Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
File: 1-iWi8osetikWERKHCUKl7RgbUZ8.mft (raw, json)
Hash identifier: 4wDWUTfFLy2Y7uiGPQwRVeYXJJfvIUReDqUk9bZKkD4=
Subject key identifier: 43:AE:97:63:F9:2D:4D:1D:EC:AC:2C:EE:76:86:CA:47:81:88:0E:DC
Authority key identifier: FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
Certificate issuer: /CN=fa25a2f28b1eb629161112870942a5ed181b519f
Certificate serial: 019E1DC6EE42337A17CE5613CABAFD1ED0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
Manifest number: 0156
Signing time: Tue 12 May 2026 20:00:36 +0000
Manifest this update: Tue 12 May 2026 20:00:36 +0000
Manifest next update: Wed 13 May 2026 20:00:36 +0000
Files and hashes: 1: 1-iWi8osetikWERKHCUKl7RgbUZ8.crl (hash: dfoFcXso7ql3iBVSj8UA7HrXcu6YjBbz+B0LK0qA418=)
2: npTp4Du46e6L-gb7_xi1R_gV0tY.roa (hash: AYItR+eYoLuQ57cxd9qVNl7nClhJqimYPK8LL9esiTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:ee:42:33:7a:17:ce:56:13:ca:ba:fd:1e:d0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa25a2f28b1eb629161112870942a5ed181b519f
Validity
Not Before: May 12 20:00:36 2026 GMT
Not After : May 13 20:00:36 2026 GMT
Subject: CN=43ae9763f92d4d1decac2cee7686ca4781880edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:75:32:ea:90:c2:b3:a2:4e:64:f7:1b:24:52:
4c:fa:79:23:b7:95:98:3a:bf:75:ac:30:f7:c1:74:
f1:75:42:8d:2b:a4:59:63:99:e5:5d:88:cf:56:70:
6b:26:e3:18:b5:88:e3:0a:82:ec:2c:6d:22:12:3f:
73:ce:5f:05:76:d8:e3:7c:e0:7a:e4:6b:54:54:ec:
3c:5b:f8:7c:4f:27:07:7b:6b:3d:25:2c:e8:2c:8a:
40:21:fa:fd:d7:41:95:93:c2:21:e6:9c:25:b4:be:
47:5f:f9:20:33:a7:95:2f:fd:bb:85:4e:f6:ef:9e:
d1:32:81:94:db:e8:92:62:81:02:24:0c:04:17:c7:
cd:1a:48:7a:d5:62:6f:f0:c0:7c:b0:fa:80:ac:03:
a7:7c:5a:f2:de:dd:39:bc:9d:17:0e:95:e3:25:79:
0a:ed:61:2e:4f:57:54:cb:05:29:58:a3:ac:0b:8a:
13:0a:d9:47:6d:52:af:c3:18:6b:8b:b7:68:5f:1b:
13:fc:28:0e:55:49:50:52:8c:a8:47:56:e9:d2:61:
e0:b5:0a:71:15:70:c9:a5:50:6f:1f:4c:46:a9:d0:
99:a4:39:64:c2:1c:01:4b:98:86:2a:65:ac:78:c5:
2e:24:d5:23:46:59:4f:ed:e4:d0:10:4f:93:00:39:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:97:63:F9:2D:4D:1D:EC:AC:2C:EE:76:86:CA:47:81:88:0E:DC
X509v3 Authority Key Identifier:
keyid:FA:25:A2:F2:8B:1E:B6:29:16:11:12:87:09:42:A5:ED:18:1B:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWi8osetikWERKHCUKl7RgbUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/64443e-03f8-4375-941c-e1d195ac35d2/1/1-iWi8osetikWERKHCUKl7RgbUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:65:e7:f7:f4:4a:88:ee:b4:71:8c:72:7e:f6:af:fe:23:
67:b1:55:31:75:a2:9c:76:1b:e2:ca:9c:77:f4:96:61:68:c5:
80:6e:5f:d0:fb:4e:1f:14:08:f2:77:f2:e5:a8:6b:15:8f:49:
3b:35:96:2f:1d:0e:7b:f4:cb:fc:34:aa:dc:1d:9b:9b:f7:e3:
f3:bc:fa:2a:4a:8a:12:2e:77:3f:5a:39:a3:9a:8c:1e:b0:98:
90:9d:bf:7e:27:5d:a1:f8:c3:f3:83:a1:ef:4a:b4:75:f8:bd:
11:11:5e:56:d4:97:a9:a1:32:0a:db:9c:14:81:5d:53:7c:bb:
46:c4:2c:21:c9:ca:10:f0:c0:7e:72:be:6b:d9:c2:2c:92:c8:
f2:27:97:68:4a:84:a9:2d:ab:7a:79:96:3d:41:f8:72:f3:78:
1e:a6:8b:78:a8:e9:86:fc:83:a8:06:9c:3e:c0:1c:40:d0:3d:
7e:ac:28:7f:a5:dc:37:e8:3c:d8:a2:e0:d7:83:be:f6:a4:6c:
3f:14:c5:69:e2:4e:04:a4:74:68:e6:24:cd:c3:1f:00:1e:e1:
be:8c:89:7c:01:7f:09:e1:71:81:fa:95:54:c3:98:75:f8:4b:
45:a1:1e:29:28:ab:b7:79:44:3f:5c:4c:9f:cb:21:e4:56:33:
8d:13:79:24
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dxu5CM3oXzlYTyrr9HtDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjVhMmYyOGIxZWI2MjkxNjExMTI4NzA5NDJhNWVkMTgx
YjUxOWYwHhcNMjYwNTEyMjAwMDM2WhcNMjYwNTEzMjAwMDM2WjAzMTEwLwYDVQQD
Eyg0M2FlOTc2M2Y5MmQ0ZDFkZWNhYzJjZWU3Njg2Y2E0NzgxODgwZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/HUy6pDCs6JOZPcbJFJM+nkjt5WY
Or91rDD3wXTxdUKNK6RZY5nlXYjPVnBrJuMYtYjjCoLsLG0iEj9zzl8FdtjjfOB6
5GtUVOw8W/h8TycHe2s9JSzoLIpAIfr910GVk8Ih5pwltL5HX/kgM6eVL/27hU72
757RMoGU2+iSYoECJAwEF8fNGkh61WJv8MB8sPqArAOnfFry3t05vJ0XDpXjJXkK
7WEuT1dUywUpWKOsC4oTCtlHbVKvwxhri7doXxsT/CgOVUlQUoyoR1bp0mHgtQpx
FXDJpVBvH0xGqdCZpDlkwhwBS5iGKmWseMUuJNUjRllP7eTQEE+TADlpkQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEOul2P5LU0d7Kws7naGykeBiA7cMB8GA1UdIwQY
MBaAFPolovKLHrYpFhEShwlCpe0YG1GfMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pV2k4b3NldGlrV0VSS0hDVUtsN1JnYlVaOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvNjQ0NDNlLTAzZjgtNDM3NS05NDFj
LWUxZDE5NWFjMzVkMi8xLzEtaVdpOG9zZXRpa1dFUktIQ1VLbDdSZ2JVWjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5LzY0NDQzZS0wM2Y4LTQzNzUtOTQxYy1lMWQxOTVhYzM1
ZDIvMS8xLWlXaThvc2V0aWtXRVJLSENVS2w3UmdiVVo4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFVl
5/f0SojutHGMcn72r/4jZ7FVMXWinHYb4sqcd/SWYWjFgG5f0PtOHxQI8nfy5ahr
FY9JOzWWLx0Oe/TL/DSq3B2bm/fj87z6KkqKEi53P1o5o5qMHrCYkJ2/fiddofjD
84Oh70q0dfi9ERFeVtSXqaEyCtucFIFdU3y7RsQsIcnKEPDAfnK+a9nCLJLI8ieX
aEqEqS2renmWPUH4cvN4HqaLeKjphvyDqAacPsAcQNA9fqwof6XcN+g82KLg14O+
9qRsPxTFaeJOBKR0aOYkzcMfAB7hvoyJfAF/CeFxgfqVVMOYdfhLRaEeKSirt3lE
P1xMn8sh5FYzjRN5JA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:00:27 2026 by rpki-client