Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: aZGFgA1B64egQrJbY6G64DNYJLEOkAFUqsxxrr+XmN0=
Subject key identifier: 94:6D:40:33:4F:CB:04:BF:49:89:C4:A2:EA:20:8E:8C:E4:FC:41:96
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 019D9A750E4843A54091372DEA35BB7C0BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 15E7
Signing time: Fri 17 Apr 2026 08:00:55 +0000
Manifest this update: Fri 17 Apr 2026 08:00:55 +0000
Manifest next update: Sat 18 Apr 2026 08:00:55 +0000
Files and hashes: 1: 4nJD6h_AT_Jm3vuCDyt9q7O_3CQ.roa (hash: GQ/gs01dnRvZL+8O2A61zDdVjrGTgR7MaIk+wMIYhGg=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: SDg1YFoZaWMoyWAiqUTOhbK04/mrsdleOeKDrGWBitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:0e:48:43:a5:40:91:37:2d:ea:35:bb:7c:0b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Apr 17 08:00:55 2026 GMT
Not After : Apr 18 08:00:55 2026 GMT
Subject: CN=946d40334fcb04bf4989c4a2ea208e8ce4fc4196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:19:df:18:0d:e4:bc:45:08:20:02:6e:34:
66:b5:cc:b6:bb:96:04:93:58:da:36:ec:29:e8:d7:
af:eb:98:6c:91:88:ba:c4:b2:cb:d9:91:cf:22:94:
89:f7:e9:8c:32:f6:5d:e3:be:8a:46:fb:9f:9d:9e:
02:a5:2e:71:db:ff:55:5b:6b:ef:0e:7f:0b:2c:bb:
33:f7:0a:f3:3d:c3:9f:48:56:84:00:91:b0:5e:36:
7e:0f:f6:f2:c6:7b:7f:51:ac:1d:89:56:22:4c:f4:
9a:6c:1a:5b:92:15:03:d6:1e:0a:55:c8:99:48:54:
27:8d:59:84:a3:62:c7:bd:57:75:49:08:c6:42:13:
af:bd:cf:39:39:92:d4:25:a8:60:56:05:58:b3:0b:
4e:48:03:43:e9:a3:91:24:b9:40:c8:76:ed:e6:7a:
38:a5:1b:f2:b7:be:69:fa:9e:63:37:b8:44:1c:c4:
52:85:31:e4:5e:7d:ba:8d:a7:db:58:53:4b:c5:9e:
86:3b:d8:dd:56:1c:b3:62:3c:24:9b:f2:c6:c4:34:
e3:3c:db:75:51:fa:f9:01:c3:78:5a:0a:1c:72:87:
6b:29:5b:c1:6c:a4:fa:7e:87:38:e9:f2:95:c0:93:
5a:9c:3a:e1:a3:74:9f:7c:b0:59:b6:15:37:34:9e:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:40:33:4F:CB:04:BF:49:89:C4:A2:EA:20:8E:8C:E4:FC:41:96
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d5:2e:d9:12:6f:0c:bc:6e:05:ac:09:99:6c:c7:65:46:be:
fa:05:7a:54:ba:ba:c2:4e:dd:19:fd:a8:db:34:8c:f7:15:d1:
47:b0:98:28:cf:2e:54:08:1c:c2:3d:d6:f4:2d:cd:bc:ed:ae:
8a:ff:3a:8a:6f:67:e8:98:c0:50:0b:de:a2:06:62:da:bb:24:
0c:89:62:1b:00:48:28:c3:c6:6a:63:f8:66:40:1f:9b:60:c4:
65:8f:23:49:ab:fd:96:49:23:c5:ae:6c:af:d1:5c:cf:42:ff:
cf:1e:a7:96:5e:38:27:04:69:86:b7:f0:e1:3c:3f:c3:ef:d1:
00:14:4a:b0:13:16:c5:5e:c3:e3:f0:6b:a2:df:9a:01:6f:40:
95:c1:95:b3:de:2f:c6:87:77:b7:61:71:91:23:00:c0:58:72:
5b:e2:7b:77:07:58:cb:41:55:6e:e4:9b:5c:83:0e:db:a9:db:
ff:4a:fc:0d:98:16:ce:76:7a:18:87:5e:4e:3b:38:98:0a:5d:
db:09:72:f0:dd:9e:f0:f0:9f:98:e2:9f:ee:2c:a9:80:85:29:
a4:a5:3c:f8:4b:b7:9e:b4:5b:8a:64:7f:13:8b:a4:8c:c7:97:
37:d5:da:f2:06:a8:01:99:b7:46:02:24:a9:e1:35:3d:77:3c:
b8:41:fd:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adQ5IQ6VAkTct6jW7fAvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NjUyZmU2NTI5NjZkNzI4YTUyN2FlZTZlNDNjNDg1YzY5
MzlmNDUwHhcNMjYwNDE3MDgwMDU1WhcNMjYwNDE4MDgwMDU1WjAzMTEwLwYDVQQD
Eyg5NDZkNDAzMzRmY2IwNGJmNDk4OWM0YTJlYTIwOGU4Y2U0ZmM0MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jgZ3xgN5LxFCCACbjRmtcy2u5YE
k1jaNuwp6Nev65hskYi6xLLL2ZHPIpSJ9+mMMvZd476KRvufnZ4CpS5x2/9VW2vv
Dn8LLLsz9wrzPcOfSFaEAJGwXjZ+D/byxnt/UawdiVYiTPSabBpbkhUD1h4KVciZ
SFQnjVmEo2LHvVd1SQjGQhOvvc85OZLUJahgVgVYswtOSAND6aORJLlAyHbt5no4
pRvyt75p+p5jN7hEHMRShTHkXn26jafbWFNLxZ6GO9jdVhyzYjwkm/LGxDTjPNt1
Ufr5AcN4WgoccodrKVvBbKT6foc46fKVwJNanDrho3SffLBZthU3NJ5TTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRtQDNPywS/SYnEouogjozk/EGWMB8GA1UdIwQY
MBaAFIhlL+ZSlm1yilJ67m5DxIXGk59FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAt
NDk2ZjMwYWM1Mjc1LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yMDE3NjMtMTc2Yy00ZTc4LTliYzAtNDk2ZjMwYWM1Mjc1
LzEvaUdVdjVsS1diWEtLVW5ydWJrUEVoY2FUbjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmdUu2RJv
DLxuBawJmWzHZUa++gV6VLq6wk7dGf2o2zSM9xXRR7CYKM8uVAgcwj3W9C3NvO2u
iv86im9n6JjAUAveogZi2rskDIliGwBIKMPGamP4ZkAfm2DEZY8jSav9lkkjxa5s
r9Fcz0L/zx6nll44JwRphrfw4Tw/w+/RABRKsBMWxV7D4/Brot+aAW9AlcGVs94v
xod3t2FxkSMAwFhyW+J7dwdYy0FVbuSbXIMO26nb/0r8DZgWznZ6GIdeTjs4mApd
2wly8N2e8PCfmOKf7iypgIUppKU8+Eu3nrRbimR/E4ukjMeXN9Xa8gaoAZm3RgIk
qeE1PXc8uEH9pA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:33 2026 by rpki-client