Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: GACS9tioNP+YZ5lXprAD6J4vFRS5SmqbX8Pys4465bk=
Subject key identifier: 1D:18:36:3F:02:83:25:37:F4:3A:DD:A9:77:32:17:F2:A0:E6:D9:C9
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019E88DA6E9DBF47F830D37878760C8E4418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1945
Signing time: Tue 02 Jun 2026 15:01:16 +0000
Manifest this update: Tue 02 Jun 2026 15:01:16 +0000
Manifest next update: Wed 03 Jun 2026 15:01:16 +0000
Files and hashes: 1: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: Lom1ZPh864pFDIdNYwR+arnoTU0lTz5DPrkYcIi6c0Q=)
2: iAERyyADNkRh7t11PICWm-ALep4.roa (hash: Gs0IMRFAt2iHOW8BkO2nGyZushivLZn3vc6c0MIS3lQ=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:da:6e:9d:bf:47:f8:30:d3:78:78:76:0c:8e:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jun 2 15:01:16 2026 GMT
Not After : Jun 3 15:01:16 2026 GMT
Subject: CN=1d18363f02832537f43adda9773217f2a0e6d9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:ea:8d:b1:88:05:35:02:f8:81:be:9b:9c:
c0:e4:a4:45:33:52:f5:11:c9:d0:91:93:84:1e:20:
3f:13:2e:7e:79:82:1b:23:ad:03:c0:b6:4b:26:36:
c8:67:25:0d:a5:67:27:56:a1:34:95:fe:e1:50:d7:
1c:53:68:c1:ad:6b:0e:0f:9a:1e:89:6b:83:8e:44:
1e:ba:78:e0:51:3e:91:ce:43:a1:17:a6:79:68:b4:
fd:28:7d:e7:fa:44:dc:cb:f3:72:d5:02:75:29:3a:
62:32:7a:c7:f9:b2:bd:db:9a:9d:9f:d4:4d:56:f0:
ef:dc:52:d1:20:e8:0d:01:b2:96:eb:21:68:c2:e4:
2b:1d:2d:86:9a:2f:7b:af:07:bf:60:dc:cf:56:ea:
84:96:c5:90:1d:bd:be:5b:45:be:27:07:b0:a8:8a:
3e:10:ab:f5:26:6f:c1:ac:ad:33:24:fa:c7:b7:bb:
e5:d8:7e:75:94:85:3e:58:ea:dd:f6:4b:f7:ac:14:
35:73:55:e7:07:3b:5c:a3:ae:f1:46:0a:4a:31:4d:
22:7b:2d:99:16:ff:46:ad:1f:01:4a:f1:4d:06:3e:
cf:68:6e:0a:90:a6:db:cb:f4:e2:a6:88:31:2f:44:
03:31:34:7c:fc:bb:10:54:78:2c:5a:f4:64:86:5a:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:36:3F:02:83:25:37:F4:3A:DD:A9:77:32:17:F2:A0:E6:D9:C9
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:90:b0:8e:64:bc:43:29:9d:38:d8:04:42:b9:1b:a8:59:70:
37:6a:a1:4e:99:0b:b4:1a:2a:a1:07:fd:f9:61:c4:4b:6c:e8:
9e:9e:bb:f6:e3:b7:99:f7:dd:94:3f:42:58:2c:cc:69:73:8f:
e5:35:87:e8:4a:46:01:98:b8:12:f2:52:fe:d1:29:f0:76:23:
c3:02:a8:51:e7:09:3a:c0:63:52:2c:e0:0a:20:10:26:08:b0:
b0:ec:d8:ac:aa:96:c3:01:43:e9:1e:d2:cf:ac:40:95:cc:c5:
5b:65:a6:41:e4:86:7b:dc:d8:5a:80:1a:e7:53:6b:01:6f:0a:
ef:d5:31:8f:83:c5:f8:9c:c1:fc:45:84:22:c8:ac:4e:60:04:
eb:d1:9f:7a:c3:c3:0d:1a:b4:83:9f:4e:15:8d:a7:21:a6:cb:
38:0e:1a:37:da:3f:56:62:5b:d2:72:84:fa:34:ab:05:2a:32:
83:83:3e:85:b6:b4:92:c8:32:05:c2:83:d2:94:93:23:61:07:
90:f0:67:0f:26:f4:ce:4f:62:44:87:a8:ca:ed:4d:e7:9c:18:
15:b7:55:8c:d6:62:d6:ba:31:3f:82:33:6f:17:3e:5e:66:b3:
c6:4b:04:74:c7:3f:6f:92:4c:64:df:50:e1:10:24:e9:d3:7a:
07:c6:f5:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6I2m6dv0f4MNN4eHYMjkQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0
ZTg4NDcwHhcNMjYwNjAyMTUwMTE2WhcNMjYwNjAzMTUwMTE2WjAzMTEwLwYDVQQD
EygxZDE4MzYzZjAyODMyNTM3ZjQzYWRkYTk3NzMyMTdmMmEwZTZkOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZPqjbGIBTUC+IG+m5zA5KRFM1L1
EcnQkZOEHiA/Ey5+eYIbI60DwLZLJjbIZyUNpWcnVqE0lf7hUNccU2jBrWsOD5oe
iWuDjkQeunjgUT6RzkOhF6Z5aLT9KH3n+kTcy/Ny1QJ1KTpiMnrH+bK925qdn9RN
VvDv3FLRIOgNAbKW6yFowuQrHS2Gmi97rwe/YNzPVuqElsWQHb2+W0W+JwewqIo+
EKv1Jm/BrK0zJPrHt7vl2H51lIU+WOrd9kv3rBQ1c1XnBztco67xRgpKMU0iey2Z
Fv9GrR8BSvFNBj7PaG4KkKbby/TipogxL0QDMTR8/LsQVHgsWvRkhlqpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0YNj8CgyU39DrdqXcyF/Kg5tnJMB8GA1UdIwQY
MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt
NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl
LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZCwjmS8
QymdONgEQrkbqFlwN2qhTpkLtBoqoQf9+WHES2zonp679uO3mffdlD9CWCzMaXOP
5TWH6EpGAZi4EvJS/tEp8HYjwwKoUecJOsBjUizgCiAQJgiwsOzYrKqWwwFD6R7S
z6xAlczFW2WmQeSGe9zYWoAa51NrAW8K79Uxj4PF+JzB/EWEIsisTmAE69GfesPD
DRq0g59OFY2nIabLOA4aN9o/VmJb0nKE+jSrBSoyg4M+hba0ksgyBcKD0pSTI2EH
kPBnDyb0zk9iRIeoyu1N55wYFbdVjNZi1roxP4Izbxc+XmazxksEdMc/b5JMZN9Q
4RAk6dN6B8b14A==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:51:14 2026 by rpki-client