Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File: IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier: dkEEtEzrOTecPLfTeCgbhawBLw2ADDkjVcqxDU43No8=
Subject key identifier: 9B:61:16:DD:BA:0E:58:3B:9D:8D:0D:4D:72:59:F8:A3:2B:17:E4:CB
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer: /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial: 019E1FED02271064915369A9C30C4348C3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number: 0308
Signing time: Wed 13 May 2026 06:01:26 +0000
Manifest this update: Wed 13 May 2026 06:01:26 +0000
Manifest next update: Thu 14 May 2026 06:01:26 +0000
Files and hashes: 1: 22kXg7xf4hDGwOoAw5-fWOWJfAA.roa (hash: cpOr11AfreVHBfuYQClf+ALOc3Cqd07MrEUHhvuSD7Y=)
2: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: FKmVO1jDtmotUtQPJwS8cTzKWyCImLNfwju0tgN5u4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:02:27:10:64:91:53:69:a9:c3:0c:43:48:c3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Validity
Not Before: May 13 06:01:26 2026 GMT
Not After : May 14 06:01:26 2026 GMT
Subject: CN=9b6116ddba0e583b9d8d0d4d7259f8a32b17e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:f3:27:e3:32:28:25:94:ee:47:e3:06:90:
62:02:d8:f5:af:ab:f6:92:56:33:5a:02:62:23:41:
24:1e:7c:dd:dc:6b:fa:08:3b:7a:d2:66:18:a9:3a:
a5:01:e1:b7:1a:95:13:48:ec:49:7f:37:78:d0:a3:
b7:10:73:01:cf:97:6c:44:eb:1f:36:0c:c7:50:c8:
11:c9:ee:9d:30:0b:5e:89:f3:9f:6f:30:89:07:b5:
50:fd:a9:14:bc:e1:37:ea:1a:87:2b:fb:0b:44:e1:
61:b2:fc:ce:4e:b6:79:53:dc:9e:8c:e3:23:0e:fa:
c4:70:86:61:dc:6d:8e:2c:0c:b1:a5:f2:88:40:1a:
d5:1d:04:35:3b:bc:47:6e:86:1f:38:fb:9c:bc:46:
9a:ff:1f:11:cf:0f:8c:88:1d:54:99:3f:e5:d3:ff:
fa:36:94:4a:99:24:d7:53:5d:e8:d9:86:f4:9f:55:
91:3d:07:c2:23:ee:29:25:29:ad:64:28:19:61:96:
bc:70:32:52:6e:05:b4:fa:70:41:52:b8:5b:70:39:
f6:bd:b0:e6:80:9d:c6:3c:76:0a:f6:eb:97:39:90:
23:b3:02:e1:32:fb:cd:1d:3d:bf:23:e2:d1:6e:96:
cb:cd:6d:50:55:4d:f7:b0:06:21:ec:97:5f:40:24:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:61:16:DD:BA:0E:58:3B:9D:8D:0D:4D:72:59:F8:A3:2B:17:E4:CB
X509v3 Authority Key Identifier:
keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:02:99:b1:7d:b6:20:4a:4a:ec:70:18:27:9b:17:59:d9:
2c:1e:8f:e0:fc:30:f3:1c:05:ad:53:5b:51:60:7e:58:8d:b4:
4c:c4:6a:7a:ef:ab:c4:0c:81:69:e0:52:bb:c3:a0:c2:40:9a:
35:6c:36:62:9c:e9:4a:80:2f:5e:70:fe:9f:b2:82:cb:a4:3d:
24:06:48:23:e6:63:30:02:64:4c:41:70:06:d3:86:0f:c4:0d:
96:e6:b1:ee:0e:25:00:69:7e:66:cb:62:fe:1a:5b:59:f9:32:
a7:46:3c:2e:4c:f4:ab:68:7f:ff:60:2c:54:cb:10:33:a9:3d:
12:83:c0:f5:98:2f:f7:f5:c9:af:bc:86:2d:8c:62:31:80:eb:
30:9d:d4:78:8e:1e:48:46:a3:55:80:f9:7c:57:b9:41:b1:92:
86:9c:ed:ed:f3:0a:ab:c8:d3:ca:b9:30:30:1c:27:bd:54:19:
0b:a5:c4:e5:c2:08:cb:d2:5c:a3:a2:50:c7:1d:2d:14:5e:fb:
bb:55:85:ef:b6:b9:97:ae:4d:01:fe:7e:95:f2:b0:95:2b:bf:
d6:3b:e5:f2:56:1f:70:58:30:f5:5b:41:13:60:9b:82:87:51:
1f:8e:14:04:0d:3f:be:fe:db:b9:e2:87:34:f4:fa:5e:61:09:
19:9e:a4:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4f7QInEGSRU2mpwwxDSMPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTIzZGQwNTg0OWNjODEzMjU1YWI4ZDFiODUzZmI5YzQ1
ZDg2OTQwHhcNMjYwNTEzMDYwMTI2WhcNMjYwNTE0MDYwMTI2WjAzMTEwLwYDVQQD
Eyg5YjYxMTZkZGJhMGU1ODNiOWQ4ZDBkNGQ3MjU5ZjhhMzJiMTdlNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0nzJ+MyKCWU7kfjBpBiAtj1r6v2
klYzWgJiI0EkHnzd3Gv6CDt60mYYqTqlAeG3GpUTSOxJfzd40KO3EHMBz5dsROsf
NgzHUMgRye6dMAteifOfbzCJB7VQ/akUvOE36hqHK/sLROFhsvzOTrZ5U9yejOMj
DvrEcIZh3G2OLAyxpfKIQBrVHQQ1O7xHboYfOPucvEaa/x8Rzw+MiB1UmT/l0//6
NpRKmSTXU13o2Yb0n1WRPQfCI+4pJSmtZCgZYZa8cDJSbgW0+nBBUrhbcDn2vbDm
gJ3GPHYK9uuXOZAjswLhMvvNHT2/I+LRbpbLzW1QVU33sAYh7JdfQCSBXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJthFt26Dlg7nY0NTXJZ+KMrF+TLMB8GA1UdIwQY
MBaAFCDiPdBYScyBMlWrjRuFP7nEXYaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYt
Yjg4OGEzMTI0NDU0LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9jMTY3MTctODU1ZC00MzkxLWI3OWYtYjg4OGEzMTI0NDU0
LzEvSU9JOTBGaEp6SUV5VmF1Tkc0VV91Y1JkaHBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPECmbF9
tiBKSuxwGCebF1nZLB6P4Pww8xwFrVNbUWB+WI20TMRqeu+rxAyBaeBSu8OgwkCa
NWw2YpzpSoAvXnD+n7KCy6Q9JAZII+ZjMAJkTEFwBtOGD8QNluax7g4lAGl+Zsti
/hpbWfkyp0Y8Lkz0q2h//2AsVMsQM6k9EoPA9Zgv9/XJr7yGLYxiMYDrMJ3UeI4e
SEajVYD5fFe5QbGShpzt7fMKq8jTyrkwMBwnvVQZC6XE5cIIy9Jco6JQxx0tFF77
u1WF77a5l65NAf5+lfKwlSu/1jvl8lYfcFgw9VtBE2CbgodRH44UBA0/vv7bueKH
NPT6XmEJGZ6kUg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:54:00 2026 by rpki-client