Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: cTdL/EnKbPTqMdyNZbFFhaSnBqVsd75z/uLaDrzL5BI=
Subject key identifier: 97:70:99:CC:85:6D:5B:93:6A:31:B4:C3:02:5E:2C:8A:FE:74:41:C3
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 019E1D22ECFFCB39D672922764D09AC7F868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 17:01:28 +0000
Manifest this update: Tue 12 May 2026 17:01:28 +0000
Manifest next update: Wed 13 May 2026 17:01:28 +0000
Files and hashes: 1: 6CW7JYEKskJr6yo0DDu4CWa4jUI.roa (hash: adF3q2VLnpMi1Z/r5xi4cFiAP5apevVr8J5nUI/Kilc=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: 4aCJdMaUrZilqIDWg2s/WelYITtU9JNVEZ0a0PZ3FNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ec:ff:cb:39:d6:72:92:27:64:d0:9a:c7:f8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: May 12 17:01:28 2026 GMT
Not After : May 13 17:01:28 2026 GMT
Subject: CN=977099cc856d5b936a31b4c3025e2c8afe7441c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:66:49:15:b9:69:48:56:26:ed:ad:8e:01:82:
c9:ab:58:dd:5e:b6:e3:a5:28:e9:13:83:d1:35:bb:
73:28:f2:b9:83:0a:dc:33:0c:e0:f1:65:5a:87:6f:
14:30:f7:73:17:04:2d:50:65:b9:52:89:9d:fa:47:
39:95:aa:d5:92:8f:18:5f:a9:3a:05:98:e3:2c:28:
1e:cb:1a:aa:9a:b6:d5:2d:2c:f8:67:fa:35:44:bb:
c6:c3:50:51:4c:1e:8e:73:08:3d:b9:f4:df:56:d0:
ed:36:ce:8b:be:4a:37:72:20:88:92:22:a9:1f:fa:
7d:63:34:d7:57:43:e7:cc:4c:69:59:02:31:cf:14:
08:64:f6:d8:24:87:1b:ca:0d:59:51:98:fc:55:41:
b3:ce:40:f7:d6:38:f1:c3:f6:4b:c2:56:05:58:7d:
64:47:79:02:f6:27:4c:02:f7:2e:b7:03:28:40:01:
31:ce:51:3c:65:3c:60:5f:b6:21:2b:96:83:e0:97:
d8:71:97:cb:63:83:ef:97:01:55:72:7a:ee:82:a5:
44:7d:56:69:c0:ab:62:10:f0:cf:ad:06:08:ae:33:
00:c2:10:ef:10:24:cc:39:50:62:55:6d:72:f2:eb:
b3:35:9f:43:6c:d7:63:e0:bb:c2:ec:64:7b:2a:32:
c5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:99:CC:85:6D:5B:93:6A:31:B4:C3:02:5E:2C:8A:FE:74:41:C3
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4d:0b:d0:02:27:fa:1a:8b:4a:98:ad:5b:ec:ee:d4:a9:5c:
30:c9:2d:f4:f8:51:cd:2d:ef:53:1b:ab:47:7f:b4:2a:c4:83:
8e:25:bd:5c:44:af:b0:d1:11:51:9e:d9:73:07:90:8d:35:2e:
ee:01:32:c2:3c:c1:97:99:a1:81:8d:5f:86:30:6f:58:c1:d1:
95:48:79:a6:45:70:c2:f5:0d:37:cd:76:b0:24:8b:00:d8:4d:
e8:1c:d6:ed:14:df:66:ce:d4:91:aa:7f:b1:b5:99:9b:51:76:
3a:a7:58:15:39:d5:3b:36:66:b3:39:31:55:c1:2c:fb:1a:a7:
1d:b1:b5:05:33:8e:36:f8:7d:fc:ff:15:78:06:ae:7a:be:27:
23:5b:9a:cb:af:34:c5:67:77:f6:d1:80:ef:2c:11:5e:8f:0e:
8d:0f:e3:61:51:46:47:1b:ee:a5:f6:5f:51:3e:94:52:84:33:
db:f3:9b:50:bb:d8:cc:d9:b7:62:34:8d:4f:10:2f:33:70:14:
b0:75:bc:61:d9:e0:4a:4f:c0:bd:09:73:ad:0f:b8:bb:e3:3c:
2e:cc:d5:72:2a:d1:b6:26:d4:6f:5a:b3:af:dd:9b:7a:47:2e:
80:01:9f:75:0b:04:5e:ce:79:45:8d:a4:d3:35:c8:5d:ba:4d:
96:80:73:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIuz/yznWcpInZNCax/hoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjI4MGFlNTE5NTUwYzdhN2Y0OTUzYWIyN2Q3YWU3ZGRl
YjEzNDEwHhcNMjYwNTEyMTcwMTI4WhcNMjYwNTEzMTcwMTI4WjAzMTEwLwYDVQQD
Eyg5NzcwOTljYzg1NmQ1YjkzNmEzMWI0YzMwMjVlMmM4YWZlNzQ0MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2ZJFblpSFYm7a2OAYLJq1jdXrbj
pSjpE4PRNbtzKPK5gwrcMwzg8WVah28UMPdzFwQtUGW5Uomd+kc5larVko8YX6k6
BZjjLCgeyxqqmrbVLSz4Z/o1RLvGw1BRTB6Ocwg9ufTfVtDtNs6Lvko3ciCIkiKp
H/p9YzTXV0PnzExpWQIxzxQIZPbYJIcbyg1ZUZj8VUGzzkD31jjxw/ZLwlYFWH1k
R3kC9idMAvcutwMoQAExzlE8ZTxgX7YhK5aD4JfYcZfLY4PvlwFVcnrugqVEfVZp
wKtiEPDPrQYIrjMAwhDvECTMOVBiVW1y8uuzNZ9DbNdj4LvC7GR7KjLFqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdwmcyFbVuTajG0wwJeLIr+dEHDMB8GA1UdIwQY
MBaAFInygK5RlVDHp/SVOrJ9eufd6xNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMt
NWI1MGVhODhlZWFiLzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mZGNlNGMtMmVhNS00N2ViLTk0YmMtNWI1MGVhODhlZWFi
LzEvaWZLQXJsR1ZVTWVuOUpVNnNuMTY1OTNyRTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU0L0AIn
+hqLSpitW+zu1KlcMMkt9PhRzS3vUxurR3+0KsSDjiW9XESvsNERUZ7ZcweQjTUu
7gEywjzBl5mhgY1fhjBvWMHRlUh5pkVwwvUNN812sCSLANhN6BzW7RTfZs7Ukap/
sbWZm1F2OqdYFTnVOzZmszkxVcEs+xqnHbG1BTOONvh9/P8VeAauer4nI1uay680
xWd39tGA7ywRXo8OjQ/jYVFGRxvupfZfUT6UUoQz2/ObULvYzNm3YjSNTxAvM3AU
sHW8YdngSk/AvQlzrQ+4u+M8LszVcirRtibUb1qzr92bekcugAGfdQsEXs55RY2k
0zXIXbpNloBz8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:46 2026 by rpki-client