Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier: 9242CGc2mDzu2F0MrQI3nQgMEdbHTT9UBqkraGtCQKw=
Subject key identifier: E1:E4:47:24:CD:EE:46:82:20:6A:20:58:30:CA:C9:FD:B6:0E:8A:CB
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial: 019E32CF5F5E40BDBA01267648E173953DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number: 0FE3
Signing time: Sat 16 May 2026 22:01:51 +0000
Manifest this update: Sat 16 May 2026 22:01:51 +0000
Manifest next update: Sun 17 May 2026 22:01:51 +0000
Files and hashes: 1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: FfIhqHhYCzTxo2peVYZ0Pdc8aUAmsbssPtlnVz2non4=)
4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:cf:5f:5e:40:bd:ba:01:26:76:48:e1:73:95:3d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Validity
Not Before: May 16 22:01:51 2026 GMT
Not After : May 17 22:01:51 2026 GMT
Subject: CN=e1e44724cdee4682206a205830cac9fdb60e8acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:65:1d:84:58:8a:6d:a0:1d:67:27:e3:2f:
58:5c:0c:e1:24:95:59:76:99:bb:e5:00:f6:b7:18:
f9:a8:5c:bb:f4:a6:dd:cf:e1:04:c1:09:a4:2a:9c:
cd:74:c7:a9:e4:e3:17:6d:f7:da:8a:e2:a7:dc:02:
b3:1a:cf:87:2f:81:e6:3d:40:ae:2f:32:07:c4:1f:
21:28:f4:8b:81:09:cf:a4:02:90:5b:a3:2e:00:de:
5d:92:1f:d8:e2:f8:23:21:35:80:e8:a4:a5:bd:26:
2d:a7:f8:c3:38:8f:2e:0a:61:77:18:42:93:8b:0a:
a0:4a:78:82:c1:09:04:27:85:4b:fb:d7:fe:ef:b9:
89:f7:cf:29:ec:56:67:26:dd:db:75:f0:9a:24:04:
19:99:97:71:3a:eb:70:e7:b1:a6:e1:72:75:17:55:
42:37:53:3b:04:71:19:dc:54:52:48:c6:5f:34:47:
e2:e6:ce:d0:da:3e:e5:00:25:22:dc:51:34:9e:42:
ce:e3:48:70:f2:39:68:db:89:57:fe:17:89:97:21:
0b:55:a6:12:e8:ae:d4:ae:71:4b:df:d3:e9:d2:38:
7c:1c:03:51:63:26:b9:6c:52:11:59:58:34:69:55:
92:2f:c2:d5:50:32:57:c4:a2:1d:0d:a1:68:1d:f5:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:47:24:CD:EE:46:82:20:6A:20:58:30:CA:C9:FD:B6:0E:8A:CB
X509v3 Authority Key Identifier:
keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e8:e6:ab:9d:f0:a0:bb:00:47:2e:6e:bf:ad:1d:d9:d9:1e:
6b:52:45:6c:94:94:ae:e6:59:88:be:fe:2c:b6:7f:25:8c:c5:
c4:fc:cf:c6:c6:79:0f:0e:ee:64:67:20:bb:c7:26:0c:e2:bf:
dd:b5:18:82:e4:50:54:bc:8b:4a:92:03:96:e9:91:70:a8:62:
a8:1f:b5:be:e9:f5:32:f5:3b:4a:0f:0a:00:99:ae:b3:aa:df:
69:2c:b9:b2:ae:0d:c9:c7:77:1a:02:de:e9:fb:f0:a4:54:45:
ca:33:87:e4:63:74:b1:bc:8b:c6:0c:1e:fe:a8:52:5e:4c:9d:
2f:69:48:df:97:85:e8:ac:aa:88:06:1b:4f:07:3f:50:4d:7e:
94:90:14:dc:63:4b:aa:cc:55:c6:84:16:53:d3:01:01:21:e9:
3d:2c:53:80:76:40:65:1d:d0:e5:59:14:27:76:ea:1d:5b:50:
6b:be:80:4b:cb:70:b5:9c:c6:12:bf:9a:72:f8:af:fc:96:0a:
dd:23:44:9a:d0:ab:77:ba:4c:bf:6a:5f:99:a4:b7:a4:f4:f0:
26:90:99:f1:46:d0:f4:ea:d6:12:b2:8f:c8:81:58:7c:5c:fa:
1a:dc:02:eb:3c:d3:bd:00:cf:f0:17:c2:82:32:d6:b0:06:30:
87:92:7b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yz19eQL26ASZ2SOFzlT29MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk
MTg3YmMwHhcNMjYwNTE2MjIwMTUxWhcNMjYwNTE3MjIwMTUxWjAzMTEwLwYDVQQD
EyhlMWU0NDcyNGNkZWU0NjgyMjA2YTIwNTgzMGNhYzlmZGI2MGU4YWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeNlHYRYim2gHWcn4y9YXAzhJJVZ
dpm75QD2txj5qFy79Kbdz+EEwQmkKpzNdMep5OMXbffaiuKn3AKzGs+HL4HmPUCu
LzIHxB8hKPSLgQnPpAKQW6MuAN5dkh/Y4vgjITWA6KSlvSYtp/jDOI8uCmF3GEKT
iwqgSniCwQkEJ4VL+9f+77mJ988p7FZnJt3bdfCaJAQZmZdxOutw57Gm4XJ1F1VC
N1M7BHEZ3FRSSMZfNEfi5s7Q2j7lACUi3FE0nkLO40hw8jlo24lX/heJlyELVaYS
6K7UrnFL39Pp0jh8HANRYya5bFIRWVg0aVWSL8LVUDJXxKIdDaFoHfWCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHkRyTN7kaCIGogWDDKyf22DorLMB8GA1UdIwQY
MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt
ODc3NTBkNmY3N2E4LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4
LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOjmq53w
oLsARy5uv60d2dkea1JFbJSUruZZiL7+LLZ/JYzFxPzPxsZ5Dw7uZGcgu8cmDOK/
3bUYguRQVLyLSpIDlumRcKhiqB+1vun1MvU7Sg8KAJmus6rfaSy5sq4Nycd3GgLe
6fvwpFRFyjOH5GN0sbyLxgwe/qhSXkydL2lI35eF6KyqiAYbTwc/UE1+lJAU3GNL
qsxVxoQWU9MBASHpPSxTgHZAZR3Q5VkUJ3bqHVtQa76AS8twtZzGEr+acviv/JYK
3SNEmtCrd7pMv2pfmaS3pPTwJpCZ8UbQ9OrWErKPyIFYfFz6GtwC6zzTvQDP8BfC
gjLWsAYwh5J7Ng==
-----END CERTIFICATE-----
Generated at Sun May 17 03:01:10 2026 by rpki-client