Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
File: IEoJZQTNu58vt_0OZkBtUm_hC1o.mft (raw, json)
Hash identifier: 2CdKS7rLtNdnNkqyDr867m5LhnMV/feF43ORxAFjE+Y=
Subject key identifier: 38:35:1B:D7:52:59:00:EB:5F:10:27:15:2F:C4:1E:41:F1:DC:F8:74
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 019E32607FF22B9C9AC8309C5F7FE39203FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
Manifest number: 16D1
Signing time: Sat 16 May 2026 20:00:45 +0000
Manifest this update: Sat 16 May 2026 20:00:45 +0000
Manifest next update: Sun 17 May 2026 20:00:45 +0000
Files and hashes: 1: 2HVbjY7XH7qHKeZZFQnD-Dqb1TQ.roa (hash: L4uIKMCJpumyCtgkJ2Nq73fboi9X5qQpVMHCHCUSm5E=)
2: 9s39xRIy0ovz43_NNnpZQL7J2kk.roa (hash: oPXpQgKbn2LA/+wlfEIifDrWhGCahORiCPFzylNJltg=)
3: D3zo566csEJxsSuOjYFYuiagAus.roa (hash: hZemx0XbhR2p5mQq1jR04oMUitubYwSob8P7B6vzNuo=)
4: EKLPu-_BXps6P12RURAY7iZU_Qk.roa (hash: ykX7VmPm8Crpc7Smnx81p8a2FlVCkIIlwpsXdmp3GNI=)
5: IEoJZQTNu58vt_0OZkBtUm_hC1o.crl (hash: Vn2CwVHUrvC4/sfu6itiYHDDIMzLJWT+fqlcOgyGpbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:60:7f:f2:2b:9c:9a:c8:30:9c:5f:7f:e3:92:03:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: May 16 20:00:45 2026 GMT
Not After : May 17 20:00:45 2026 GMT
Subject: CN=38351bd7525900eb5f1027152fc41e41f1dcf874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:f5:0c:76:e1:1e:a2:ae:58:ac:66:fa:38:
b5:a2:8b:53:5b:fc:75:c6:13:d5:d0:70:fa:13:60:
03:fb:c2:c5:39:3a:f0:4b:93:fa:82:fe:7a:0a:66:
05:da:f1:37:35:a7:90:b8:1c:88:1b:c8:db:85:32:
18:9c:f4:8b:8a:cd:71:39:d9:63:ed:f5:c5:d5:d3:
2a:6a:ef:35:11:0f:90:fa:37:29:13:f5:df:f1:ca:
60:9d:7d:6a:ed:99:f8:e9:c6:98:29:ce:b8:79:d0:
08:17:93:0a:aa:be:3b:be:bd:87:09:2d:d7:39:f7:
23:e4:6e:f6:37:65:58:d5:63:87:50:d0:72:e5:ea:
94:f3:1f:f7:36:f5:6e:fe:e3:14:05:27:34:a0:18:
c5:42:f1:96:59:58:35:fc:3f:e5:2a:23:4b:9f:8b:
ec:2a:77:c7:7a:5f:43:4d:a8:e8:0f:9b:c6:08:7e:
93:32:6a:a3:24:fa:ae:8b:ee:fe:f2:0b:35:aa:f2:
01:f2:71:4b:5f:94:c8:79:62:d8:97:b8:6c:17:4a:
f9:9c:d7:10:45:49:b7:64:54:0c:83:a7:57:08:e6:
86:7e:b8:ff:74:30:8a:3b:b8:3e:c8:01:9e:f9:e6:
b1:5d:7e:0e:14:ef:7c:9d:59:bd:62:a0:20:9a:4c:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:35:1B:D7:52:59:00:EB:5F:10:27:15:2F:C4:1E:41:F1:DC:F8:74
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:f6:bd:7a:f2:20:da:49:03:07:08:b6:2a:b8:65:91:0e:
6b:36:53:a5:0a:97:c9:94:ea:50:4d:e5:3f:2d:ed:15:8d:d6:
15:66:dd:57:ae:42:21:16:8c:c2:38:39:b9:30:a6:0b:6f:7f:
35:de:fb:ca:d3:f9:81:9f:1a:dd:a4:e0:36:0c:0c:fa:01:fa:
2d:0b:41:b6:48:5c:55:68:87:10:b8:63:b4:c8:ca:dd:d5:9a:
f7:16:3b:47:f0:49:69:7c:d8:c7:41:9a:fd:3a:38:79:7a:5d:
bc:3e:56:f6:f9:2c:13:84:4d:90:f9:16:5c:7e:cd:7c:f5:20:
dd:f9:83:be:59:09:38:0f:fb:b7:98:b2:99:15:a4:40:d7:1d:
53:68:da:b5:8e:ba:dc:7f:b0:6a:b3:47:93:b2:43:05:6f:7f:
a4:8f:3b:c3:41:85:41:97:5c:1d:8a:c5:6f:58:a8:28:91:ef:
dd:bb:f6:83:33:55:fa:1e:3d:ae:9c:2a:76:22:f5:1e:a4:a7:
e9:67:d1:00:d9:cc:49:c0:46:27:4b:fb:77:39:ff:49:04:68:
f3:f4:16:5d:4c:bf:bc:1b:df:79:30:c6:00:5a:5b:86:5e:9d:
1b:4f:82:2f:d2:00:aa:d3:86:9b:07:0d:63:1d:84:02:19:8d:
bb:e7:d0:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yYH/yK5yayDCcX3/jkgP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNGEwOTY1MDRjZGJiOWYyZmI3ZmQwZTY2NDA2ZDUyNmZl
MTBiNWEwHhcNMjYwNTE2MjAwMDQ1WhcNMjYwNTE3MjAwMDQ1WjAzMTEwLwYDVQQD
EygzODM1MWJkNzUyNTkwMGViNWYxMDI3MTUyZmM0MWU0MWYxZGNmODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsb1DHbhHqKuWKxm+ji1ootTW/x1
xhPV0HD6E2AD+8LFOTrwS5P6gv56CmYF2vE3NaeQuByIG8jbhTIYnPSLis1xOdlj
7fXF1dMqau81EQ+Q+jcpE/Xf8cpgnX1q7Zn46caYKc64edAIF5MKqr47vr2HCS3X
Ofcj5G72N2VY1WOHUNBy5eqU8x/3NvVu/uMUBSc0oBjFQvGWWVg1/D/lKiNLn4vs
KnfHel9DTajoD5vGCH6TMmqjJPqui+7+8gs1qvIB8nFLX5TIeWLYl7hsF0r5nNcQ
RUm3ZFQMg6dXCOaGfrj/dDCKO7g+yAGe+eaxXX4OFO98nVm9YqAgmkxJFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg1G9dSWQDrXxAnFS/EHkHx3Ph0MB8GA1UdIwQY
MBaAFCBKCWUEzbufL7f9DmZAbVJv4QtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYt
MTU0MjI0Nzg4MDBiLzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lMjUxZGMtOGIyYi00ZjNkLWI2MzYtMTU0MjI0Nzg4MDBi
LzEvSUVvSlpRVE51NTh2dF8wT1prQnRVbV9oQzFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNf2vXry
INpJAwcItiq4ZZEOazZTpQqXyZTqUE3lPy3tFY3WFWbdV65CIRaMwjg5uTCmC29/
Nd77ytP5gZ8a3aTgNgwM+gH6LQtBtkhcVWiHELhjtMjK3dWa9xY7R/BJaXzYx0Ga
/To4eXpdvD5W9vksE4RNkPkWXH7NfPUg3fmDvlkJOA/7t5iymRWkQNcdU2jatY66
3H+warNHk7JDBW9/pI87w0GFQZdcHYrFb1ioKJHv3bv2gzNV+h49rpwqdiL1HqSn
6WfRANnMScBGJ0v7dzn/SQRo8/QWXUy/vBvfeTDGAFpbhl6dG0+CL9IAqtOGmwcN
Yx2EAhmNu+fQIA==
-----END CERTIFICATE-----
Generated at Sun May 17 06:59:45 2026 by rpki-client