Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: ix3doF2/pIqZqhNLoC4beBKZNk0hLUfKVXbNvVyCciI=
Subject key identifier: BB:13:D6:64:23:74:27:6E:7D:82:A5:83:87:33:90:92:D8:5E:3B:27
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019DA567512A8F70DD28BFCA48EC0E1ED82D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 119E
Signing time: Sun 19 Apr 2026 11:01:44 +0000
Manifest this update: Sun 19 Apr 2026 11:01:44 +0000
Manifest next update: Mon 20 Apr 2026 11:01:44 +0000
Files and hashes: 1: 3yOJ06gfUKk-2XYdWHLIAlWgfEc.roa (hash: nXcj7d6dSu1swvQGzGjJKVLnGkefzXVXrhP3pXEGcwM=)
2: 7rB4dVkLekdvJu2WV1aBm26tfk4.roa (hash: dQXlWyfYcUEq4/cQMbVBV+QLb2ARWgSkORhGuX+vIpo=)
3: BDnFJ4jYiW4UB0OWqHm0E81ZFGk.roa (hash: kHvW0Bcsv+dU2wBHMm0QcL2FR83ZCdT4yyeLFS4eeP8=)
4: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: sZnkhS7VvFkKqo4T0oYfN4AkyLRY+9eSVTfRgiGo+mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:51:2a:8f:70:dd:28:bf:ca:48:ec:0e:1e:d8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Apr 19 11:01:44 2026 GMT
Not After : Apr 20 11:01:44 2026 GMT
Subject: CN=bb13d6642374276e7d82a58387339092d85e3b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:07:20:7f:be:f7:38:6e:e3:91:2e:c5:9e:
6d:5a:78:2f:7c:54:12:a0:3e:46:4e:e5:e5:b7:c1:
91:45:94:ad:a9:0d:62:bd:40:7d:9f:25:42:10:94:
bb:f8:45:6c:7e:f0:b5:94:db:ff:d0:d3:ab:e4:de:
08:61:39:1b:37:32:23:5e:24:9f:91:47:7e:9f:18:
f2:7a:cf:db:50:76:c7:76:95:27:5f:71:5d:d9:80:
c6:af:b3:89:eb:17:f5:dd:9a:cc:ba:64:8f:db:14:
a8:bb:0d:06:53:ad:e9:09:3c:63:94:59:f7:ae:ad:
76:fe:01:6b:4b:e1:1a:b9:39:4f:5f:9a:c2:51:73:
4a:3a:17:f7:e6:be:95:6b:c5:8f:3f:ec:e9:8f:23:
b8:37:2e:5f:21:da:cd:dc:62:cc:55:f0:0b:36:31:
0d:5f:9c:96:13:8f:d2:69:cc:36:a8:21:c0:3d:a2:
32:d3:8c:23:0c:20:de:94:ad:35:df:46:7a:8e:0c:
df:89:a3:4e:f0:c3:4c:3b:3a:94:fa:e3:18:3a:4a:
5c:36:11:fb:dc:f2:3b:26:9e:28:ec:05:86:4b:0e:
e4:d2:b8:f5:8e:26:30:0e:80:68:cf:d4:bf:50:48:
26:bc:e9:64:cb:63:61:27:c2:50:4b:3b:fb:1e:60:
4d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:D6:64:23:74:27:6E:7D:82:A5:83:87:33:90:92:D8:5E:3B:27
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2c:73:54:2c:e1:f2:7f:86:39:6c:69:6c:6f:24:1a:2b:29:
79:e3:bf:93:2d:1a:85:ea:18:eb:d6:ed:94:33:0c:59:5e:a2:
20:9b:d4:20:ee:95:17:22:f4:a0:39:7f:60:28:35:c4:4e:bf:
f7:ef:de:46:3e:f3:62:ef:f0:9a:a9:ac:d1:d8:06:11:68:03:
2c:9e:10:53:76:7e:80:bd:41:5b:ed:22:0f:41:c0:54:30:c0:
16:00:04:8a:d9:c4:12:0b:51:9f:4c:78:a4:51:fe:58:46:e7:
d8:5b:41:af:9e:5e:2a:51:b3:59:3d:41:2b:0d:2c:ae:a4:77:
77:a8:93:37:e9:85:c4:93:dc:6a:5f:e7:60:ca:31:54:18:56:
91:f1:29:7c:c8:1b:c0:6d:cb:d2:4d:ab:ca:a0:31:d7:ab:88:
ca:e8:86:64:fb:4d:1f:1f:1e:17:7c:d4:13:9c:d1:52:b5:47:
e7:de:e2:b0:11:08:fe:6d:fd:47:86:84:19:e3:5a:26:f6:dd:
6f:e8:25:62:d9:7c:66:36:ba:97:f0:b8:1b:98:84:55:9c:b5:
d3:4a:47:71:68:91:19:01:e7:45:62:86:c5:f9:fd:79:ca:d7:
65:c7:c1:c6:19:93:5a:9f:30:a0:7b:7c:c9:06:7b:d1:20:76:
4c:02:9f:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZ1Eqj3DdKL/KSOwOHtgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWE0MDlkMjdiOWE2OTM0NjMyNDAwNDY5NGRhMTFiZWFl
MDJkYmIwHhcNMjYwNDE5MTEwMTQ0WhcNMjYwNDIwMTEwMTQ0WjAzMTEwLwYDVQQD
EyhiYjEzZDY2NDIzNzQyNzZlN2Q4MmE1ODM4NzMzOTA5MmQ4NWUzYjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U8HIH++9zhu45EuxZ5tWngvfFQS
oD5GTuXlt8GRRZStqQ1ivUB9nyVCEJS7+EVsfvC1lNv/0NOr5N4IYTkbNzIjXiSf
kUd+nxjyes/bUHbHdpUnX3Fd2YDGr7OJ6xf13ZrMumSP2xSouw0GU63pCTxjlFn3
rq12/gFrS+EauTlPX5rCUXNKOhf35r6Va8WPP+zpjyO4Ny5fIdrN3GLMVfALNjEN
X5yWE4/Sacw2qCHAPaIy04wjDCDelK0130Z6jgzfiaNO8MNMOzqU+uMYOkpcNhH7
3PI7Jp4o7AWGSw7k0rj1jiYwDoBoz9S/UEgmvOlky2NhJ8JQSzv7HmBNQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsT1mQjdCdufYKlg4czkJLYXjsnMB8GA1UdIwQY
MBaAFCFaQJ0nuaaTRjJABGlNoRvq4C27MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2Ut
OThkMmZlZTBmODdhLzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mMGM5ZTMtMWM0MC00ZjMzLTk1Y2UtOThkMmZlZTBmODdh
LzEvSVZwQW5TZTVwcE5HTWtBRWFVMmhHLXJnTGJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGixzVCzh
8n+GOWxpbG8kGispeeO/ky0aheoY69btlDMMWV6iIJvUIO6VFyL0oDl/YCg1xE6/
9+/eRj7zYu/wmqms0dgGEWgDLJ4QU3Z+gL1BW+0iD0HAVDDAFgAEitnEEgtRn0x4
pFH+WEbn2FtBr55eKlGzWT1BKw0srqR3d6iTN+mFxJPcal/nYMoxVBhWkfEpfMgb
wG3L0k2ryqAx16uIyuiGZPtNHx8eF3zUE5zRUrVH597isBEI/m39R4aEGeNaJvbd
b+glYtl8Zja6l/C4G5iEVZy100pHcWiRGQHnRWKGxfn9ecrXZcfBxhmTWp8woHt8
yQZ70SB2TAKf7w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:18 2026 by rpki-client