:83:8f:91:56:a3:df:ba:1a:79:f5:61:e8:3e:8c:ce:
38:d3:c8:3e:7b:32:e8:d4:9e:75:26:99:0e:2a:c7:51:48:7c:
f2:65:33:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2j9YS9YwHPMnluzpNXN2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDA4ZGE0MTkyMjcyOGJjNWJlZGJiZDcwODg3MDFjNTI5
Yjk5ZWQwHhcNMjYwNTEzMDEwMTE5WhcNMjYwNTE0MDEwMTE5WjAzMTEwLwYDVQQD
EygxZWQ0OTg1Y2I1MTYzYjdhMzFhZGVhZDUzOGI1YjVkZDNmMzg3N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkoZe90Ic3BKWEvnChR5w0aNvrMe
YsG019JMvaXCVRjjP1aWrlG9JXUfB4HRdRiqJBOB9wGrA+kytFb6SSmOc1qU5lNU
p/IdHciRpkKn/qGdASUxUIY2UF7pQ7oV8nEO1mBeh6LRbxGsolsYP668kSqe+P4i
HPFTDp3h3GkSjQdl2470SC/CHWF7xhQ3gWxOFmQna7or6H/RR1apZBc0EbSMLD5Q
ETZPAmf5PEanf/S7WXNAGPqBznqPF7TFuLbPcP5CBgt8WKyLzEoy4REVfxYqdS7F
ZIMT3EVlri+qNn9lMus7CZvZOffhTevD4P8t6C7wdiNFEzzniR1kzD8mNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7UmFy1Fjt6Ma3q1Ti1td0/OHfJMB8GA1UdIwQY
MBaAFIkAjaQZInKLxb7bvXCIcBxSm5ntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFDTnBCa2ljb3ZGdnR1OWNJaHdIRktibWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lNWIxNGItOWQ1Yi00MzQ2LThlODUt
NjM3MjlmZTU4OGEyLzEvaVFDTnBCa2ljb3ZGdnR1OWNJaHdIRktibWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lNWIxNGItOWQ1Yi00MzQ2LThlODUtNjM3MjlmZTU4OGEy
LzEvaVFDTnBCa2ljb3ZGdnR1OWNJaHdIRktibWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdUJcOST
yrhpviIBhP+0esAdtRd/aNXExT3DG5XYzBAdHcL8E7AfG2NFVoxi5gvCCbWxqaYe
UFOIgLI8tRS9uNnguuDxAdbWWuz6/hI5sZ4dXN1N4eiw1h2Ud0SRkkm35wh8xqwn
8HjlaeiA4vqU8G9siih2W1EhnJhjIHCZ/oRqouX0ohDEEdHY6EnztAnjtvZdyIX8
GUXZoIqSESekybNih7aLRaGFaYcruYN1v4eQ+GE3XrgA7aEZAoC4eS5cwGe1LPyx
YEHI70B/YlvGBWeDRFp/um+pS5iRg4+RVqPfuhp59WHoPozOONPIPnsy6NSedSaZ
DirHUUh88mUzNA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:42:44 2026 by rpki-client