Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier: vmXeOCrRBPAy4sHQgicVidx0xpKX1fm7vmdboAJko4Q=
Subject key identifier: 85:E2:9F:25:9E:01:BC:AD:57:7A:7A:57:01:9A:37:CE:FD:04:9D:F4
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 019E1CEC120AA9EC8ADF826BD20BB31FC3F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 16:01:33 +0000
Manifest this update: Tue 12 May 2026 16:01:33 +0000
Manifest next update: Wed 13 May 2026 16:01:33 +0000
Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: fg7MUjRqEJ3w8Q1R2hxOl1bLj9IFmkXj3VT3OQqQtBg=)
2: KelGy5FqE-jDU-pEPXMpLcf7VOM.roa (hash: NXCD8cFHqcP6cTa5T44AKZobSHdu2jZzVhofvoBvDgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:12:0a:a9:ec:8a:df:82:6b:d2:0b:b3:1f:c3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: May 12 16:01:33 2026 GMT
Not After : May 13 16:01:33 2026 GMT
Subject: CN=85e29f259e01bcad577a7a57019a37cefd049df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:69:69:1d:3b:89:11:e5:9b:d8:9e:53:e0:
5d:01:d1:e8:9b:71:7f:fa:ca:51:07:19:db:e9:23:
30:ef:7f:33:29:dd:58:b6:5b:1f:98:c4:c2:f3:cf:
f0:4e:24:fa:e2:28:bb:ac:ff:11:7b:dc:b0:03:11:
ce:2a:bd:6d:1f:79:fc:1f:e3:65:2b:82:15:c9:dc:
0b:c4:d6:b4:2d:34:f9:a1:46:ec:06:68:85:fb:09:
28:37:ce:07:9a:73:df:0c:44:b6:82:2f:05:61:09:
5b:b3:91:ca:73:4c:73:13:28:ad:b7:06:ce:6f:c0:
f5:cb:af:a6:79:48:e5:12:6d:ca:bd:32:f6:33:23:
ff:9c:99:87:03:72:40:a4:3f:f9:77:2d:af:87:69:
97:70:bb:7c:25:da:d4:76:88:62:67:62:7d:a6:8d:
05:05:a3:c7:e6:8d:cb:be:c0:33:1c:5b:4a:02:02:
46:f9:40:6e:f9:a4:1f:8f:f6:05:d5:d6:19:08:f1:
5e:01:36:a1:c6:25:6e:2f:2a:0a:c5:3c:4b:78:37:
ae:60:b7:e3:e4:de:84:dc:be:9a:fc:47:9e:29:42:
f7:f9:15:64:07:3f:53:22:f3:b2:b2:91:28:12:a9:
f7:ec:46:b5:44:04:e0:f1:ad:16:8a:54:77:e2:69:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E2:9F:25:9E:01:BC:AD:57:7A:7A:57:01:9A:37:CE:FD:04:9D:F4
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f5:46:14:bf:93:4d:e0:08:8a:d8:eb:27:3f:18:91:71:62:
c9:92:53:5f:67:dc:4d:af:1a:a5:41:de:82:66:39:f1:78:e2:
47:3c:57:9a:ca:02:94:a2:9c:75:cd:f4:f2:1c:d9:df:1a:24:
d8:fa:d1:83:f6:4b:e1:55:c4:c4:6b:be:b2:90:34:23:51:fe:
71:bd:59:c1:b2:22:74:94:33:55:58:fe:14:75:1e:78:b6:31:
ce:f5:f8:f4:ca:a0:58:24:ab:d0:83:e9:c3:1d:2d:cc:ee:3d:
fa:72:76:5c:3a:ba:83:4f:18:61:fe:5f:30:6c:5a:ff:5a:a6:
00:69:a5:f8:7b:86:be:fa:41:f8:f8:2a:e1:3b:74:8d:0d:08:
87:11:de:36:f1:db:fa:db:51:08:1a:b5:5f:09:69:e0:ca:33:
e3:15:89:14:b0:ae:9c:6f:8c:11:50:22:c3:77:63:f3:64:1b:
41:4c:1b:b9:17:23:50:17:c0:f3:40:8e:57:55:04:07:1c:a6:
31:4b:a9:37:61:cf:ae:04:f5:e9:52:d1:9b:08:7e:68:e4:fe:
e0:85:e5:c3:5a:db:5a:9e:b7:3a:74:b6:cd:a8:ff:8d:9c:e6:
05:b9:b5:80:d5:01:88:91:0f:f6:df:8b:42:19:f1:54:2b:fc:
99:5b:bb:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7BIKqeyK34Jr0guzH8PyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGFhZGMwNjk1NTVhMWFiZTAzMWZkMGEwMjgwNjljOGZi
ODliMmIwHhcNMjYwNTEyMTYwMTMzWhcNMjYwNTEzMTYwMTMzWjAzMTEwLwYDVQQD
Eyg4NWUyOWYyNTllMDFiY2FkNTc3YTdhNTcwMTlhMzdjZWZkMDQ5ZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq5paR07iRHlm9ieU+BdAdHom3F/
+spRBxnb6SMw738zKd1YtlsfmMTC88/wTiT64ii7rP8Re9ywAxHOKr1tH3n8H+Nl
K4IVydwLxNa0LTT5oUbsBmiF+wkoN84HmnPfDES2gi8FYQlbs5HKc0xzEyittwbO
b8D1y6+meUjlEm3KvTL2MyP/nJmHA3JApD/5dy2vh2mXcLt8JdrUdohiZ2J9po0F
BaPH5o3LvsAzHFtKAgJG+UBu+aQfj/YF1dYZCPFeATahxiVuLyoKxTxLeDeuYLfj
5N6E3L6a/EeeKUL3+RVkBz9TIvOyspEoEqn37Ea1RATg8a0WilR34mkR5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXinyWeAbytV3p6VwGaN879BJ30MB8GA1UdIwQY
MBaAFOCKrcBpVVoavgMf0KAoBpyPuJsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQt
OWE3MmQ5OTAzZWI4LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84NTIyMjEtZDYxNi00ZTEyLThmYTQtOWE3MmQ5OTAzZWI4
LzEvNElxdHdHbFZXaHEtQXhfUW9DZ0duSS00bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfVGFL+T
TeAIitjrJz8YkXFiyZJTX2fcTa8apUHegmY58XjiRzxXmsoClKKcdc308hzZ3xok
2PrRg/ZL4VXExGu+spA0I1H+cb1ZwbIidJQzVVj+FHUeeLYxzvX49MqgWCSr0IPp
wx0tzO49+nJ2XDq6g08YYf5fMGxa/1qmAGml+HuGvvpB+Pgq4Tt0jQ0IhxHeNvHb
+ttRCBq1Xwlp4Moz4xWJFLCunG+MEVAiw3dj82QbQUwbuRcjUBfA80COV1UEBxym
MUupN2HPrgT16VLRmwh+aOT+4IXlw1rbWp63OnS2zaj/jZzmBbm1gNUBiJEP9t+L
QhnxVCv8mVu71A==
-----END CERTIFICATE-----
Generated at Tue May 12 21:12:11 2026 by rpki-client