Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: Z17Nu8PNVSSUKkFL9pHPEC+lVD5xeb/8g4B2zEZeZ0c=
Subject key identifier: F1:17:FD:E6:BE:E9:5F:53:BF:57:5B:D3:FF:C0:71:BE:DA:B7:81:6F
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019E322A1DE8362DFE8CCFEE804D455DF748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0449
Signing time: Sat 16 May 2026 19:01:21 +0000
Manifest this update: Sat 16 May 2026 19:01:21 +0000
Manifest next update: Sun 17 May 2026 19:01:21 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: icGv42FC9+w066ZGuWqfGDT25PXzdfco2TPSrKTD3h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:1d:e8:36:2d:fe:8c:cf:ee:80:4d:45:5d:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: May 16 19:01:21 2026 GMT
Not After : May 17 19:01:21 2026 GMT
Subject: CN=f117fde6bee95f53bf575bd3ffc071bedab7816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:3d:0f:02:d5:2e:35:60:e9:b5:34:0d:30:
19:8b:24:c1:09:b4:f4:3d:d6:dc:91:ce:e7:3f:2d:
61:d8:51:68:dc:89:3f:37:33:11:5e:6d:51:d0:4e:
8b:44:29:df:cd:06:73:7c:25:ca:5e:99:5f:4d:60:
30:8a:83:7b:7d:d2:89:e4:88:52:83:6e:31:6f:bc:
a5:9f:98:bb:a6:1b:85:95:58:de:20:9d:7c:06:99:
97:cb:b3:2b:e7:75:f6:42:1d:31:0e:bd:ac:f6:e6:
3c:9c:53:45:ec:35:fb:ec:c5:75:ea:42:e4:c7:22:
85:e1:f7:32:07:65:fd:28:27:c4:dc:de:61:78:11:
24:f9:5e:81:38:87:6a:ae:a7:1b:44:b4:7c:47:13:
da:fd:3a:1a:f0:8f:e8:e6:35:fe:e1:4d:d8:8b:0a:
0d:4b:bb:4f:d7:36:01:92:68:47:14:6a:35:30:fa:
f4:88:0a:28:77:57:ba:3b:62:d3:ad:d9:ab:8c:c0:
1d:a6:a9:10:99:95:aa:00:49:9f:16:46:34:e1:74:
ca:32:7a:fe:eb:1a:48:fe:e0:e1:5e:ed:d2:e2:36:
90:2d:6a:35:26:f8:d5:54:cd:51:54:1d:72:42:a9:
da:63:ee:55:e2:73:d5:e8:38:54:11:4e:dd:a4:0e:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:FD:E6:BE:E9:5F:53:BF:57:5B:D3:FF:C0:71:BE:DA:B7:81:6F
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d8:7e:72:91:66:30:7e:a1:e8:f0:ca:bd:2b:df:98:25:dd:
46:3f:2d:a7:6a:b3:a5:a8:73:77:da:06:2e:3f:1d:d4:07:71:
85:9b:03:f6:d8:dc:55:ba:f6:49:26:ab:26:df:f8:bb:74:61:
4c:52:b2:ef:f6:52:6f:79:bd:21:9e:5d:3c:85:f5:ae:27:8f:
68:1a:51:6a:5d:1d:fc:7c:16:c9:8f:c0:db:29:ef:c2:59:5b:
ec:c1:cf:e9:d8:cb:34:d1:41:48:db:06:48:f8:78:40:aa:d1:
a6:d4:f7:c5:1c:dc:80:51:7e:76:40:14:fe:58:5f:ea:7b:23:
d7:17:5f:22:23:8b:a5:67:33:e4:67:be:5d:f4:bd:51:79:bb:
e2:14:63:3f:58:db:3e:85:02:d0:79:b1:59:bf:12:c4:c2:3f:
65:25:40:af:7c:f0:7b:3f:94:84:a2:fb:9d:40:f8:f3:ea:22:
b6:b4:5c:64:76:93:65:a3:64:a5:49:53:9a:95:9b:36:0a:4b:
3f:53:a7:26:2e:cb:96:08:eb:38:76:ca:33:3f:7a:2c:70:a2:
d8:86:b3:03:00:12:17:03:05:d1:31:85:ce:48:11:d0:97:4a:
df:0a:1e:b0:b3:d3:a5:fa:b5:2f:58:b4:ea:23:fb:36:fa:7e:
01:b3:fd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yKh3oNi3+jM/ugE1FXfdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjYwNTE2MTkwMTIxWhcNMjYwNTE3MTkwMTIxWjAzMTEwLwYDVQQD
EyhmMTE3ZmRlNmJlZTk1ZjUzYmY1NzViZDNmZmMwNzFiZWRhYjc4MTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJM9DwLVLjVg6bU0DTAZiyTBCbT0
Pdbckc7nPy1h2FFo3Ik/NzMRXm1R0E6LRCnfzQZzfCXKXplfTWAwioN7fdKJ5IhS
g24xb7yln5i7phuFlVjeIJ18BpmXy7Mr53X2Qh0xDr2s9uY8nFNF7DX77MV16kLk
xyKF4fcyB2X9KCfE3N5heBEk+V6BOIdqrqcbRLR8RxPa/Toa8I/o5jX+4U3YiwoN
S7tP1zYBkmhHFGo1MPr0iAood1e6O2LTrdmrjMAdpqkQmZWqAEmfFkY04XTKMnr+
6xpI/uDhXu3S4jaQLWo1JvjVVM1RVB1yQqnaY+5V4nPV6DhUEU7dpA5GGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEX/ea+6V9Tv1db0//Acb7at4FvMB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAath+cpFm
MH6h6PDKvSvfmCXdRj8tp2qzpahzd9oGLj8d1AdxhZsD9tjcVbr2SSarJt/4u3Rh
TFKy7/ZSb3m9IZ5dPIX1riePaBpRal0d/HwWyY/A2ynvwllb7MHP6djLNNFBSNsG
SPh4QKrRptT3xRzcgFF+dkAU/lhf6nsj1xdfIiOLpWcz5Ge+XfS9UXm74hRjP1jb
PoUC0HmxWb8SxMI/ZSVAr3zwez+UhKL7nUD48+oitrRcZHaTZaNkpUlTmpWbNgpL
P1OnJi7LlgjrOHbKMz96LHCi2IazAwASFwMF0TGFzkgR0JdK3woesLPTpfq1L1i0
6iP7Nvp+AbP9QQ==
-----END CERTIFICATE-----
Generated at Sat May 16 21:13:16 2026 by rpki-client