Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: RVx9dvBqNHOe09mQvqfKfTS1w1dyHkB79aTn4itEf4U=
Subject key identifier: 79:91:2D:27:D5:10:61:6A:9D:6E:72:F8:B4:B8:F0:8B:A3:81:2C:FC
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 019E31F39725952D8F3536CB90CF3EE14271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 18:01:47 +0000
Manifest this update: Sat 16 May 2026 18:01:47 +0000
Manifest next update: Sun 17 May 2026 18:01:47 +0000
Files and hashes: 1: WJZilYaZAHsOAmj637C-MdulMxc.roa (hash: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: o221MAz3yYZjhJGOpis33RgeI8obbyovRUMUMAilB70=)
3: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (hash: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 18:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:97:25:95:2d:8f:35:36:cb:90:cf:3e:e1:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: May 16 18:01:47 2026 GMT
Not After : May 17 18:01:47 2026 GMT
Subject: CN=79912d27d510616a9d6e72f8b4b8f08ba3812cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:3a:b2:6e:96:4d:d2:c7:d5:01:48:c4:1a:
eb:e4:de:0b:25:6a:18:37:87:bd:f6:13:ee:e6:78:
1b:2b:7c:1c:18:28:1f:0c:6f:be:df:c9:2e:0f:69:
4e:ab:42:f4:6b:28:97:9a:ce:1a:f9:22:15:11:3d:
a5:7d:18:01:82:26:da:3e:4e:db:84:50:32:d4:bf:
fa:7b:12:e7:87:21:af:a9:27:3d:fb:a3:92:0f:73:
3f:60:fc:e0:01:92:c5:82:3c:cf:57:a6:be:f6:8f:
f3:6c:83:9b:09:db:2e:74:86:42:8e:6c:63:b8:83:
d7:74:79:a9:8e:03:5e:b8:a9:d2:48:48:05:cb:66:
b8:8b:bd:26:46:b5:0f:8e:01:41:2b:6a:22:63:b1:
6a:7b:12:59:2a:ff:93:79:5b:46:b0:5d:96:b4:cb:
0d:a8:47:ad:c4:59:55:aa:e5:e1:57:ad:1a:54:c1:
ca:6d:7a:1e:19:32:b0:78:5c:f1:2f:fc:5d:be:07:
64:3b:66:c6:02:79:3d:63:21:b4:07:09:87:4f:87:
31:88:6b:fa:b0:d0:3f:4e:fe:11:52:4e:5a:54:12:
96:a8:74:3e:21:7d:a0:9f:46:7d:78:0e:76:33:51:
3a:47:38:29:b4:af:9f:13:6e:c0:e7:00:70:f7:c5:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:2D:27:D5:10:61:6A:9D:6E:72:F8:B4:B8:F0:8B:A3:81:2C:FC
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a3:39:59:83:c3:32:2d:56:4f:e7:50:99:ea:62:d3:81:3c:
66:fb:f3:48:f9:89:85:85:4d:b5:54:b8:bd:22:6c:b8:b8:78:
ee:3b:30:9c:65:78:05:3b:26:3b:38:6f:1e:d0:db:27:52:45:
14:17:f4:52:ac:ff:46:72:30:04:61:f4:31:35:00:7d:d9:a9:
f1:5d:11:86:c0:53:97:c4:34:a1:2a:d2:2b:07:d3:e8:23:05:
d5:fe:0c:3b:1a:5e:82:06:30:a3:51:2c:a1:c8:8f:9c:ae:dc:
61:36:d2:72:c0:89:b2:00:26:b7:47:4b:09:00:3b:7f:c8:13:
55:7f:f0:84:1a:93:d8:02:6b:90:8d:75:9e:4f:18:13:dd:af:
9b:c0:61:7b:e4:1e:20:57:2f:c3:0c:28:63:f2:44:38:ff:b7:
fc:29:fc:c4:48:92:12:62:17:86:80:60:dd:2a:ee:9d:99:91:
ef:af:e3:91:f0:d1:c7:da:92:8d:2d:da:58:92:f0:b2:8c:5d:
1c:64:fa:f1:d0:58:1a:83:f5:cd:69:37:5b:8e:10:62:50:3d:
e7:95:b0:17:58:50:9b:8a:4f:e8:64:e0:5d:da:38:1e:1d:44:
27:b3:14:81:b0:66:d1:56:56:e8:fe:d2:f2:92:16:0c:5c:a1:
c6:21:3c:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x85cllS2PNTbLkM8+4UJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MmQyMTU2NmNjZmMzYmIwNzllYzU4NTRiMDQ0YWI4MDk4
MDQxNTcwHhcNMjYwNTE2MTgwMTQ3WhcNMjYwNTE3MTgwMTQ3WjAzMTEwLwYDVQQD
Eyg3OTkxMmQyN2Q1MTA2MTZhOWQ2ZTcyZjhiNGI4ZjA4YmEzODEyY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaM6sm6WTdLH1QFIxBrr5N4LJWoY
N4e99hPu5ngbK3wcGCgfDG++38kuD2lOq0L0ayiXms4a+SIVET2lfRgBgibaPk7b
hFAy1L/6exLnhyGvqSc9+6OSD3M/YPzgAZLFgjzPV6a+9o/zbIObCdsudIZCjmxj
uIPXdHmpjgNeuKnSSEgFy2a4i70mRrUPjgFBK2oiY7FqexJZKv+TeVtGsF2WtMsN
qEetxFlVquXhV60aVMHKbXoeGTKweFzxL/xdvgdkO2bGAnk9YyG0BwmHT4cxiGv6
sNA/Tv4RUk5aVBKWqHQ+IX2gn0Z9eA52M1E6RzgptK+fE27A5wBw98XfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmRLSfVEGFqnW5y+LS48IujgSz8MB8GA1UdIwQY
MBaAFIktIVZsz8O7B57FhUsESrgJgEFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMt
NGViOGIwYjQ5YzRhLzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kNTk3YjAtNjQyNS00MjVmLWI3MjMtNGViOGIwYjQ5YzRh
LzEvaVMwaFZtelB3N3NIbnNXRlN3Ukt1QW1BUVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqM5WYPD
Mi1WT+dQmepi04E8ZvvzSPmJhYVNtVS4vSJsuLh47jswnGV4BTsmOzhvHtDbJ1JF
FBf0Uqz/RnIwBGH0MTUAfdmp8V0RhsBTl8Q0oSrSKwfT6CMF1f4MOxpeggYwo1Es
ociPnK7cYTbScsCJsgAmt0dLCQA7f8gTVX/whBqT2AJrkI11nk8YE92vm8Bhe+Qe
IFcvwwwoY/JEOP+3/Cn8xEiSEmIXhoBg3SrunZmR76/jkfDRx9qSjS3aWJLwsoxd
HGT68dBYGoP1zWk3W44QYlA955WwF1hQm4pP6GTgXdo4Hh1EJ7MUgbBm0VZW6P7S
8pIWDFyhxiE8SA==
-----END CERTIFICATE-----
Generated at Sun May 17 03:02:33 2026 by rpki-client