Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: bzwGcreio3aL0PJIX6BvVK7JD9Dw4wAvLX+6/woVg4A=
Subject key identifier: D9:81:EB:68:95:12:84:DD:7A:33:75:94:A0:F6:C4:5E:59:33:99:35
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 019D9E1B3456A27AAA6084818D8A7DABE0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 112D
Signing time: Sat 18 Apr 2026 01:01:16 +0000
Manifest this update: Sat 18 Apr 2026 01:01:16 +0000
Manifest next update: Sun 19 Apr 2026 01:01:16 +0000
Files and hashes: 1: MZaOI67AYigbpIsWpWqOKyUB95k.roa (hash: 28l2earsozG7gOJ16ktFFzzWVz+qyy71L+Rc+YVMUeI=)
2: VWwoGO2sGQjK21cMFf3XwlF6U0E.roa (hash: G+mIqYh3iGFVL9m6/VUywuW90iG64GkP4wAw6JgPgy4=)
3: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: dy1rqntJBQOwk1ow9TSfYH+9o5AVXP0LH83bhHQee6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:34:56:a2:7a:aa:60:84:81:8d:8a:7d:ab:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Apr 18 01:01:16 2026 GMT
Not After : Apr 19 01:01:16 2026 GMT
Subject: CN=d981eb68951284dd7a337594a0f6c45e59339935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:c3:ff:48:d6:44:58:e5:19:18:55:ec:59:
cf:27:a6:21:16:dd:56:ae:fb:08:22:fa:e9:54:95:
75:62:b5:a4:73:2d:4f:17:78:d7:a6:c7:d8:86:77:
53:4c:8f:d3:f7:d9:8a:2e:ed:47:7c:4f:c1:69:10:
71:dc:e2:15:0e:23:ca:60:63:bc:59:63:ad:d3:3a:
7f:4e:8a:1d:4a:2b:85:0b:a7:b5:24:6a:89:f8:a1:
c7:11:78:82:ce:29:bb:5e:18:2e:fc:b3:36:91:3e:
e4:d3:bb:41:ff:bb:9c:5b:83:cf:5a:d5:1f:27:af:
66:5a:f8:09:b4:a4:5c:c3:2e:84:0e:89:0a:6f:8f:
33:c8:eb:a7:c2:5c:3d:61:79:87:2c:28:a4:34:79:
85:4c:8d:a9:66:3a:5a:af:30:c4:e4:93:17:46:f9:
a2:4d:2f:83:d4:10:9e:e6:3a:83:c7:39:11:3e:4b:
8a:b1:7f:bc:4b:a5:a6:39:17:da:56:5e:13:cc:ba:
ad:a9:4e:21:b1:3e:a1:a7:28:72:bb:c4:0d:6a:5e:
ec:90:a4:bf:df:c1:66:c7:37:13:e4:67:a7:52:db:
65:81:09:8f:9f:f6:3e:30:14:39:a5:57:97:ae:e9:
e8:02:d2:bb:49:c8:75:3c:57:24:02:0f:bc:2f:5b:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:81:EB:68:95:12:84:DD:7A:33:75:94:A0:F6:C4:5E:59:33:99:35
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:31:8e:a2:1f:30:2c:63:fb:29:22:aa:d2:07:fd:b6:60:9f:
22:d3:80:2e:75:c8:d3:ba:ff:18:a3:55:0c:ec:45:68:3f:9a:
bc:40:da:bf:2d:69:47:df:3c:d1:58:07:5a:61:18:25:f6:3c:
ef:4d:6c:17:b0:aa:d4:de:85:5d:5a:47:e2:89:4a:ef:16:f3:
d6:64:af:44:d1:07:67:2d:0c:ad:00:14:f6:3f:c0:ea:9e:2b:
da:65:03:01:a3:de:a9:dd:25:4c:b0:76:70:05:9f:6f:c0:00:
36:7d:35:6d:06:0e:f9:9e:a8:47:e7:47:fc:e4:59:40:7a:9d:
6c:18:23:21:97:62:b1:32:16:3a:fb:b7:a0:d1:43:cf:a2:c1:
76:3b:ff:69:a7:2d:cf:2e:b4:9f:31:ca:9d:2d:cc:be:5b:01:
7d:07:cd:5f:36:2f:48:90:53:40:bd:75:b4:d6:46:0e:91:32:
d7:87:a4:47:d1:ce:e9:d7:2e:59:e7:a1:72:ae:c9:6a:0b:bc:
5d:eb:8e:b0:39:27:37:01:3e:d3:15:e9:4d:26:77:05:38:31:
49:0e:73:9a:3e:41:31:26:9b:df:d6:00:da:19:f7:8c:dd:b8:
29:3b:f3:7c:40:62:91:a5:c8:af:08:21:ac:77:06:13:f0:1c:
17:06:cc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eGzRWonqqYISBjYp9q+DNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5M2E1ODEyNGNlOWNjNDM3ODM5NTUyNTVlN2Y1ODM5MDVj
ZGIxNGUwHhcNMjYwNDE4MDEwMTE2WhcNMjYwNDE5MDEwMTE2WjAzMTEwLwYDVQQD
EyhkOTgxZWI2ODk1MTI4NGRkN2EzMzc1OTRhMGY2YzQ1ZTU5MzM5OTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+TD/0jWRFjlGRhV7FnPJ6YhFt1W
rvsIIvrpVJV1YrWkcy1PF3jXpsfYhndTTI/T99mKLu1HfE/BaRBx3OIVDiPKYGO8
WWOt0zp/ToodSiuFC6e1JGqJ+KHHEXiCzim7Xhgu/LM2kT7k07tB/7ucW4PPWtUf
J69mWvgJtKRcwy6EDokKb48zyOunwlw9YXmHLCikNHmFTI2pZjparzDE5JMXRvmi
TS+D1BCe5jqDxzkRPkuKsX+8S6WmORfaVl4TzLqtqU4hsT6hpyhyu8QNal7skKS/
38FmxzcT5GenUttlgQmPn/Y+MBQ5pVeXrunoAtK7Sch1PFckAg+8L1vxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmB62iVEoTdejN1lKD2xF5ZM5k1MB8GA1UdIwQY
MBaAFIk6WBJM6cxDeDlVJV5/WDkFzbFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgt
MzAzYjhiYzI4YmZhLzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hMzUyYmEtYzIyOC00YTE1LTkxNjgtMzAzYjhiYzI4YmZh
LzEvaVRwWUVrenB6RU40T1ZVbFhuOVlPUVhOc1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjGOoh8w
LGP7KSKq0gf9tmCfItOALnXI07r/GKNVDOxFaD+avEDavy1pR9880VgHWmEYJfY8
701sF7Cq1N6FXVpH4olK7xbz1mSvRNEHZy0MrQAU9j/A6p4r2mUDAaPeqd0lTLB2
cAWfb8AANn01bQYO+Z6oR+dH/ORZQHqdbBgjIZdisTIWOvu3oNFDz6LBdjv/aact
zy60nzHKnS3MvlsBfQfNXzYvSJBTQL11tNZGDpEy14ekR9HO6dcuWeehcq7Jagu8
XeuOsDknNwE+0xXpTSZ3BTgxSQ5zmj5BMSab39YA2hn3jN24KTvzfEBikaXIrwgh
rHcGE/AcFwbMkg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:42:50 2026 by rpki-client