Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
File: is0usvBhi3LGRtmX08ld2Da90AY.mft (raw, json)
Hash identifier: N8GLsUSkD+LeF2a3Rgqek+di1xTfwoJOU+ietjN0pLk=
Subject key identifier: 98:49:00:B2:A1:AC:12:04:41:33:89:50:91:3F:A5:0D:EE:97:48:5E
Authority key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Certificate issuer: /CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Certificate serial: 019DD12CA1FE0B384E7138E2C95F87496B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
Manifest number: 0980
Signing time: Mon 27 Apr 2026 23:00:56 +0000
Manifest this update: Mon 27 Apr 2026 23:00:56 +0000
Manifest next update: Tue 28 Apr 2026 23:00:56 +0000
Files and hashes: 1: V4OAXUwr_Yrv_txVxgyVSuzZX3w.roa (hash: XQIlYXeV6ifizyIfOjtUETRq073y4wC5uk9DBtAE+iM=)
2: dnN8Qbgzlqa5jVekVWfdeYwMnr0.roa (hash: 2SBvdtsFiLZ+3pTsa8tg6rA3awhSjVKAsmyNnLuEU6w=)
3: is0usvBhi3LGRtmX08ld2Da90AY.crl (hash: Ir5zMgWBw2U3xV5pleIJDXcbd1kQUUC7+WWqyD9Sjc0=)
4: qEOd0JSRITKmwn_MrAq43anHLe8.roa (hash: Mq7M3zfHqSv4p6zFUAXdeS8k6DJ4Psbdqulheqnt9F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:2c:a1:fe:0b:38:4e:71:38:e2:c9:5f:87:49:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Validity
Not Before: Apr 27 23:00:56 2026 GMT
Not After : Apr 28 23:00:56 2026 GMT
Subject: CN=984900b2a1ac120441338950913fa50dee97485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:4a:18:c7:cb:b8:4a:e7:ad:b9:ca:44:d3:
a0:e4:da:b5:8f:fd:29:94:ee:56:0b:9a:e2:72:0a:
5a:0e:1e:87:4c:1e:83:3a:74:c4:ca:b0:9e:40:cb:
9c:f4:da:81:52:2a:65:55:a4:aa:92:0b:fd:a8:23:
94:1d:61:83:f2:a7:88:a8:4c:d4:b3:83:6f:02:de:
e7:d4:73:81:b8:8c:4b:ea:d0:c9:33:55:c2:02:f1:
2e:b6:f7:3a:c1:34:2f:65:75:c5:e7:bc:9a:4a:45:
8c:1a:1f:60:26:86:b5:b0:8c:0e:44:41:13:76:45:
cd:4c:d1:3c:bd:14:6b:f3:bf:c3:3b:a8:04:9e:07:
a7:f3:71:fc:85:bd:66:40:7b:fb:74:56:77:35:6e:
dc:c4:e9:42:1b:d2:5a:d6:df:29:e3:af:de:90:e9:
40:f2:a9:0f:88:23:e8:2a:a8:fe:68:7d:57:55:55:
0e:70:af:da:5b:b2:72:9c:68:11:01:8e:a2:b3:a5:
20:6a:c3:15:0c:a6:84:53:f5:98:2c:f3:5c:b7:80:
40:22:06:53:d3:fd:38:eb:87:dd:2b:3a:31:53:16:
84:08:92:b3:ba:97:e8:02:3a:08:f1:96:5e:92:a1:
31:c5:c3:26:b1:af:fa:58:21:ce:ae:42:d8:df:c8:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:00:B2:A1:AC:12:04:41:33:89:50:91:3F:A5:0D:EE:97:48:5E
X509v3 Authority Key Identifier:
keyid:8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:43:90:ce:8e:44:40:18:c1:88:5c:15:13:52:25:61:b8:21:
4d:39:df:3b:09:05:a1:45:24:af:35:1c:ac:29:06:37:33:6f:
9d:8b:a8:61:a5:88:e4:72:20:a2:dc:9f:45:1e:29:5a:de:64:
3b:08:ec:05:1e:97:79:c3:20:f7:0f:47:83:15:86:61:26:c6:
86:bf:f1:9d:bb:e0:43:ac:4c:2c:bf:d7:ca:24:e5:c3:8d:10:
2f:5c:41:76:a6:4c:93:1a:68:e7:e5:96:e0:6d:de:7d:74:b5:
35:97:95:15:89:54:f4:fa:54:47:3f:36:32:b3:fb:c2:d6:f5:
e7:6d:97:44:00:f1:02:4a:f9:6c:47:cc:8a:2f:1b:84:0a:b2:
bc:6f:84:e1:d3:9f:a1:2f:e8:30:4b:8e:f5:90:4b:98:55:de:
69:2f:ec:01:90:11:43:2b:17:c7:9b:ef:68:b1:a2:a2:dc:63:
f6:a8:82:fa:07:13:a5:2d:de:a4:a5:db:32:4d:6d:c1:e8:da:
11:37:9c:1f:03:f6:cd:ed:55:91:4e:a4:99:18:de:12:a7:50:
96:a1:ea:34:c8:55:ca:f1:cd:af:f6:dd:b7:af:50:48:17:b8:
13:2e:3d:99:8d:8f:a6:40:97:bd:a6:99:94:c2:90:aa:dc:fc:
7a:33:3d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3RLKH+CzhOcTjiyV+HSWsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhY2QyZWIyZjA2MThiNzJjNjQ2ZDk5N2QzYzk1ZGQ4MzZi
ZGQwMDYwHhcNMjYwNDI3MjMwMDU2WhcNMjYwNDI4MjMwMDU2WjAzMTEwLwYDVQQD
Eyg5ODQ5MDBiMmExYWMxMjA0NDEzMzg5NTA5MTNmYTUwZGVlOTc0ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbxKGMfLuErnrbnKRNOg5Nq1j/0p
lO5WC5ricgpaDh6HTB6DOnTEyrCeQMuc9NqBUiplVaSqkgv9qCOUHWGD8qeIqEzU
s4NvAt7n1HOBuIxL6tDJM1XCAvEutvc6wTQvZXXF57yaSkWMGh9gJoa1sIwOREET
dkXNTNE8vRRr87/DO6gEngen83H8hb1mQHv7dFZ3NW7cxOlCG9Ja1t8p46/ekOlA
8qkPiCPoKqj+aH1XVVUOcK/aW7JynGgRAY6is6UgasMVDKaEU/WYLPNct4BAIgZT
0/0464fdKzoxUxaECJKzupfoAjoI8ZZekqExxcMmsa/6WCHOrkLY38h9ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhJALKhrBIEQTOJUJE/pQ3ul0heMB8GA1UdIwQY
MBaAFIrNLrLwYYtyxkbZl9PJXdg2vdAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjkt
Nzk0YzlkOTI4Y2RjLzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iMDU4N2MtMzFlOC00YTliLWFmNjktNzk0YzlkOTI4Y2Rj
LzEvaXMwdXN2QmhpM0xHUnRtWDA4bGQyRGE5MEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUOQzo5E
QBjBiFwVE1IlYbghTTnfOwkFoUUkrzUcrCkGNzNvnYuoYaWI5HIgotyfRR4pWt5k
OwjsBR6XecMg9w9HgxWGYSbGhr/xnbvgQ6xMLL/XyiTlw40QL1xBdqZMkxpo5+WW
4G3efXS1NZeVFYlU9PpURz82MrP7wtb1522XRADxAkr5bEfMii8bhAqyvG+E4dOf
oS/oMEuO9ZBLmFXeaS/sAZARQysXx5vvaLGiotxj9qiC+gcTpS3epKXbMk1tweja
ETecHwP2ze1VkU6kmRjeEqdQlqHqNMhVyvHNr/bdt69QSBe4Ey49mY2PpkCXvaaZ
lMKQqtz8ejM9sA==
-----END CERTIFICATE-----
Generated at Tue Apr 28 07:27:10 2026 by rpki-client