Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: WeR+Ib5mTGaBnWVIhBL7wYUwJ03sP5uT1iba+wusYXQ=
Subject key identifier: CE:B3:CE:0F:0B:FD:97:EE:8C:5F:3D:8B:7F:C8:58:68:4A:A2:46:6D
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019E1C7DF01B6F4B5AB0F7A7B832039E4AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 14:01:15 +0000
Manifest this update: Tue 12 May 2026 14:01:15 +0000
Manifest next update: Wed 13 May 2026 14:01:15 +0000
Files and hashes: 1: GxGTOBMeu2N1blMJyGtOJ7pqxXk.roa (hash: zCml5uGaaanR/bHz+EfmHiD1+eZh00uY8Hx7W5hVHSg=)
2: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: iaTSIy4vf+f4jzWAmQ5wDWaJpn6tiy14IgloXMq8eS8=)
3: YjNimSSaeGK3n8MwVhk-9Cqv_GI.asa (hash: +F1lNWpsiSJ4ZGqtn3gB2gX0yzl211t0f9qJlyvkLm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:f0:1b:6f:4b:5a:b0:f7:a7:b8:32:03:9e:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: May 12 14:01:15 2026 GMT
Not After : May 13 14:01:15 2026 GMT
Subject: CN=ceb3ce0f0bfd97ee8c5f3d8b7fc858684aa2466d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:bc:03:cb:66:0a:24:ed:b4:37:3e:72:61:
94:4c:59:85:58:6e:35:95:17:1d:6a:4b:4b:4c:42:
c0:33:6f:7b:53:ec:c7:3b:c7:5f:b5:52:5c:49:76:
e1:73:e0:a1:c5:d6:f3:13:a2:0f:2a:0d:43:41:49:
e8:b2:a7:88:2f:26:1e:2b:24:be:ed:a9:aa:25:18:
52:b6:d7:ce:d1:ea:d2:bd:18:b0:99:46:b4:75:63:
03:d4:da:40:57:55:b1:27:0d:15:7b:e4:38:85:9c:
e3:ec:60:dc:6f:cd:13:07:0f:8d:7e:6e:83:a8:8a:
54:87:9e:e1:a2:c3:97:24:1f:8e:8c:4e:d5:3e:50:
e6:f4:9e:2d:9d:6f:b2:69:3a:ea:17:e1:08:01:90:
01:96:ee:e0:23:82:53:37:aa:9e:ae:7d:90:76:2b:
ea:bb:b7:d1:8d:da:92:3a:07:80:4e:db:b8:1f:f7:
71:3c:d8:d2:cb:f7:ef:86:ae:1b:be:f3:f0:59:92:
26:a5:4e:a5:9f:3a:f2:30:10:9e:31:55:23:c5:0b:
ca:07:f0:d1:ee:46:9f:fb:ae:7a:2a:6d:bb:d4:22:
4d:2f:13:4d:67:6d:ac:06:6f:07:a3:be:d7:4a:86:
14:8e:a6:e1:ca:22:cf:44:db:ad:6b:6f:d3:d1:82:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:CE:0F:0B:FD:97:EE:8C:5F:3D:8B:7F:C8:58:68:4A:A2:46:6D
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:9b:bb:7e:fd:1c:a5:5f:21:89:fb:ac:25:b0:44:60:80:1b:
39:b5:6b:d4:d2:36:20:ed:f2:ac:df:16:77:9e:d7:8e:06:d9:
f1:d4:f6:02:42:a6:40:a7:7c:d4:39:8e:df:8e:70:59:fd:ce:
a3:37:a5:53:59:e5:11:aa:0d:d7:49:60:65:c5:bd:67:d6:fe:
f6:27:21:65:af:e0:1b:03:61:a9:ef:8c:68:1a:97:73:ae:14:
16:93:4a:1b:cb:26:23:de:26:cd:73:26:ef:8f:41:e4:39:76:
ab:df:3f:3f:1c:4f:9c:a8:ea:3c:da:1b:e0:63:85:07:aa:57:
69:9f:e0:d1:df:d8:1b:8c:5f:73:b1:c5:36:5b:8a:33:56:32:
f5:56:71:65:1f:52:fd:91:14:5a:e3:0e:c1:dd:bf:5c:24:d0:
44:f8:7d:d2:44:16:20:1c:93:c9:c4:51:56:0e:13:56:d3:5e:
6d:f2:ef:5d:bf:aa:73:ee:7e:63:11:30:b0:d2:97:b4:12:71:
9d:fc:77:cd:a4:5d:74:73:d2:31:51:1b:16:31:1f:5f:2e:2c:
a2:f6:58:1e:77:a0:df:a5:6d:92:9c:bf:da:ab:09:d2:cb:10:
fb:eb:da:08:24:6c:8a:93:38:b2:48:79:e5:7e:fa:f2:4f:67:
f1:8d:95:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cffAbb0tasPenuDIDnkqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4
NzE1NTQwHhcNMjYwNTEyMTQwMTE1WhcNMjYwNTEzMTQwMTE1WjAzMTEwLwYDVQQD
EyhjZWIzY2UwZjBiZmQ5N2VlOGM1ZjNkOGI3ZmM4NTg2ODRhYTI0NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDy8A8tmCiTttDc+cmGUTFmFWG41
lRcdaktLTELAM297U+zHO8dftVJcSXbhc+ChxdbzE6IPKg1DQUnosqeILyYeKyS+
7amqJRhSttfO0erSvRiwmUa0dWMD1NpAV1WxJw0Ve+Q4hZzj7GDcb80TBw+Nfm6D
qIpUh57hosOXJB+OjE7VPlDm9J4tnW+yaTrqF+EIAZABlu7gI4JTN6qern2Qdivq
u7fRjdqSOgeATtu4H/dxPNjSy/fvhq4bvvPwWZImpU6lnzryMBCeMVUjxQvKB/DR
7kaf+656Km271CJNLxNNZ22sBm8Ho77XSoYUjqbhyiLPRNuta2/T0YKiFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6zzg8L/ZfujF89i3/IWGhKokZtMB8GA1UdIwQY
MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt
Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4
LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAypu7fv0c
pV8hifusJbBEYIAbObVr1NI2IO3yrN8Wd57XjgbZ8dT2AkKmQKd81DmO345wWf3O
ozelU1nlEaoN10lgZcW9Z9b+9ichZa/gGwNhqe+MaBqXc64UFpNKG8smI94mzXMm
749B5Dl2q98/PxxPnKjqPNob4GOFB6pXaZ/g0d/YG4xfc7HFNluKM1Yy9VZxZR9S
/ZEUWuMOwd2/XCTQRPh90kQWIByTycRRVg4TVtNebfLvXb+qc+5+YxEwsNKXtBJx
nfx3zaRddHPSMVEbFjEfXy4sovZYHneg36Vtkpy/2qsJ0ssQ++vaCCRsipM4skh5
5X768k9n8Y2Vvg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:23 2026 by rpki-client