Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: hvfuwzx7YTgmnjdXIdKe/zH6YCiaCYAEjZiaPMRUdxY=
Subject key identifier: A8:EF:3C:46:5E:12:CF:D0:16:50:07:69:33:1E:BA:47:E3:2A:94:24
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 019E1E35B51E83638C0320C2A38E5C76C5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 09D7
Signing time: Tue 12 May 2026 22:01:36 +0000
Manifest this update: Tue 12 May 2026 22:01:36 +0000
Manifest next update: Wed 13 May 2026 22:01:36 +0000
Files and hashes: 1: 7JgH3BufGryuzD8TkhKGrSgU0Jw.roa (hash: dvhqnEVhtzVA7d1uxkYo+L/AWZ2qs2JaTtSDOyZBFEw=)
2: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: +Lg3/iSSFo8OzFDZhcq1UXLszNxQW/MMU7NCBvp+NLk=)
3: WZ2jJ_eUYCIdOJhT2cQcjz-Dw9w.roa (hash: DZZSiAeLEaIbjxQA8htWapoGDjJjgT0boPO+D7q1Tuc=)
4: jcxnuuzpk8YEGgKb-Yvf2uSR1-E.asa (hash: V2pEeg2ELyqXGtM9iC5bzhoziEpzlbl43BPulkWtu0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:b5:1e:83:63:8c:03:20:c2:a3:8e:5c:76:c5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: May 12 22:01:36 2026 GMT
Not After : May 13 22:01:36 2026 GMT
Subject: CN=a8ef3c465e12cfd016500769331eba47e32a9424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:24:e8:bd:7b:ed:8b:27:8b:a6:5f:ea:fc:
bc:2e:72:3f:9e:50:37:8d:c1:79:7c:ac:0c:cb:92:
06:4d:40:44:40:b0:a9:69:ef:4e:99:6e:8d:fe:21:
61:a7:15:c0:56:c9:89:32:36:14:7d:6f:67:b6:c6:
fc:56:c5:60:14:d7:ca:85:c2:c0:8b:05:5f:91:e6:
db:b6:23:cf:4f:a0:34:a0:ce:26:ff:cb:66:61:98:
47:07:d2:94:a5:23:6a:94:fd:33:da:9f:53:29:31:
9e:6c:52:9e:0c:5c:ee:4f:cd:2a:64:ac:b7:c8:15:
ec:56:7e:73:29:61:b6:57:de:51:0b:72:72:6d:b2:
64:5f:55:ff:1b:a3:a0:5e:2f:1e:cb:8c:fc:2d:c7:
96:30:f3:90:25:5b:2b:a4:dc:9d:7a:24:07:8e:52:
40:61:39:45:8a:20:fb:8e:6e:c4:da:f0:fb:8a:81:
94:79:48:98:17:19:6b:08:3f:b6:dc:98:42:2e:59:
f1:f6:a3:36:51:f7:ff:8e:d6:89:5e:ba:3e:38:d4:
25:93:64:79:b2:3c:d6:41:40:09:37:70:81:5b:7b:
e3:08:26:79:50:bb:d7:55:6f:41:9e:32:f9:1e:0f:
56:9a:65:c8:fc:30:3b:28:83:9b:24:53:6c:7b:4b:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:3C:46:5E:12:CF:D0:16:50:07:69:33:1E:BA:47:E3:2A:94:24
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:89:9e:d5:94:8b:8e:85:a6:70:88:c8:9a:08:17:a9:01:96:
54:b2:94:6e:b0:bc:13:36:d0:dc:d7:18:a0:d5:5e:d4:12:da:
bd:fd:12:dd:ab:c6:ec:43:a2:69:c7:06:b4:0e:68:b6:6d:9a:
97:fb:24:50:fe:2b:ea:b3:aa:1d:63:2c:03:2c:d3:8c:cb:9c:
4f:9f:d6:5c:ab:87:86:03:82:af:03:c0:80:7e:5e:e3:44:e5:
51:5f:46:c8:a1:38:26:13:9b:e4:06:c0:b4:a9:bd:00:68:0a:
28:02:43:37:31:88:3d:3b:8f:01:5e:20:fd:7f:c9:f5:23:1b:
aa:9a:d2:80:5b:8c:f6:99:5b:66:a9:1b:02:92:e2:d0:16:60:
ac:5e:28:16:e7:42:a8:9f:12:23:8c:9a:86:9f:e0:f8:15:ce:
c5:ed:13:83:df:33:be:50:4f:b1:71:b3:33:72:e7:fe:b7:f5:
f0:f3:8c:f8:6e:4b:f8:bf:3b:5d:f7:8f:22:e2:fd:44:89:59:
2f:eb:32:16:9b:ff:3a:e4:87:31:13:7d:2b:4f:78:19:cb:1e:
53:33:05:56:fc:46:7e:75:06:32:95:19:af:fd:74:aa:86:40:
d2:0c:6d:31:ba:3f:85:fc:6d:a6:9f:03:46:c7:70:75:88:02:
1c:b7:5b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNbUeg2OMAyDCo45cdsXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTQ1MTY0YzU3MmVkZGU1ZGYyNTM5MTdjYzEyYTJkZmQz
OThiOTcwHhcNMjYwNTEyMjIwMTM2WhcNMjYwNTEzMjIwMTM2WjAzMTEwLwYDVQQD
EyhhOGVmM2M0NjVlMTJjZmQwMTY1MDA3NjkzMzFlYmE0N2UzMmE5NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/0k6L177Ysni6Zf6vy8LnI/nlA3
jcF5fKwMy5IGTUBEQLCpae9OmW6N/iFhpxXAVsmJMjYUfW9ntsb8VsVgFNfKhcLA
iwVfkebbtiPPT6A0oM4m/8tmYZhHB9KUpSNqlP0z2p9TKTGebFKeDFzuT80qZKy3
yBXsVn5zKWG2V95RC3JybbJkX1X/G6OgXi8ey4z8LceWMPOQJVsrpNydeiQHjlJA
YTlFiiD7jm7E2vD7ioGUeUiYFxlrCD+23JhCLlnx9qM2Uff/jtaJXro+ONQlk2R5
sjzWQUAJN3CBW3vjCCZ5ULvXVW9BnjL5Hg9WmmXI/DA7KIObJFNse0uHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjvPEZeEs/QFlAHaTMeukfjKpQkMB8GA1UdIwQY
MBaAFCPkUWTFcu3eXfJTkXzBKi39OYuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEt
NjZhYTJhMjMyMzllLzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEtNjZhYTJhMjMyMzll
LzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyome1ZSL
joWmcIjImggXqQGWVLKUbrC8EzbQ3NcYoNVe1BLavf0S3avG7EOiaccGtA5otm2a
l/skUP4r6rOqHWMsAyzTjMucT5/WXKuHhgOCrwPAgH5e40TlUV9GyKE4JhOb5AbA
tKm9AGgKKAJDNzGIPTuPAV4g/X/J9SMbqprSgFuM9plbZqkbApLi0BZgrF4oFudC
qJ8SI4yahp/g+BXOxe0Tg98zvlBPsXGzM3Ln/rf18POM+G5L+L87XfePIuL9RIlZ
L+syFpv/OuSHMRN9K094GcseUzMFVvxGfnUGMpUZr/10qoZA0gxtMbo/hfxtpp8D
RsdwdYgCHLdblQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:23 2026 by rpki-client