Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
File: Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft (raw, json)
Hash identifier: Ml1Of88HI54/Q0fiYGD9Tp4jdTqCxxLgo1gyIILg3hM=
Subject key identifier: 97:B0:57:D4:F5:CA:46:0D:07:48:68:C5:46:30:5B:C3:E0:89:BE:41
Authority key identifier: 22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22
Certificate issuer: /CN=22ce6f80d7670973d32ec4745301011217468822
Certificate serial: 019D3A8AAADCDEE0924DE8CEDBE2FF2B3D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
Manifest number: 0174
Signing time: Sun 29 Mar 2026 17:00:59 +0000
Manifest this update: Sun 29 Mar 2026 17:00:59 +0000
Manifest next update: Mon 30 Mar 2026 17:00:59 +0000
Files and hashes: 1: Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl (hash: iSHT1blYxY73H5P2k7ewvhZlILqiHhR8MkCAotr9Od8=)
2: pxWFbsoMAQLBSDALy0IF8eFc7ac.roa (hash: sA4Q71fkUFI3QlXq81C3J6iGGkQPgi0Z5yBB1wSqgCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:aa:dc:de:e0:92:4d:e8:ce:db:e2:ff:2b:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ce6f80d7670973d32ec4745301011217468822
Validity
Not Before: Mar 29 17:00:59 2026 GMT
Not After : Mar 30 17:00:59 2026 GMT
Subject: CN=97b057d4f5ca460d074868c546305bc3e089be41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:cd:fd:83:5b:77:01:20:e7:32:40:09:7b:
2c:8b:b1:7e:31:e5:d1:b5:e7:e0:1d:bb:44:a7:ca:
e0:b0:01:87:fc:97:91:09:6c:8d:c2:c7:3b:1f:9d:
66:50:6a:31:2f:d4:55:7f:58:fd:43:2c:be:fc:ae:
eb:0e:f3:d3:4d:6b:70:4e:9a:4f:df:dc:47:fb:48:
ba:5b:e4:44:32:b2:b4:52:a9:c2:3d:72:80:d3:b7:
02:bf:fe:de:65:34:0e:43:e1:30:d0:f4:57:2f:a2:
43:e4:43:56:35:30:df:d3:c6:39:af:71:15:7d:f2:
98:0e:02:b1:99:eb:b5:37:9c:f1:7f:0b:5a:03:e9:
54:83:47:19:fd:37:96:8c:b1:62:3b:31:fc:66:73:
45:1d:fe:c8:6a:1d:9c:b6:03:3b:c8:e3:da:b7:27:
de:e0:d0:fd:d4:82:8e:17:88:48:ac:47:28:fb:bb:
6a:22:d0:e9:ec:ed:5f:0a:bc:21:6b:0d:f9:6d:ab:
eb:47:89:07:a8:92:48:8b:04:5b:57:93:35:45:03:
68:c3:8a:19:f5:ce:78:53:a6:b0:bc:30:b0:80:8f:
1f:d4:f4:8a:ee:95:5c:e8:92:d7:22:df:d1:3d:ba:
50:a8:4f:01:d0:5b:36:2d:07:d3:af:19:bb:b0:18:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:57:D4:F5:CA:46:0D:07:48:68:C5:46:30:5B:C3:E0:89:BE:41
X509v3 Authority Key Identifier:
keyid:22:CE:6F:80:D7:67:09:73:D3:2E:C4:74:53:01:01:12:17:46:88:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Is5vgNdnCXPTLsR0UwEBEhdGiCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7274ff-2516-42da-95d5-5aabde311fdb/1/Is5vgNdnCXPTLsR0UwEBEhdGiCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:15:3c:99:62:6a:4b:36:e0:19:c8:82:79:d6:5f:a1:39:af:
50:9c:3a:63:32:2d:f3:0b:41:db:73:33:e0:3d:46:95:3d:51:
76:e7:c2:00:dc:e9:14:95:15:07:38:42:54:b1:76:34:f3:e0:
ec:d1:08:8a:63:50:c3:62:5b:c4:59:4e:3f:78:28:b3:eb:ed:
dd:21:95:4a:67:d4:f5:b6:5c:70:78:c3:4e:97:04:92:74:b5:
27:95:55:79:62:de:b7:60:42:76:e3:73:ba:b5:47:34:c8:f2:
92:9c:ef:6e:2a:2f:c6:07:9f:4b:5a:f6:17:8d:ab:00:60:57:
3a:42:5b:25:68:9d:e9:60:bc:76:a2:d1:63:ff:65:6a:48:a7:
35:db:03:fa:a3:f1:6b:59:25:bf:6a:0a:33:8d:8f:99:2e:e9:
37:d3:f5:d3:7e:31:72:fd:9c:ee:d8:07:9c:b9:7e:8b:3f:66:
b9:3f:3d:cc:b9:71:60:2b:41:20:61:18:71:2d:ef:ab:59:57:
7d:48:f4:33:6c:94:a0:a0:6a:a2:c2:45:fe:1e:ed:50:2c:e6:
94:2f:e8:a5:ce:b3:8c:47:a5:16:8e:99:09:84:ea:17:49:9f:
48:b7:d5:3a:52:c0:2d:f0:35:c1:9b:11:75:a2:16:31:3c:b7:
da:4c:e4:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06iqrc3uCSTejO2+L/Kz0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyY2U2ZjgwZDc2NzA5NzNkMzJlYzQ3NDUzMDEwMTEyMTc0
Njg4MjIwHhcNMjYwMzI5MTcwMDU5WhcNMjYwMzMwMTcwMDU5WjAzMTEwLwYDVQQD
Eyg5N2IwNTdkNGY1Y2E0NjBkMDc0ODY4YzU0NjMwNWJjM2UwODliZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZfN/YNbdwEg5zJACXssi7F+MeXR
tefgHbtEp8rgsAGH/JeRCWyNwsc7H51mUGoxL9RVf1j9Qyy+/K7rDvPTTWtwTppP
39xH+0i6W+REMrK0UqnCPXKA07cCv/7eZTQOQ+Ew0PRXL6JD5ENWNTDf08Y5r3EV
ffKYDgKxmeu1N5zxfwtaA+lUg0cZ/TeWjLFiOzH8ZnNFHf7Iah2ctgM7yOPatyfe
4ND91IKOF4hIrEco+7tqItDp7O1fCrwhaw35bavrR4kHqJJIiwRbV5M1RQNow4oZ
9c54U6awvDCwgI8f1PSK7pVc6JLXIt/RPbpQqE8B0Fs2LQfTrxm7sBjcKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJewV9T1ykYNB0hoxUYwW8Pgib5BMB8GA1UdIwQY
MBaAFCLOb4DXZwlz0y7EdFMBARIXRogiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUt
NWFhYmRlMzExZmRiLzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83Mjc0ZmYtMjUxNi00MmRhLTk1ZDUtNWFhYmRlMzExZmRi
LzEvSXM1dmdOZG5DWFBUTHNSMFV3RUJFaGRHaUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRU8mWJq
SzbgGciCedZfoTmvUJw6YzIt8wtB23Mz4D1GlT1RdufCANzpFJUVBzhCVLF2NPPg
7NEIimNQw2JbxFlOP3gos+vt3SGVSmfU9bZccHjDTpcEknS1J5VVeWLet2BCduNz
urVHNMjykpzvbiovxgefS1r2F42rAGBXOkJbJWid6WC8dqLRY/9lakinNdsD+qPx
a1klv2oKM42PmS7pN9P1034xcv2c7tgHnLl+iz9muT89zLlxYCtBIGEYcS3vq1lX
fUj0M2yUoKBqosJF/h7tUCzmlC/opc6zjEelFo6ZCYTqF0mfSLfVOlLALfA1wZsR
daIWMTy32kzkfA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:41 2026 by rpki-client