Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: rhkFzz0duanilT6iSLUihzxtrXu27jKHnaYqtc6/YDU=
Subject key identifier: DF:41:D5:FF:E0:14:00:5D:85:81:8D:CE:86:48:3A:8D:B7:6B:3A:45
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 019E2A6FFF9DA50F094E5EAC04357D4DCA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1397
Signing time: Fri 15 May 2026 07:00:43 +0000
Manifest this update: Fri 15 May 2026 07:00:43 +0000
Manifest next update: Sat 16 May 2026 07:00:43 +0000
Files and hashes: 1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: MB2MVHIZk++Pkd9aZCuPUvQHKhm3H5t5XN8MSY0a5tQ=)
3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:6f:ff:9d:a5:0f:09:4e:5e:ac:04:35:7d:4d:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: May 15 07:00:43 2026 GMT
Not After : May 16 07:00:43 2026 GMT
Subject: CN=df41d5ffe014005d85818dce86483a8db76b3a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:82:5e:b8:09:40:db:ac:02:10:a1:ef:e0:
47:db:f1:6b:84:f0:b1:c9:19:88:ca:32:64:24:ff:
98:4a:81:27:10:7e:a5:30:81:ce:47:57:39:b4:58:
26:6a:1b:69:2c:46:52:04:ca:ab:b3:d1:0a:b2:34:
bd:fd:33:f1:68:7b:6f:68:74:f6:74:d7:f2:28:8d:
de:8b:85:ee:0a:e0:c9:fd:c9:05:3f:fe:3c:ad:a1:
40:8e:dd:34:9b:59:7c:a0:b1:76:0a:23:bb:84:84:
e8:15:11:06:57:78:93:b8:25:25:6d:76:72:34:d9:
1f:3d:8e:2c:6b:6f:ca:ea:5d:48:1c:ff:08:87:58:
05:ab:bc:eb:2b:33:8a:78:3f:8e:67:7c:b0:a8:9c:
22:6d:25:f6:bf:42:32:6e:ce:25:da:d7:46:b3:8e:
b8:77:c7:b8:cb:a6:3e:2b:b9:b3:28:7d:29:97:1f:
76:38:2b:4e:50:b5:d4:f7:bb:8e:9f:38:22:bd:f3:
d8:9d:26:8e:da:7a:17:06:68:38:50:2d:b1:88:3b:
c5:7c:9a:25:26:3e:9e:8f:10:4e:83:74:14:59:87:
60:ab:bd:4f:6a:14:23:fe:fb:8b:33:5e:ed:ff:c1:
74:2a:39:77:e8:53:a3:ef:05:6f:a3:ec:9c:20:fc:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:41:D5:FF:E0:14:00:5D:85:81:8D:CE:86:48:3A:8D:B7:6B:3A:45
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:a3:97:21:b6:56:82:78:50:25:4b:62:ee:97:36:30:c1:
af:39:f2:ed:6e:92:33:c5:c3:ff:e3:f9:f0:04:bf:06:13:3f:
47:a9:c4:44:19:b4:8c:9c:88:57:78:11:08:61:12:57:ea:88:
30:d2:bd:76:ff:65:ec:90:10:4a:fd:c0:a2:a6:ea:78:85:87:
4f:a2:4a:df:2f:81:96:10:eb:64:ba:55:10:3e:2b:5d:7a:17:
79:c7:dc:5a:50:86:e1:3f:08:17:0c:f9:40:ff:e4:ce:50:58:
3a:34:2f:3e:e5:97:31:bf:f8:56:98:f8:69:81:19:40:21:84:
8d:00:94:93:6e:77:cf:9f:6e:95:2e:e2:31:ac:3e:7a:20:cf:
f5:fd:a5:18:83:f4:3d:81:d3:d0:9b:33:9e:2d:5e:ac:2d:32:
c4:a9:79:d4:73:84:a0:9c:19:f8:d4:33:ab:5d:4a:bd:07:c8:
39:ab:96:1c:af:cb:57:3b:52:98:37:c4:fc:6a:35:d1:45:50:
19:ea:78:d4:69:e3:cf:75:f8:4f:ac:2f:c5:4e:d0:fa:39:63:
51:8e:99:65:90:7b:73:79:4f:c6:a3:92:bb:79:72:a7:c3:6a:
85:9f:8e:5d:51:82:4f:cb:80:e2:d4:f7:42:fb:c5:30:6d:b8:
02:4f:c2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4qb/+dpQ8JTl6sBDV9TcoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjYwNTE1MDcwMDQzWhcNMjYwNTE2MDcwMDQzWjAzMTEwLwYDVQQD
EyhkZjQxZDVmZmUwMTQwMDVkODU4MThkY2U4NjQ4M2E4ZGI3NmIzYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9OCXrgJQNusAhCh7+BH2/FrhPCx
yRmIyjJkJP+YSoEnEH6lMIHOR1c5tFgmahtpLEZSBMqrs9EKsjS9/TPxaHtvaHT2
dNfyKI3ei4XuCuDJ/ckFP/48raFAjt00m1l8oLF2CiO7hIToFREGV3iTuCUlbXZy
NNkfPY4sa2/K6l1IHP8Ih1gFq7zrKzOKeD+OZ3ywqJwibSX2v0Iybs4l2tdGs464
d8e4y6Y+K7mzKH0plx92OCtOULXU97uOnzgivfPYnSaO2noXBmg4UC2xiDvFfJol
Jj6ejxBOg3QUWYdgq71PahQj/vuLM17t/8F0Kjl36FOj7wVvo+ycIPxdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9B1f/gFABdhYGNzoZIOo23azpFMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkajlyG2
VoJ4UCVLYu6XNjDBrzny7W6SM8XD/+P58AS/BhM/R6nERBm0jJyIV3gRCGESV+qI
MNK9dv9l7JAQSv3AoqbqeIWHT6JK3y+BlhDrZLpVED4rXXoXecfcWlCG4T8IFwz5
QP/kzlBYOjQvPuWXMb/4Vpj4aYEZQCGEjQCUk253z59ulS7iMaw+eiDP9f2lGIP0
PYHT0Jszni1erC0yxKl51HOEoJwZ+NQzq11KvQfIOauWHK/LVztSmDfE/Go10UVQ
Gep41Gnjz3X4T6wvxU7Q+jljUY6ZZZB7c3lPxqOSu3lyp8NqhZ+OXVGCT8uA4tT3
QvvFMG24Ak/C4g==
-----END CERTIFICATE-----
Generated at Fri May 15 12:43:41 2026 by rpki-client