Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: Tt4TAF+uQJDLFoFGsdHbafB6TS5S7ha+WiBmTWwQr7w=
Subject key identifier: 43:A0:95:2D:96:15:78:B8:C5:14:77:24:06:D9:4C:D9:E9:10:82:95
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019E30E01F0967DC488DCCD9D798670135F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 16DC
Signing time: Sat 16 May 2026 13:00:54 +0000
Manifest this update: Sat 16 May 2026 13:00:54 +0000
Manifest next update: Sun 17 May 2026 13:00:54 +0000
Files and hashes: 1: 2i-4ee2wP9JCOqgKECftxH61WUM.roa (hash: QQKwzJfgPGXePgVfTn1B7G5l+qkMGWhzUecnh31tn84=)
2: aVs_pTCF35izq7eFYVQj7GDKKKg.roa (hash: HUtPfJfh73XSHYvTDAm1hqZnRW91m33+bqE8cdLnnnE=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: eF18DTtHHkcR/UJi6GfGqblRkApqzAzyvSAuInc0E5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:1f:09:67:dc:48:8d:cc:d9:d7:98:67:01:35:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: May 16 13:00:54 2026 GMT
Not After : May 17 13:00:54 2026 GMT
Subject: CN=43a0952d961578b8c514772406d94cd9e9108295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:b0:11:ac:12:bd:a5:de:b7:be:cc:ee:28:
9a:1f:79:83:5b:31:4d:e9:ff:53:e4:d0:21:dc:0a:
35:0c:38:87:29:d0:30:00:02:a1:44:de:c9:64:a8:
91:0b:79:da:97:40:bd:92:49:0a:d6:4c:03:31:d5:
4b:5f:3e:38:a0:51:39:a9:39:f7:74:b6:3b:ca:b9:
e3:1f:01:e0:d3:35:df:62:db:d4:c6:e8:54:77:1e:
8e:73:15:8a:a9:38:de:e4:05:89:76:c4:f4:b8:3f:
fc:c0:46:8a:03:13:55:24:74:36:e7:f4:4c:3d:1c:
6a:ca:75:69:36:c5:14:e3:cc:25:69:8a:a6:09:1a:
7d:a9:d2:52:b6:3c:38:35:77:5d:e2:02:a9:19:b1:
e2:36:e5:6c:16:11:b5:59:c3:bb:1e:f0:37:87:de:
d0:cd:72:61:d6:b1:bb:2a:b0:cf:89:2b:0a:18:76:
84:e7:33:89:92:fa:8b:49:6b:29:9e:af:ee:29:1c:
91:1c:98:67:03:a2:d3:ae:3e:31:1a:03:f1:04:c4:
6a:62:20:63:55:b7:96:c6:0a:e7:49:6c:6d:eb:9e:
2c:5b:4a:35:12:6d:9d:51:dd:bd:84:a0:02:6f:ec:
d0:1a:f9:18:1e:49:18:df:aa:63:eb:3d:72:ad:cb:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A0:95:2D:96:15:78:B8:C5:14:77:24:06:D9:4C:D9:E9:10:82:95
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:78:9a:79:cc:d2:2e:d0:59:82:69:57:5b:22:81:85:42:2e:
e7:e9:5d:33:0a:33:42:a4:e9:4b:70:2b:57:d3:f7:d1:a3:1d:
6c:b2:5d:79:ba:7e:78:b2:19:f9:eb:a6:f4:8d:77:2e:dc:7f:
93:02:86:27:60:06:98:d4:48:46:42:8d:a7:3e:f3:88:18:c0:
b3:0b:ca:4a:6e:07:ba:58:2d:88:4b:68:42:74:29:f1:11:f6:
64:e7:fc:8e:9e:72:d2:1f:74:0c:56:a8:63:d7:2a:6a:92:64:
fd:79:7d:b6:23:5a:5f:49:5a:54:7c:fe:a6:4b:e7:c8:9f:14:
32:da:62:fc:21:73:db:bf:b7:ce:82:b5:3d:40:f6:9e:78:99:
44:61:7b:b8:d8:90:db:38:1e:88:ea:76:be:d5:91:2c:a5:b4:
16:b5:a3:c4:c7:4b:cb:f3:61:87:ba:6c:8e:84:37:6d:1d:94:
36:14:06:59:94:c5:d0:0d:23:74:bb:b7:7c:56:0e:02:b6:56:
b4:f6:96:c9:7a:33:19:48:02:bf:b9:f7:2d:76:66:9d:2d:db:
d2:f3:4c:ea:a6:d3:9c:ba:b2:81:88:e1:00:7b:ce:8e:30:00:
9b:92:45:d3:2f:cb:11:f7:0e:e7:ef:64:d7:92:a5:42:56:64:
b9:e3:60:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4B8JZ9xIjczZ15hnATXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZDRiY2JmMzVkYjdmZTJlZjY2MzUyMmE1YTNhMzk3OWE0
ZjFmZjgwHhcNMjYwNTE2MTMwMDU0WhcNMjYwNTE3MTMwMDU0WjAzMTEwLwYDVQQD
Eyg0M2EwOTUyZDk2MTU3OGI4YzUxNDc3MjQwNmQ5NGNkOWU5MTA4Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DawEawSvaXet77M7iiaH3mDWzFN
6f9T5NAh3Ao1DDiHKdAwAAKhRN7JZKiRC3nal0C9kkkK1kwDMdVLXz44oFE5qTn3
dLY7yrnjHwHg0zXfYtvUxuhUdx6OcxWKqTje5AWJdsT0uD/8wEaKAxNVJHQ25/RM
PRxqynVpNsUU48wlaYqmCRp9qdJStjw4NXdd4gKpGbHiNuVsFhG1WcO7HvA3h97Q
zXJh1rG7KrDPiSsKGHaE5zOJkvqLSWspnq/uKRyRHJhnA6LTrj4xGgPxBMRqYiBj
VbeWxgrnSWxt654sW0o1Em2dUd29hKACb+zQGvkYHkkY36pj6z1yrcu/ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOglS2WFXi4xRR3JAbZTNnpEIKVMB8GA1UdIwQY
MBaAFIvUvL8123/i72Y1IqWjo5eaTx/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAt
NDc4ZWQ3ZjhkMDVlLzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMTQyNzItMjc5NC00ZjM4LTk2NDAtNDc4ZWQ3ZjhkMDVl
LzEvaTlTOHZ6WGJmLUx2WmpVaXBhT2psNXBQSF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsniaeczS
LtBZgmlXWyKBhUIu5+ldMwozQqTpS3ArV9P30aMdbLJdebp+eLIZ+eum9I13Ltx/
kwKGJ2AGmNRIRkKNpz7ziBjAswvKSm4HulgtiEtoQnQp8RH2ZOf8jp5y0h90DFao
Y9cqapJk/Xl9tiNaX0laVHz+pkvnyJ8UMtpi/CFz27+3zoK1PUD2nniZRGF7uNiQ
2zgeiOp2vtWRLKW0FrWjxMdLy/Nhh7psjoQ3bR2UNhQGWZTF0A0jdLu3fFYOArZW
tPaWyXozGUgCv7n3LXZmnS3b0vNM6qbTnLqygYjhAHvOjjAAm5JF0y/LEfcO5+9k
15KlQlZkueNgwQ==
-----END CERTIFICATE-----
Generated at Sat May 16 20:20:31 2026 by rpki-client