Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: zajKapmxaRRpluEMpn9DgXW0wfWuZ0PpnZ5q1s4JUmU=
Subject key identifier: CD:73:26:C3:88:65:58:67:A1:BA:2B:FA:C4:22:06:2A:AE:D6:DA:5A
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019E31F31E7AAE316D6DAC929E433BA188EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 18A3
Signing time: Sat 16 May 2026 18:01:17 +0000
Manifest this update: Sat 16 May 2026 18:01:17 +0000
Manifest next update: Sun 17 May 2026 18:01:17 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: Ig9AFrZKremNp6MuhZH9rHGYxgp/441FOHRnnKjNYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:1e:7a:ae:31:6d:6d:ac:92:9e:43:3b:a1:88:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: May 16 18:01:17 2026 GMT
Not After : May 17 18:01:17 2026 GMT
Subject: CN=cd7326c388655867a1ba2bfac422062aaed6da5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:90:db:68:01:65:ce:96:a4:8b:38:f9:40:
53:18:9a:51:75:1c:60:5b:70:32:65:3d:fd:3a:e5:
78:9e:7a:33:9e:74:e0:f4:40:ff:17:67:db:1e:06:
4b:54:a0:94:57:6c:69:79:ff:b6:98:d4:a0:5e:77:
fa:bf:94:3c:77:62:b6:29:96:97:64:ba:6d:de:ef:
a4:71:57:50:38:e9:5a:af:07:43:19:1f:be:9b:68:
a0:03:0a:6c:99:d7:0a:9f:61:eb:7b:7d:4c:4a:c5:
7a:c5:27:8f:cb:78:2a:f9:67:d9:66:cf:9d:ff:a2:
3b:a8:1e:a9:31:98:45:c0:bf:05:80:de:c6:64:e8:
57:9c:a1:5a:be:70:65:06:6d:5f:2a:e8:6b:c0:55:
5b:57:62:ec:c1:69:57:4b:47:e6:09:85:2f:bc:84:
1f:b9:7c:57:aa:c6:22:53:92:e0:95:8d:ac:63:76:
f4:e0:8b:c4:cc:23:36:a5:6c:ce:30:68:3e:09:a8:
97:46:71:c0:9a:e0:db:c6:97:1a:96:fc:76:d8:a9:
89:91:77:cc:61:2b:39:43:fa:6a:1d:16:25:4c:c1:
05:88:69:38:df:3b:7a:59:d2:b8:7d:4f:61:eb:c2:
d6:c7:43:21:21:a3:eb:3d:f0:78:d1:b5:da:62:0a:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:26:C3:88:65:58:67:A1:BA:2B:FA:C4:22:06:2A:AE:D6:DA:5A
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:77:21:28:a1:23:7e:32:b7:38:98:a1:5a:61:41:97:52:29:
18:57:3f:45:89:8c:3e:8e:f7:ae:f4:61:15:8c:98:72:72:c2:
c5:f3:2d:d2:f7:91:6c:b7:77:4b:46:fa:0b:9e:ca:52:07:bf:
64:b9:7b:f1:a4:04:30:89:cc:f6:d0:bf:f9:25:a0:d9:fd:a2:
ee:dc:46:58:72:83:88:e7:57:96:4e:21:d4:84:45:17:84:39:
40:be:de:b1:cb:f7:e9:19:3c:35:ad:45:01:9f:76:44:a9:7e:
47:c2:b6:5f:f4:9a:5a:7a:7d:d6:3d:34:44:8e:ee:e0:0f:81:
5c:9e:e3:f6:c8:0e:07:89:e5:50:8f:59:1c:d7:33:24:25:5e:
51:5b:cd:d9:c0:17:1c:8c:c9:bb:05:d4:1a:7d:9d:f7:78:78:
cc:74:f9:38:0e:41:a1:c8:c0:2b:5d:ca:6f:22:ab:58:5a:f4:
3c:fc:d0:85:6c:5a:32:7e:95:bc:6a:70:7f:69:52:84:ca:8d:
b4:49:14:9b:20:de:43:5f:77:1d:0d:1d:a2:fa:40:ec:fc:19:
04:06:51:a3:f4:a1:4b:bb:b8:16:27:76:f8:ce:ed:22:d1:ae:
a9:9d:0a:49:b1:c8:78:92:37:30:ae:a7:5b:4f:6e:3d:d3:c8:
8b:ef:21:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8x56rjFtbaySnkM7oYjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1
OWQ1ZTUwHhcNMjYwNTE2MTgwMTE3WhcNMjYwNTE3MTgwMTE3WjAzMTEwLwYDVQQD
EyhjZDczMjZjMzg4NjU1ODY3YTFiYTJiZmFjNDIyMDYyYWFlZDZkYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJuQ22gBZc6WpIs4+UBTGJpRdRxg
W3AyZT39OuV4nnoznnTg9ED/F2fbHgZLVKCUV2xpef+2mNSgXnf6v5Q8d2K2KZaX
ZLpt3u+kcVdQOOlarwdDGR++m2igAwpsmdcKn2Hre31MSsV6xSePy3gq+WfZZs+d
/6I7qB6pMZhFwL8FgN7GZOhXnKFavnBlBm1fKuhrwFVbV2LswWlXS0fmCYUvvIQf
uXxXqsYiU5LglY2sY3b04IvEzCM2pWzOMGg+CaiXRnHAmuDbxpcalvx22KmJkXfM
YSs5Q/pqHRYlTMEFiGk43zt6WdK4fU9h68LWx0MhIaPrPfB40bXaYgoHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1zJsOIZVhnobor+sQiBiqu1tpaMB8GA1UdIwQY
MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt
N2ZiMDU5MjBlMjI4LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4
LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinchKKEj
fjK3OJihWmFBl1IpGFc/RYmMPo73rvRhFYyYcnLCxfMt0veRbLd3S0b6C57KUge/
ZLl78aQEMInM9tC/+SWg2f2i7txGWHKDiOdXlk4h1IRFF4Q5QL7escv36Rk8Na1F
AZ92RKl+R8K2X/SaWnp91j00RI7u4A+BXJ7j9sgOB4nlUI9ZHNczJCVeUVvN2cAX
HIzJuwXUGn2d93h4zHT5OA5BocjAK13KbyKrWFr0PPzQhWxaMn6VvGpwf2lShMqN
tEkUmyDeQ193HQ0dovpA7PwZBAZRo/ShS7u4Fid2+M7tItGuqZ0KSbHIeJI3MK6n
W09uPdPIi+8hpQ==
-----END CERTIFICATE-----
Generated at Sat May 16 22:41:22 2026 by rpki-client