Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: /UlyPz/zgrylSQm6W0CJKEvFG3f1ZJFooNvpLVz6Ir0=
Subject key identifier: 5D:A8:AD:DF:D6:86:67:F9:BA:96:F7:B8:72:77:89:64:76:48:17:9C
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 019DB3597B434EEED942992D15A25A804DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 18CD
Signing time: Wed 22 Apr 2026 04:01:19 +0000
Manifest this update: Wed 22 Apr 2026 04:01:19 +0000
Manifest next update: Thu 23 Apr 2026 04:01:19 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: eVei81nwdo1ZcemJCr8VJhQxWmn9O8xEteu9JJxfL98=)
2: WjnU7eVkPkVNVM9MOmgLUUUpMzM.roa (hash: +R4Zj+vw0Ft1e0nUhwZse4EmeZXGoZD55vZpzhImACo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:59:7b:43:4e:ee:d9:42:99:2d:15:a2:5a:80:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Apr 22 04:01:19 2026 GMT
Not After : Apr 23 04:01:19 2026 GMT
Subject: CN=5da8addfd68667f9ba96f7b8727789647648179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:ac:e8:6d:a1:8c:1e:2a:e1:96:f4:e4:86:
b2:7b:66:5f:e8:ae:4e:76:77:ea:a1:0f:5c:2f:54:
a0:39:48:ea:8b:f0:f8:9a:2f:48:d8:cb:da:ba:ec:
6b:3a:11:b3:44:c0:49:52:09:e5:d7:e9:a7:b5:fa:
72:85:17:f0:cb:8e:c9:c1:7d:61:73:37:a6:25:b1:
59:64:19:ce:82:0d:a9:e3:36:9a:76:69:e9:e9:51:
e3:85:89:71:41:2d:65:62:b2:a9:6b:bd:8c:9c:72:
10:76:83:71:94:af:7f:9b:b8:57:63:e4:de:36:b8:
3a:31:44:43:0d:d7:b2:73:45:5b:98:1f:38:af:98:
c9:e4:a1:ab:2b:2a:4c:df:52:4e:2f:41:e3:c1:6e:
b6:37:ee:3d:01:75:34:d9:de:c6:fd:14:5c:b4:0b:
27:90:fa:69:d5:46:ff:e1:7a:ed:5a:a8:b6:0d:5e:
0d:e6:c0:76:89:98:c8:a9:a1:e7:82:c2:92:0b:af:
c5:4b:92:10:82:df:01:34:33:40:58:d0:56:4d:ca:
a5:27:67:ff:c0:25:34:80:86:54:d9:6b:c8:62:4d:
fa:d4:0c:db:f1:70:5f:a5:c5:e7:52:23:aa:69:fb:
89:6f:97:f9:4f:e7:54:ec:36:81:82:23:ef:d6:d2:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A8:AD:DF:D6:86:67:F9:BA:96:F7:B8:72:77:89:64:76:48:17:9C
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:e2:4c:fa:1e:11:56:11:a1:7e:d1:a2:7c:fe:3e:98:87:
a1:ae:44:24:7d:6a:c6:41:dd:0c:63:eb:45:f7:44:f4:ae:ee:
55:a1:3e:99:63:d2:14:d8:d1:53:d7:5b:47:2f:05:34:70:43:
13:e5:e7:1e:ef:08:97:8d:0b:a8:ae:5d:53:9a:bb:8a:33:3c:
ed:08:7c:01:38:48:01:b1:55:e8:57:b9:f7:d7:e5:9e:f0:db:
07:5b:15:f3:be:13:92:13:f0:21:bf:41:6c:5f:c6:19:e5:d9:
cb:39:9d:6b:45:4e:76:ff:18:c9:0d:7e:0d:a5:ed:86:29:e3:
5c:84:9b:9a:0a:93:03:31:22:bd:12:b6:0a:dd:e3:77:2c:04:
04:38:e9:a8:fe:ea:9e:3d:ed:a4:71:fb:ba:a7:17:ea:0c:ad:
ea:92:82:77:ac:35:da:d8:30:a3:eb:48:64:a4:c2:55:45:db:
c8:a3:52:59:7f:b8:39:6e:24:30:5f:14:8c:29:5b:41:41:87:
2c:64:72:c7:84:33:01:ac:c6:86:56:4b:09:df:7c:28:c2:a1:
b2:b1:00:33:68:23:40:8b:c1:b2:25:0a:69:32:ad:9f:22:ef:
d3:52:b2:3c:b4:62:5d:8d:d3:e5:cb:dd:63:06:85:5b:df:51:
6b:39:dc:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2zWXtDTu7ZQpktFaJagE2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZTQ4ZTE2MWU0OTA1OTIzZjZkNGFhMmFlMGEyMTUzMGYy
ZGUyMGIwHhcNMjYwNDIyMDQwMTE5WhcNMjYwNDIzMDQwMTE5WjAzMTEwLwYDVQQD
Eyg1ZGE4YWRkZmQ2ODY2N2Y5YmE5NmY3Yjg3Mjc3ODk2NDc2NDgxNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcWs6G2hjB4q4Zb05Iaye2Zf6K5O
dnfqoQ9cL1SgOUjqi/D4mi9I2MvauuxrOhGzRMBJUgnl1+mntfpyhRfwy47JwX1h
czemJbFZZBnOgg2p4zaadmnp6VHjhYlxQS1lYrKpa72MnHIQdoNxlK9/m7hXY+Te
Nrg6MURDDdeyc0VbmB84r5jJ5KGrKypM31JOL0HjwW62N+49AXU02d7G/RRctAsn
kPpp1Ub/4XrtWqi2DV4N5sB2iZjIqaHngsKSC6/FS5IQgt8BNDNAWNBWTcqlJ2f/
wCU0gIZU2WvIYk361Azb8XBfpcXnUiOqafuJb5f5T+dU7DaBgiPv1tIrCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2ord/Whmf5upb3uHJ3iWR2SBecMB8GA1UdIwQY
MBaAFCLkjhYeSQWSP21Koq4KIVMPLeILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMt
M2U2Yjc1MWE1NWY0LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzM0ZTktNzU1OS00MWE2LTljYWMtM2U2Yjc1MWE1NWY0
LzEvSXVTT0ZoNUpCWklfYlVxaXJnb2hVdzh0NGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcPiTPoe
EVYRoX7Ronz+PpiHoa5EJH1qxkHdDGPrRfdE9K7uVaE+mWPSFNjRU9dbRy8FNHBD
E+XnHu8Il40LqK5dU5q7ijM87Qh8AThIAbFV6Fe599flnvDbB1sV874TkhPwIb9B
bF/GGeXZyzmda0VOdv8YyQ1+DaXthinjXISbmgqTAzEivRK2Ct3jdywEBDjpqP7q
nj3tpHH7uqcX6gyt6pKCd6w12tgwo+tIZKTCVUXbyKNSWX+4OW4kMF8UjClbQUGH
LGRyx4QzAazGhlZLCd98KMKhsrEAM2gjQIvBsiUKaTKtnyLv01KyPLRiXY3T5cvd
YwaFW99RazncPQ==
-----END CERTIFICATE-----
Generated at Wed Apr 22 11:39:47 2026 by rpki-client