Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
File: I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft (raw, json)
Hash identifier: 5jO4vANKhqrU1E2O3MSK6zAtiJPiL6Y7q32RUT9wOac=
Subject key identifier: 38:CC:E6:1C:ED:93:A7:1C:0E:86:33:66:5B:E6:E5:A8:B5:66:AA:23
Authority key identifier: 23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
Certificate issuer: /CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Certificate serial: 019DDCF9DEEF69D2BF8BDFC3A98B0DA8EB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
Manifest number: 15
Signing time: Thu 30 Apr 2026 06:00:56 +0000
Manifest this update: Thu 30 Apr 2026 06:00:56 +0000
Manifest next update: Fri 01 May 2026 06:00:56 +0000
Files and hashes: 1: I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl (hash: lAjnlK03LVkWzPRnzfJMvx94ABkdqo9TVrGsEn9wZr8=)
2: Z1FAr4NSj_9E4vgngoY4iZIbd6w.roa (hash: TNaTsbZBUY9cnfgT4Gqq06IHw66GAFg4ule0/lO0mw0=)
3: b89OtE1WAM5mSDz-HnqsCyirLw8.asa (hash: WwQIyDPTpparBL/aU3tgaOWtU26s+wxcO28wS+CM+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:f9:de:ef:69:d2:bf:8b:df:c3:a9:8b:0d:a8:eb:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238d1f1fc4c3e8fb471b3b1dee36c5df315fb234
Validity
Not Before: Apr 30 06:00:56 2026 GMT
Not After : May 1 06:00:56 2026 GMT
Subject: CN=38cce61ced93a71c0e8633665be6e5a8b566aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:1e:90:1f:0b:49:bf:20:b0:df:04:39:1d:
32:6b:e1:35:02:02:c6:77:72:6e:e8:94:39:9a:c6:
db:02:01:dc:94:d7:52:fb:25:7e:30:7a:a2:6a:b7:
db:f0:aa:c9:aa:90:05:c0:b2:28:b6:6f:7a:ff:95:
bf:4f:af:b8:3b:34:e4:e6:54:fc:23:a9:b4:fd:89:
01:2b:e5:f1:b3:2f:53:4b:1c:db:1d:b1:c9:b3:93:
9d:b3:51:5e:be:0e:ba:bf:91:22:8d:16:a7:5a:89:
e3:a0:ec:3c:13:cd:22:4f:a2:0d:ad:f7:37:77:96:
4a:e2:24:22:98:9f:de:32:1c:1e:b6:49:a4:58:7f:
cf:63:a2:22:cc:08:19:50:1f:21:42:5f:82:0c:0a:
c6:82:72:82:c0:f9:fe:ed:46:60:8b:ee:1c:3f:d5:
49:d7:18:32:fb:0c:47:53:ac:2e:59:a8:df:40:a1:
49:22:f3:61:3a:15:06:2a:18:d6:ad:91:4f:99:d7:
25:72:e0:e7:ba:04:93:b7:eb:49:7d:ff:71:9a:2e:
57:7b:76:09:b4:2b:8d:cb:89:b2:c0:7d:e0:64:f7:
15:b4:4e:78:5d:97:be:af:58:df:3a:ac:69:2a:e0:
ea:4f:e5:12:0f:c7:8d:2a:af:fa:f4:eb:03:d9:23:
e1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:E6:1C:ED:93:A7:1C:0E:86:33:66:5B:E6:E5:A8:B5:66:AA:23
X509v3 Authority Key Identifier:
keyid:23:8D:1F:1F:C4:C3:E8:FB:47:1B:3B:1D:EE:36:C5:DF:31:5F:B2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I40fH8TD6PtHGzsd7jbF3zFfsjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b7027-f324-4ecd-893a-d39cc317fdcd/1/I40fH8TD6PtHGzsd7jbF3zFfsjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:57:03:c4:72:e1:a6:96:6b:7f:2b:c4:99:11:2d:4a:bc:e8:
37:87:ed:e3:a5:f5:19:b8:aa:0d:2d:1c:53:d9:7a:fe:f5:61:
61:65:45:d4:9b:da:fa:3d:d4:9d:12:13:a0:31:e0:2b:b0:a3:
6a:1b:ac:66:ef:e8:98:cc:01:24:a5:d9:f7:2f:d8:31:38:37:
db:93:50:ff:5c:d7:be:ef:b8:41:2c:ec:09:ad:1a:db:1b:2a:
d3:48:8d:fb:bc:dd:f6:a5:32:de:44:48:ea:ee:de:70:68:6c:
fa:53:cf:08:ad:0d:1d:c2:d6:a6:be:4b:d4:72:be:91:eb:bc:
22:ae:09:81:57:2f:de:84:04:fb:40:86:20:47:c3:ee:1c:e1:
be:b1:58:9c:9f:1c:f9:09:16:c4:e4:11:04:bc:32:5f:a0:af:
53:9b:0c:2d:9c:5c:aa:b4:a2:ce:53:e1:dc:05:2a:16:aa:d9:
7f:2b:f3:9d:46:62:d1:bd:58:34:74:75:2e:7c:ef:d6:1d:3a:
62:ff:34:98:af:96:07:90:a2:9b:46:20:66:03:c0:cc:36:f2:
a8:70:c8:33:6e:aa:df:ef:11:4a:07:1f:f4:22:44:0b:c6:38:
fa:42:a7:5c:04:de:dc:33:dd:b6:73:49:fe:0c:a3:cc:ca:af:
9e:03:2a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+d7vadK/i9/DqYsNqOuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzOGQxZjFmYzRjM2U4ZmI0NzFiM2IxZGVlMzZjNWRmMzE1
ZmIyMzQwHhcNMjYwNDMwMDYwMDU2WhcNMjYwNTAxMDYwMDU2WjAzMTEwLwYDVQQD
EygzOGNjZTYxY2VkOTNhNzFjMGU4NjMzNjY1YmU2ZTVhOGI1NjZhYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+0ekB8LSb8gsN8EOR0ya+E1AgLG
d3Ju6JQ5msbbAgHclNdS+yV+MHqiarfb8KrJqpAFwLIotm96/5W/T6+4OzTk5lT8
I6m0/YkBK+Xxsy9TSxzbHbHJs5Ods1Fevg66v5EijRanWonjoOw8E80iT6INrfc3
d5ZK4iQimJ/eMhwetkmkWH/PY6IizAgZUB8hQl+CDArGgnKCwPn+7UZgi+4cP9VJ
1xgy+wxHU6wuWajfQKFJIvNhOhUGKhjWrZFPmdclcuDnugSTt+tJff9xmi5Xe3YJ
tCuNy4mywH3gZPcVtE54XZe+r1jfOqxpKuDqT+USD8eNKq/69OsD2SPhUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjM5hztk6ccDoYzZlvm5ai1ZqojMB8GA1UdIwQY
MBaAFCONHx/Ew+j7Rxs7He42xd8xX7I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTQwZkg4VEQ2UHRIR3pzZDdqYkYzekZmc2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85YjcwMjctZjMyNC00ZWNkLTg5M2Et
ZDM5Y2MzMTdmZGNkLzEvSTQwZkg4VEQ2UHRIR3pzZDdqYkYzekZmc2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85YjcwMjctZjMyNC00ZWNkLTg5M2EtZDM5Y2MzMTdmZGNk
LzEvSTQwZkg4VEQ2UHRIR3pzZDdqYkYzekZmc2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVcDxHLh
ppZrfyvEmREtSrzoN4ft46X1GbiqDS0cU9l6/vVhYWVF1Jva+j3UnRIToDHgK7Cj
ahusZu/omMwBJKXZ9y/YMTg325NQ/1zXvu+4QSzsCa0a2xsq00iN+7zd9qUy3kRI
6u7ecGhs+lPPCK0NHcLWpr5L1HK+keu8Iq4JgVcv3oQE+0CGIEfD7hzhvrFYnJ8c
+QkWxOQRBLwyX6CvU5sMLZxcqrSizlPh3AUqFqrZfyvznUZi0b1YNHR1Lnzv1h06
Yv80mK+WB5Cim0YgZgPAzDbyqHDIM26q3+8RSgcf9CJEC8Y4+kKnXATe3DPdtnNJ
/gyjzMqvngMq4w==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:50:26 2026 by rpki-client