Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: 2ngqpsEnYEglrTA03Wci/aEf0CKKNUPtDENs5uBfuNE=
Subject key identifier: 21:FE:4F:25:1C:17:93:02:4A:55:6D:CD:C7:C7:4D:FB:E9:F8:91:FB
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 019E4F59284B4F8CE5A2F24E22E90E984B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 185E
Signing time: Fri 22 May 2026 11:01:43 +0000
Manifest this update: Fri 22 May 2026 11:01:43 +0000
Manifest next update: Sat 23 May 2026 11:01:43 +0000
Files and hashes: 1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: JYj1brGGHFE1Tzn4G2MmxkufWsGtmnVaZUyZJYZWERI=)
4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:59:28:4b:4f:8c:e5:a2:f2:4e:22:e9:0e:98:4b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: May 22 11:01:43 2026 GMT
Not After : May 23 11:01:43 2026 GMT
Subject: CN=21fe4f251c1793024a556dcdc7c74dfbe9f891fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:aa:5a:2c:e1:bc:db:4c:d5:7c:eb:db:ff:
b1:60:32:d2:be:50:61:b2:72:c1:0b:79:a6:c3:d5:
da:1f:4d:3b:5c:cc:bc:18:b5:28:84:10:9e:1c:02:
f0:d1:e6:95:5e:55:0c:c9:a2:a4:e5:b5:bb:62:bc:
91:0f:f2:7e:64:4a:01:ba:9d:8e:f8:cc:4f:4d:b5:
12:9f:cd:bb:89:69:6f:4b:ad:ee:c7:08:e8:ee:fa:
45:c5:54:2d:cd:0a:8f:35:48:90:db:c7:8b:73:7c:
58:05:71:2a:69:2f:08:11:9d:0f:3b:c1:e1:a3:d2:
9f:d0:13:66:85:bc:af:5a:41:a1:eb:3d:9c:77:1f:
1a:b6:51:7e:ba:30:f0:3e:90:1e:60:9b:94:68:ce:
8e:82:5e:d1:a2:9f:b5:c0:e6:ca:fc:53:88:86:2f:
b9:44:5c:1a:0b:e2:fe:e3:65:c1:08:73:a9:b9:5e:
3f:97:2a:93:30:77:1d:cf:4b:11:4b:0b:d0:7b:7b:
ce:6b:ec:29:98:16:d8:6e:e8:fe:53:02:42:21:d9:
fd:13:c6:a7:98:c4:45:03:9b:d7:b0:0f:77:80:aa:
1d:45:b9:b1:93:ed:f4:e3:a8:91:56:e9:8d:7f:c5:
be:44:33:9d:12:f4:70:8c:6e:19:5d:3a:e1:ad:7d:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FE:4F:25:1C:17:93:02:4A:55:6D:CD:C7:C7:4D:FB:E9:F8:91:FB
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:27:7a:41:16:18:bd:ad:82:5a:88:c9:75:7e:3e:0b:41:de:
bf:26:ee:f3:4b:23:74:be:86:39:3e:31:00:46:43:11:68:87:
e1:44:f3:f3:6b:44:f8:c1:fd:50:d3:ab:d8:77:ab:6b:a1:89:
6a:7c:6a:d9:27:7e:bd:1c:54:6e:bd:2e:23:f3:0e:0b:d6:d4:
ed:ff:81:44:18:9a:f1:dc:da:4e:b0:96:69:bb:40:0b:e5:9c:
d6:88:dc:d0:5f:3b:64:0e:c6:39:16:ff:ff:31:79:a7:ce:24:
fb:ea:3a:92:f2:6a:30:d1:2b:4b:20:fa:15:66:20:32:ae:68:
16:b6:d4:9d:01:a4:d2:6a:78:ab:cc:b3:4a:6e:00:32:c1:1c:
59:bd:ac:51:41:3c:5f:1b:fb:0f:46:f3:a1:ec:7c:35:5f:f4:
d9:d9:c1:a1:53:a6:a6:a8:a7:67:27:47:47:67:55:49:b0:a5:
76:46:44:5e:f6:e2:d0:43:ee:36:b1:40:9f:cd:6c:aa:30:4a:
3f:dc:cb:2f:0f:68:05:d6:14:35:d0:35:df:24:90:a0:72:92:
f0:cd:a9:d0:23:79:2d:a4:f2:30:fb:4d:03:a2:fc:b1:d0:52:
d1:32:4f:de:6a:d5:88:50:ee:4a:85:d8:2f:f2:0d:c3:06:11:
3d:e4:f9:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PWShLT4zlovJOIukOmEsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0
YmExYzkwHhcNMjYwNTIyMTEwMTQzWhcNMjYwNTIzMTEwMTQzWjAzMTEwLwYDVQQD
EygyMWZlNGYyNTFjMTc5MzAyNGE1NTZkY2RjN2M3NGRmYmU5Zjg5MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bOqWizhvNtM1Xzr2/+xYDLSvlBh
snLBC3mmw9XaH007XMy8GLUohBCeHALw0eaVXlUMyaKk5bW7YryRD/J+ZEoBup2O
+MxPTbUSn827iWlvS63uxwjo7vpFxVQtzQqPNUiQ28eLc3xYBXEqaS8IEZ0PO8Hh
o9Kf0BNmhbyvWkGh6z2cdx8atlF+ujDwPpAeYJuUaM6Ogl7Rop+1wObK/FOIhi+5
RFwaC+L+42XBCHOpuV4/lyqTMHcdz0sRSwvQe3vOa+wpmBbYbuj+UwJCIdn9E8an
mMRFA5vXsA93gKodRbmxk+3046iRVumNf8W+RDOdEvRwjG4ZXTrhrX3WVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCH+TyUcF5MCSlVtzcfHTfvp+JH7MB8GA1UdIwQY
MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt
Zjc0MmYzOTVhYWY5LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5
LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyd6QRYY
va2CWojJdX4+C0Hevybu80sjdL6GOT4xAEZDEWiH4UTz82tE+MH9UNOr2Hera6GJ
anxq2Sd+vRxUbr0uI/MOC9bU7f+BRBia8dzaTrCWabtAC+Wc1ojc0F87ZA7GORb/
/zF5p84k++o6kvJqMNErSyD6FWYgMq5oFrbUnQGk0mp4q8yzSm4AMsEcWb2sUUE8
Xxv7D0bzoex8NV/02dnBoVOmpqinZydHR2dVSbCldkZEXvbi0EPuNrFAn81sqjBK
P9zLLw9oBdYUNdA13ySQoHKS8M2p0CN5LaTyMPtNA6L8sdBS0TJP3mrViFDuSoXY
L/INwwYRPeT59Q==
-----END CERTIFICATE-----
Generated at Fri May 22 15:17:33 2026 by rpki-client