Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: ZigyhaEbH/LEvk7a9x9KDzn9JAcG6RpKQvtnn/e4uUM=
Subject key identifier: 39:0B:65:0C:60:FC:30:9B:59:E8:F0:68:83:DF:6C:52:79:2D:9F:E2
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 019E4FC68FD002C0F74B14219493C3C79B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 132F
Signing time: Fri 22 May 2026 13:01:13 +0000
Manifest this update: Fri 22 May 2026 13:01:13 +0000
Manifest next update: Sat 23 May 2026 13:01:13 +0000
Files and hashes: 1: FLemcIiElnlySDQ8j4MbhOGXKNY.roa (hash: +hFqqy7o9aLIrhPQ+Vl9O2F3JN7zKRwx0wl2/DYV2As=)
2: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: wEvh61OzhKVKEQDEjP5KXsEIFZRgamUQtgGaw4ELkJQ=)
3: zL0BeH3r9AkOxhITJlCW5Ja8LGo.roa (hash: oLz5pL1eqyWTu6AOPoAU4vUbkw5hVQwpWZe1I3Dg04k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:8f:d0:02:c0:f7:4b:14:21:94:93:c3:c7:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: May 22 13:01:13 2026 GMT
Not After : May 23 13:01:13 2026 GMT
Subject: CN=390b650c60fc309b59e8f06883df6c52792d9fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2b:a4:cb:e4:b7:f3:d9:54:93:c4:78:cf:29:
c4:fb:5d:73:86:96:6b:37:63:ed:84:b1:ea:ec:86:
fc:ae:e6:2d:39:82:f8:c2:c1:f5:21:ce:3e:8d:24:
01:f8:46:ce:36:67:ed:51:67:21:9d:dc:7b:bb:97:
a0:ac:53:49:4d:eb:d7:af:d3:59:0f:59:08:cc:af:
00:c1:0d:ba:80:ed:60:5e:45:0a:f0:79:5e:77:84:
f4:7a:85:64:a9:45:ac:26:3b:4f:a9:3f:26:38:10:
da:7d:73:d3:2d:93:c7:e3:e1:13:d2:b7:9a:f8:51:
c0:86:52:e5:99:7b:96:0f:87:8c:68:76:0e:99:07:
42:71:d1:76:20:01:98:79:c5:bf:26:18:e3:0e:32:
d9:53:dc:f2:1b:24:24:88:cc:23:d5:3f:b8:f3:d1:
2d:f9:93:62:62:0d:70:1f:27:55:30:3f:30:eb:13:
d6:e5:c6:c6:30:c2:d1:9d:e3:ae:3f:94:33:ef:be:
8a:cd:12:2c:1e:e2:9f:65:1b:46:a6:d9:3e:ad:fa:
c7:45:87:4b:40:4e:dd:b8:be:e4:37:04:0d:d3:e0:
86:7e:7a:a5:9c:bc:2c:3b:19:dc:60:f7:1c:ad:21:
c8:15:78:d1:a9:64:5d:63:44:66:fa:e7:17:d9:07:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:65:0C:60:FC:30:9B:59:E8:F0:68:83:DF:6C:52:79:2D:9F:E2
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c6:d6:9e:89:61:0b:34:1e:c0:f9:b6:08:2b:6a:2f:b6:fb:
9f:5d:6b:9b:f9:0c:96:86:a1:3f:6a:85:ba:a0:75:fa:4f:3c:
16:a1:86:c4:0f:5d:0d:29:63:69:bd:c1:ff:3a:72:87:a6:06:
dc:bf:00:46:a3:45:e3:a8:bb:4f:1e:d0:35:e3:ae:36:eb:5c:
32:e6:90:32:99:10:03:df:cf:1a:9e:84:5b:69:a6:4e:bd:7f:
b8:69:48:a1:29:3a:16:fb:0d:ba:4f:f2:cd:bc:fc:45:76:e6:
47:af:e0:cf:3b:77:62:3c:0e:26:5d:03:b0:14:82:16:0b:e1:
17:35:b1:3d:57:b8:40:ce:b3:42:98:33:ef:06:e3:e0:60:d1:
fd:2a:e9:c3:7d:0d:fb:56:c0:06:38:91:04:6e:90:d4:30:97:
4b:db:ed:e8:92:3d:6c:bf:c3:b0:85:d5:d6:2a:f5:72:e8:d8:
cb:5d:ac:83:b5:21:40:4d:d6:65:8f:51:62:2a:0b:6a:3d:9d:
5b:3e:53:c6:07:21:2d:ce:ea:59:0e:fe:88:e1:97:b4:95:3e:
6f:19:dc:09:cb:2f:4f:14:c3:82:9a:e6:dc:f5:e3:af:b6:39:
cd:3b:32:e1:02:e5:0b:58:6e:ae:31:60:3e:c6:1b:a1:ed:27:
a8:11:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:08:02 2026 by rpki-client