Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: uCSi1VDW2Jepoxfd0bEoS0LBycfU1tMYcbzCo3PVw7U=
Subject key identifier: 11:EA:F9:3F:18:D3:93:F9:4D:20:FE:96:FC:A7:B5:54:03:A9:F2:3C
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019E205AB92928F22425431CE67F000E59ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 1124
Signing time: Wed 13 May 2026 08:01:16 +0000
Manifest this update: Wed 13 May 2026 08:01:16 +0000
Manifest next update: Thu 14 May 2026 08:01:16 +0000
Files and hashes: 1: 1-lmEP6bvSg72yf_GUeD4MSKNWhk.roa (hash: UZw/L6lxwycncfuJtQDWqM2GbKpxVlPtsRDnOtxZfq4=)
2: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: bMknhZCN4mm+KFN13sELgqlXTALZFYFqM18pSJjmNqU=)
3: uy5YZrZ342ZeZ2NGVVpULZDoPcE.roa (hash: ePYFBpMymgZ8ANPnNiychRqaQ6Srx/8bC1+U5miv+Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:b9:29:28:f2:24:25:43:1c:e6:7f:00:0e:59:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: May 13 08:01:16 2026 GMT
Not After : May 14 08:01:16 2026 GMT
Subject: CN=11eaf93f18d393f94d20fe96fca7b55403a9f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5e:f3:c4:2a:17:54:7e:cd:7b:92:9f:b4:db:
3f:05:ce:1f:d4:35:32:da:91:a9:15:1d:bf:b1:8b:
dd:a4:42:c9:d0:ca:40:14:08:1f:7b:bb:61:29:4f:
95:b8:dc:93:b3:1b:e7:7c:18:f4:fe:77:03:74:90:
59:7c:dd:21:91:43:91:7e:94:ae:c7:db:8b:e2:6b:
86:fd:c5:c9:ab:bd:ea:99:d0:55:31:c0:ae:8d:14:
50:b9:59:4b:77:a5:8e:4a:75:c2:1b:ef:11:f3:62:
27:25:38:34:32:7b:99:97:0a:2c:d9:df:42:2c:b4:
ed:d2:a5:0f:e9:5b:e9:b8:9f:42:f3:d4:d7:72:1b:
e3:6c:dc:e7:77:23:0b:12:43:1d:b8:05:b2:82:fd:
d5:77:e4:64:2c:16:f8:ca:c4:14:1f:1d:24:2e:6c:
43:4d:fb:33:ff:75:71:e2:fb:6b:13:cf:bb:55:86:
bf:05:83:ce:c8:b3:1f:0f:66:fb:11:c3:dc:c5:30:
e4:a8:7e:33:14:19:aa:24:15:fe:79:43:45:d1:87:
3f:a6:ea:c7:00:21:4c:2e:46:db:b1:c0:4c:98:fa:
c4:0b:72:15:4b:af:73:3d:e9:f6:71:d5:92:a2:4c:
2c:6d:c6:9e:56:0f:fa:08:00:80:8e:a0:b9:50:3f:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:F9:3F:18:D3:93:F9:4D:20:FE:96:FC:A7:B5:54:03:A9:F2:3C
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:97:90:81:da:8b:02:19:1c:08:11:c3:c2:bd:48:46:80:44:
84:0f:c3:1c:71:88:e7:e9:cf:c8:02:28:06:d9:75:92:70:b2:
5a:89:bd:09:93:47:df:40:b7:d6:f2:bb:23:2d:08:dd:32:28:
c2:7b:f4:bc:57:c3:c1:9c:dd:bd:24:8a:c3:92:6c:61:18:24:
bb:c0:b0:09:d6:96:b6:5c:05:6e:d4:20:f0:e0:92:d0:9e:32:
fd:97:c5:22:15:49:24:81:83:d9:1e:f7:b7:d0:0a:ba:e7:2a:
f5:58:ce:df:c2:cf:ca:14:0c:2f:1a:8e:1f:37:ca:cf:e9:4e:
c9:bf:a6:1a:3d:d4:ed:0f:f9:88:b6:ba:fd:52:e4:fc:29:9b:
61:30:be:0a:d5:db:88:6e:c1:03:ce:3d:11:3e:ff:a0:e7:c6:
df:a8:0b:2e:be:fb:a4:17:18:a6:f5:a8:5c:b4:3d:2c:59:74:
af:d6:89:cd:9b:7e:92:7f:61:e7:4a:32:f6:05:b7:d5:0d:d2:
ce:b4:aa:c3:ee:f8:59:a1:4f:f4:bd:1c:2e:5d:b6:ed:8f:d0:
ec:39:f8:36:1e:05:a6:ab:bf:fe:ea:21:4b:8b:9f:de:b8:57:
56:ef:c1:21:0e:2a:eb:1e:c1:06:35:56:9e:87:ab:87:81:f6:
b4:07:d4:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWrkpKPIkJUMc5n8ADlntMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx
OWE4OGYwHhcNMjYwNTEzMDgwMTE2WhcNMjYwNTE0MDgwMTE2WjAzMTEwLwYDVQQD
EygxMWVhZjkzZjE4ZDM5M2Y5NGQyMGZlOTZmY2E3YjU1NDAzYTlmMjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV7zxCoXVH7Ne5KftNs/Bc4f1DUy
2pGpFR2/sYvdpELJ0MpAFAgfe7thKU+VuNyTsxvnfBj0/ncDdJBZfN0hkUORfpSu
x9uL4muG/cXJq73qmdBVMcCujRRQuVlLd6WOSnXCG+8R82InJTg0MnuZlwos2d9C
LLTt0qUP6VvpuJ9C89TXchvjbNzndyMLEkMduAWygv3Vd+RkLBb4ysQUHx0kLmxD
Tfsz/3Vx4vtrE8+7VYa/BYPOyLMfD2b7EcPcxTDkqH4zFBmqJBX+eUNF0Yc/purH
ACFMLkbbscBMmPrEC3IVS69zPen2cdWSokwsbcaeVg/6CACAjqC5UD847QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHq+T8Y05P5TSD+lvyntVQDqfI8MB8GA1UdIwQY
MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt
ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy
LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpeQgdqL
AhkcCBHDwr1IRoBEhA/DHHGI5+nPyAIoBtl1knCyWom9CZNH30C31vK7Iy0I3TIo
wnv0vFfDwZzdvSSKw5JsYRgku8CwCdaWtlwFbtQg8OCS0J4y/ZfFIhVJJIGD2R73
t9AKuucq9VjO38LPyhQMLxqOHzfKz+lOyb+mGj3U7Q/5iLa6/VLk/CmbYTC+CtXb
iG7BA849ET7/oOfG36gLLr77pBcYpvWoXLQ9LFl0r9aJzZt+kn9h50oy9gW31Q3S
zrSqw+74WaFP9L0cLl227Y/Q7Dn4Nh4Fpqu//uohS4uf3rhXVu/BIQ4q6x7BBjVW
noerh4H2tAfU/w==
-----END CERTIFICATE-----
Generated at Wed May 13 14:42:50 2026 by rpki-client