Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
File: ih8K1VcrribjnIdAxoqPu0buSGQ.mft (raw, json)
Hash identifier: Fs8qVbGflT1+HBqPdsArZSkvhyh+54ogL2ViRn4JNPo=
Subject key identifier: 11:DE:A5:D3:EA:F9:2B:CC:08:A7:DD:E0:91:DA:0E:34:03:B8:93:C8
Authority key identifier: 8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
Certificate issuer: /CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Certificate serial: 019E1F7F7EE46E81B7DB1FB85B013729D6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
Manifest number: 0C98
Signing time: Wed 13 May 2026 04:01:49 +0000
Manifest this update: Wed 13 May 2026 04:01:49 +0000
Manifest next update: Thu 14 May 2026 04:01:49 +0000
Files and hashes: 1: ih8K1VcrribjnIdAxoqPu0buSGQ.crl (hash: MYr07P7pxtUUEf07l6zthP69sZg1D4CguKeA9qwHnRA=)
2: xMgS7QD9_G9EOx5x98EDuY-9yGs.roa (hash: hMlsCv6vl96geP53LLF12LxkGDU69mGZggpEWqFm3G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:7e:e4:6e:81:b7:db:1f:b8:5b:01:37:29:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1f0ad5572bae26e39c8740c68a8fbb46ee4864
Validity
Not Before: May 13 04:01:49 2026 GMT
Not After : May 14 04:01:49 2026 GMT
Subject: CN=11dea5d3eaf92bcc08a7dde091da0e3403b893c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:ad:62:51:96:ca:16:c8:eb:c4:40:6a:f7:
e5:fa:11:42:de:6b:e0:5c:8c:28:a4:20:0a:f1:3c:
de:88:47:36:6a:29:d6:0f:7d:a2:a8:67:69:5f:9e:
9c:a0:54:28:e7:0f:4c:61:b4:61:53:c1:cb:50:04:
f0:85:c7:c0:07:ff:6d:dc:6b:70:3f:2e:53:48:2e:
d3:97:41:2f:75:dc:4d:7d:90:8b:ea:01:bc:8e:7c:
96:c3:26:c6:21:f7:49:8b:c0:0f:a6:90:d1:b1:9b:
0d:8f:a4:11:b9:84:48:95:90:0c:41:95:4d:9e:f3:
c0:d5:76:d1:d3:73:a9:56:a6:19:6f:e1:d8:bc:20:
07:66:94:97:89:a6:32:be:d5:41:06:bc:91:0c:65:
ad:79:56:f9:17:23:8b:4c:01:ba:e9:41:70:81:b2:
af:97:51:3f:08:63:03:c2:b7:b4:79:b4:9f:bf:f2:
cc:a8:de:80:4f:dc:a1:bb:97:28:45:d1:c3:3d:af:
72:41:74:d6:82:0c:82:b7:c2:3e:aa:fb:82:6b:2d:
9d:80:9f:80:84:12:c4:28:57:68:8b:a0:4f:40:15:
65:1c:55:d2:55:70:d0:31:03:bb:ae:11:80:5f:a3:
d1:d6:82:48:98:16:3d:5c:20:26:15:0b:b6:ba:70:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:A5:D3:EA:F9:2B:CC:08:A7:DD:E0:91:DA:0E:34:03:B8:93:C8
X509v3 Authority Key Identifier:
keyid:8A:1F:0A:D5:57:2B:AE:26:E3:9C:87:40:C6:8A:8F:BB:46:EE:48:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih8K1VcrribjnIdAxoqPu0buSGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2fd20a-53ae-4bea-80c9-03f23a73941d/1/ih8K1VcrribjnIdAxoqPu0buSGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c4:6a:6a:f0:fe:8d:30:f3:95:c6:4e:6f:7a:2d:86:f6:a1:
f1:89:fe:5b:81:ed:37:5f:06:a4:c8:28:53:6c:74:eb:83:b4:
c3:5e:80:a8:07:6b:b1:9c:e0:1c:b6:d3:08:1e:ad:c9:16:c6:
f1:a2:ad:38:04:a2:b3:c5:d8:da:ce:6a:5c:ca:a4:f6:01:9e:
17:c6:55:b0:8b:49:7a:12:44:cf:03:2d:be:34:0f:8c:56:fc:
79:a3:eb:a5:d9:d3:ce:f0:ee:d8:a1:4e:b1:e7:af:b7:26:23:
59:ff:e0:f0:05:92:0a:b2:e7:98:be:c7:64:81:e9:e5:f9:30:
6a:3f:d4:38:62:bb:94:25:0a:0f:4b:3c:96:4c:ce:77:5d:ca:
7f:2e:2a:9e:7b:77:e2:23:64:76:2c:fd:f5:0e:34:1b:1b:7c:
ca:7e:2d:e1:33:a3:19:e9:bb:91:fc:b8:a9:67:bb:c7:04:26:
4e:10:9b:bf:4c:29:08:02:60:06:11:a1:a0:e8:1e:c9:75:1f:
82:4e:5f:a2:33:8b:24:bf:44:f3:01:11:4d:bb:ce:ac:5b:bb:
3a:51:a2:af:46:96:5a:da:06:e8:a2:af:be:24:f7:03:9b:ed:
4a:a9:21:62:7b:ea:f7:ae:62:2d:4a:19:31:e2:31:00:7a:82:
d2:9e:6d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff37kboG32x+4WwE3KdbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWYwYWQ1NTcyYmFlMjZlMzljODc0MGM2OGE4ZmJiNDZl
ZTQ4NjQwHhcNMjYwNTEzMDQwMTQ5WhcNMjYwNTE0MDQwMTQ5WjAzMTEwLwYDVQQD
EygxMWRlYTVkM2VhZjkyYmNjMDhhN2RkZTA5MWRhMGUzNDAzYjg5M2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+tYlGWyhbI68RAavfl+hFC3mvg
XIwopCAK8TzeiEc2ainWD32iqGdpX56coFQo5w9MYbRhU8HLUATwhcfAB/9t3Gtw
Py5TSC7Tl0EvddxNfZCL6gG8jnyWwybGIfdJi8APppDRsZsNj6QRuYRIlZAMQZVN
nvPA1XbR03OpVqYZb+HYvCAHZpSXiaYyvtVBBryRDGWteVb5FyOLTAG66UFwgbKv
l1E/CGMDwre0ebSfv/LMqN6AT9yhu5coRdHDPa9yQXTWggyCt8I+qvuCay2dgJ+A
hBLEKFdoi6BPQBVlHFXSVXDQMQO7rhGAX6PR1oJImBY9XCAmFQu2unBlZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHepdPq+SvMCKfd4JHaDjQDuJPIMB8GA1UdIwQY
MBaAFIofCtVXK64m45yHQMaKj7tG7khkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzkt
MDNmMjNhNzM5NDFkLzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZmQyMGEtNTNhZS00YmVhLTgwYzktMDNmMjNhNzM5NDFk
LzEvaWg4SzFWY3JyaWJqbklkQXhvcVB1MGJ1U0dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMRqavD+
jTDzlcZOb3othvah8Yn+W4HtN18GpMgoU2x064O0w16AqAdrsZzgHLbTCB6tyRbG
8aKtOASis8XY2s5qXMqk9gGeF8ZVsItJehJEzwMtvjQPjFb8eaPrpdnTzvDu2KFO
seevtyYjWf/g8AWSCrLnmL7HZIHp5fkwaj/UOGK7lCUKD0s8lkzOd13Kfy4qnnt3
4iNkdiz99Q40Gxt8yn4t4TOjGem7kfy4qWe7xwQmThCbv0wpCAJgBhGhoOgeyXUf
gk5fojOLJL9E8wERTbvOrFu7OlGir0aWWtoG6KKvviT3A5vtSqkhYnvq965iLUoZ
MeIxAHqC0p5tmA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:05:44 2026 by rpki-client