Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: RwI+SSYB7O1dPIKRdizW3PRSyc4HuQCofX7pSVhYo6Q=
Subject key identifier: 86:35:1C:0E:2D:FB:32:E9:F0:F9:CE:7B:D6:07:3C:60:E0:23:A3:8D
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019E1FB5CAAD62D89208B5A819F626A459CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 05:01:08 +0000
Manifest this update: Wed 13 May 2026 05:01:08 +0000
Manifest next update: Thu 14 May 2026 05:01:08 +0000
Files and hashes: 1: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (hash: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc=)
2: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: gMS6uj7TFKJYFq3lg/jmwpSfRRyol+1zjcd/oGq/F6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ca:ad:62:d8:92:08:b5:a8:19:f6:26:a4:59:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: May 13 05:01:08 2026 GMT
Not After : May 14 05:01:08 2026 GMT
Subject: CN=86351c0e2dfb32e9f0f9ce7bd6073c60e023a38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c6:a3:8a:28:d2:41:b5:0b:8d:36:c2:e3:b8:
ce:4f:e6:4d:d8:9c:1a:61:de:3f:66:7c:81:7c:5b:
47:01:e8:ef:f3:1a:74:9a:e8:43:74:7a:dc:71:40:
49:3f:b5:a1:2b:0c:41:89:39:fd:ce:cf:9a:44:ab:
86:cb:87:ca:20:88:33:fd:d6:99:3d:d7:e2:89:73:
2e:31:e9:87:33:a5:02:98:14:3a:47:a3:2d:7c:4c:
bd:e1:fe:24:44:b8:17:28:bb:e5:af:7d:86:f7:34:
75:16:02:68:3f:aa:be:58:c5:7d:c1:54:ef:b7:00:
f3:24:49:9e:13:27:43:a9:a3:1c:13:e0:88:e2:7e:
2d:05:3c:2b:fc:f8:fe:60:e4:17:ff:87:4e:d4:75:
0d:6b:1d:75:b5:3c:d9:e1:8b:2f:49:e1:5a:88:d5:
42:af:b8:7b:6f:21:3f:35:7f:99:aa:72:48:ac:1d:
81:bd:42:bf:aa:ed:ba:45:f3:ae:f9:dc:b9:36:c1:
99:ad:ec:f9:97:d9:28:e1:06:3b:f3:4a:77:cd:bf:
ca:24:87:7c:cf:89:fe:95:18:1a:39:45:74:79:62:
ec:72:6f:37:ee:ac:21:c6:62:b1:1d:a8:8c:eb:a2:
9d:78:b6:98:ff:5a:a9:91:89:da:f0:74:0c:63:6b:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:35:1C:0E:2D:FB:32:E9:F0:F9:CE:7B:D6:07:3C:60:E0:23:A3:8D
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e1:9c:11:83:5d:fb:5c:8e:83:aa:95:2d:e9:b9:f4:e0:38:
9b:d0:81:88:44:d3:03:ad:26:7a:ed:ae:7b:35:60:64:8f:f4:
f7:36:00:07:81:31:34:04:9c:a0:64:ea:73:ed:69:df:ba:18:
53:c5:34:08:48:80:db:31:ca:93:99:f7:b1:54:6e:96:f6:6b:
65:a5:b3:8f:50:78:53:1b:3e:9e:ac:4c:76:76:b2:77:52:9f:
7f:d9:8b:3d:1e:40:e8:9b:50:67:c3:26:6c:e3:10:e8:48:e6:
9d:f2:5d:95:0d:bc:2c:04:72:6b:c0:de:be:e2:f0:b2:bb:0c:
e1:07:24:b0:45:cc:26:74:0e:4b:24:8b:0a:ea:2f:fb:da:9e:
66:bb:28:f8:81:81:8f:24:76:68:b4:81:1c:70:e7:6f:fd:8a:
f3:a1:bb:99:3f:48:65:61:71:e3:9d:ca:df:da:09:5c:8a:fe:
1c:f1:a1:81:f6:0f:f3:1f:6b:67:29:6b:89:4d:41:b9:0d:39:
34:c5:27:db:d0:7e:46:3e:20:af:ec:95:3d:00:8f:33:8c:25:
d4:f1:4c:a1:6b:d8:2b:bd:9a:5a:0d:6c:eb:e1:7c:5b:a6:d6:
21:40:a3:68:c0:d2:b4:f1:ac:16:d0:0d:bf:dc:be:7f:5f:de:
44:18:73:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftcqtYtiSCLWoGfYmpFnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx
YjRlMWEwHhcNMjYwNTEzMDUwMTA4WhcNMjYwNTE0MDUwMTA4WjAzMTEwLwYDVQQD
Eyg4NjM1MWMwZTJkZmIzMmU5ZjBmOWNlN2JkNjA3M2M2MGUwMjNhMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sajiijSQbULjTbC47jOT+ZN2Jwa
Yd4/ZnyBfFtHAejv8xp0muhDdHrccUBJP7WhKwxBiTn9zs+aRKuGy4fKIIgz/daZ
PdfiiXMuMemHM6UCmBQ6R6MtfEy94f4kRLgXKLvlr32G9zR1FgJoP6q+WMV9wVTv
twDzJEmeEydDqaMcE+CI4n4tBTwr/Pj+YOQX/4dO1HUNax11tTzZ4YsvSeFaiNVC
r7h7byE/NX+ZqnJIrB2BvUK/qu26RfOu+dy5NsGZrez5l9ko4QY780p3zb/KJId8
z4n+lRgaOUV0eWLscm837qwhxmKxHaiM66KdeLaY/1qpkYna8HQMY2uJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY1HA4t+zLp8PnOe9YHPGDgI6ONMB8GA1UdIwQY
MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct
Zjc0MDFiNGU0YjRhLzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh
LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeGcEYNd
+1yOg6qVLem59OA4m9CBiETTA60meu2uezVgZI/09zYAB4ExNAScoGTqc+1p37oY
U8U0CEiA2zHKk5n3sVRulvZrZaWzj1B4Uxs+nqxMdnayd1Kff9mLPR5A6JtQZ8Mm
bOMQ6EjmnfJdlQ28LARya8DevuLwsrsM4QcksEXMJnQOSySLCuov+9qeZrso+IGB
jyR2aLSBHHDnb/2K86G7mT9IZWFx453K39oJXIr+HPGhgfYP8x9rZylriU1BuQ05
NMUn29B+Rj4gr+yVPQCPM4wl1PFMoWvYK72aWg1s6+F8W6bWIUCjaMDStPGsFtAN
v9y+f1/eRBhzYQ==
-----END CERTIFICATE-----
Generated at Wed May 13 09:24:38 2026 by rpki-client