Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: TFx1Wa6QyuUT4MxEhrecqnEJ9vjObsisuE4kRr/5HtA=
Subject key identifier: 83:C6:44:98:9D:25:00:B8:25:32:B7:A9:5B:CE:C1:63:F2:4B:0F:2C
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019D9C99F2FCEDCC8F57E9560AE5C196547B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1508
Signing time: Fri 17 Apr 2026 18:00:27 +0000
Manifest this update: Fri 17 Apr 2026 18:00:27 +0000
Manifest next update: Sat 18 Apr 2026 18:00:27 +0000
Files and hashes: 1: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (hash: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko=)
2: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (hash: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8=)
3: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: SR2BteJSD4VxNvIk/GdepGAY+n+gX9lbmAUzNs33Xa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:f2:fc:ed:cc:8f:57:e9:56:0a:e5:c1:96:54:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Apr 17 18:00:27 2026 GMT
Not After : Apr 18 18:00:27 2026 GMT
Subject: CN=83c644989d2500b82532b7a95bcec163f24b0f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:f6:c7:c6:02:59:4e:35:73:2f:0d:c9:17:
d9:c6:04:9e:af:34:0e:c5:08:5d:dd:7d:a3:23:f6:
25:e7:d8:32:fe:d8:b1:fc:c1:87:db:37:77:60:18:
ff:1f:db:a6:3f:c3:5a:01:e7:db:d2:33:15:38:c0:
74:c5:ca:d0:3e:c8:71:51:e7:c0:b8:ab:3f:06:08:
46:52:37:4b:0f:36:d9:d0:01:16:87:d7:82:91:fc:
19:89:b7:6e:c6:63:c0:e4:e0:5a:f3:78:f9:06:92:
e0:1c:10:8c:37:5f:f6:72:2b:25:f9:ac:d4:aa:f3:
4d:61:56:d0:7d:9c:b0:e1:2a:eb:c6:82:70:54:10:
35:7c:10:d4:85:b3:b7:80:cb:3d:f7:d8:c4:60:92:
47:f8:ab:e8:1c:6c:b6:a6:3c:0b:2d:82:c9:c9:98:
0b:71:e9:a8:e5:97:7e:cd:3a:02:c3:2a:54:a0:37:
ae:9b:29:97:66:14:9a:d2:78:b4:cc:8e:96:fb:a9:
55:b6:7c:09:72:00:5c:b7:35:e8:f3:7e:4b:bb:4a:
cd:75:ed:74:ad:d2:92:ae:6a:12:51:e0:f5:8d:2d:
51:04:9d:67:72:d7:1a:ee:af:8e:9b:fb:e5:60:82:
51:15:4e:ec:3b:3c:06:ee:71:71:2f:80:7f:87:8e:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:44:98:9D:25:00:B8:25:32:B7:A9:5B:CE:C1:63:F2:4B:0F:2C
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e6:d1:ea:74:a6:11:9d:03:7a:54:bf:b8:28:04:2e:55:b3:
f3:cd:1a:d8:0c:eb:6e:12:e4:94:55:58:34:09:5c:da:fe:80:
1b:e3:fe:64:00:85:e4:ff:42:9b:ce:b4:92:39:5e:e7:33:d9:
30:18:14:4d:92:cd:8a:c9:2b:ee:80:99:a7:4d:7d:bb:8e:46:
f7:d2:07:75:4d:f6:5b:27:0a:fb:da:7d:5f:cf:48:03:f3:90:
7e:03:3c:1f:d9:d0:97:e0:7d:1d:ba:1c:b5:91:25:e5:fc:a3:
b9:09:2e:be:3b:95:fb:47:38:fd:11:ee:fb:2c:5d:d3:b2:63:
bb:1f:7f:8e:ad:5f:7e:ef:33:1e:51:d4:7d:5c:54:4e:59:15:
82:88:97:98:f1:13:ac:16:db:98:29:56:61:25:04:84:ed:51:
bf:ca:8f:c2:01:36:d5:f1:8e:aa:4d:35:a9:8e:35:b8:96:e3:
85:fa:bf:ed:40:6e:78:1c:52:36:6d:15:e5:5c:f6:36:6a:b6:
37:d3:94:bb:be:e5:ca:16:67:d7:96:0b:2f:41:c9:93:cd:8a:
d9:6c:c6:04:f9:31:e4:d0:a0:ce:fb:3c:51:fb:53:07:81:bc:
f5:89:c9:a8:d6:55:1c:6b:57:47:ab:e9:1d:45:bc:c7:14:dd:
82:3a:1e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmfL87cyPV+lWCuXBllR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODI5NmM1MGQ5NGJiZWQyMjVmMjg2NzIzMWZhNTA5M2Rl
YmVhOTEwHhcNMjYwNDE3MTgwMDI3WhcNMjYwNDE4MTgwMDI3WjAzMTEwLwYDVQQD
Eyg4M2M2NDQ5ODlkMjUwMGI4MjUzMmI3YTk1YmNlYzE2M2YyNGIwZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VD2x8YCWU41cy8NyRfZxgSerzQO
xQhd3X2jI/Yl59gy/tix/MGH2zd3YBj/H9umP8NaAefb0jMVOMB0xcrQPshxUefA
uKs/BghGUjdLDzbZ0AEWh9eCkfwZibduxmPA5OBa83j5BpLgHBCMN1/2cisl+azU
qvNNYVbQfZyw4SrrxoJwVBA1fBDUhbO3gMs999jEYJJH+KvoHGy2pjwLLYLJyZgL
cemo5Zd+zToCwypUoDeumymXZhSa0ni0zI6W+6lVtnwJcgBctzXo835Lu0rNde10
rdKSrmoSUeD1jS1RBJ1nctca7q+Om/vlYIJRFU7sOzwG7nFxL4B/h47iPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPGRJidJQC4JTK3qVvOwWPySw8sMB8GA1UdIwQY
MBaAFJiClsUNlLvtIl8oZyMfpQk96+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMt
Mzk5M2I1MGIyMDY0LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMtMzk5M2I1MGIyMDY0
LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsebR6nSm
EZ0DelS/uCgELlWz880a2AzrbhLklFVYNAlc2v6AG+P+ZACF5P9Cm860kjle5zPZ
MBgUTZLNiskr7oCZp019u45G99IHdU32WycK+9p9X89IA/OQfgM8H9nQl+B9Hboc
tZEl5fyjuQkuvjuV+0c4/RHu+yxd07Jjux9/jq1ffu8zHlHUfVxUTlkVgoiXmPET
rBbbmClWYSUEhO1Rv8qPwgE21fGOqk01qY41uJbjhfq/7UBueBxSNm0V5Vz2Nmq2
N9OUu77lyhZn15YLL0HJk82K2WzGBPkx5NCgzvs8UftTB4G89YnJqNZVHGtXR6vp
HUW8xxTdgjoe2A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:08 2026 by rpki-client