Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
File: IixFhb2I-yfK3ynuW7ldZXX874M.mft (raw, json)
Hash identifier: fasqmC1jOz4Y90E5fIAZElkKRhYs6O/sLyGz6MCZlKg=
Subject key identifier: E6:13:78:7C:18:3F:A8:19:AC:02:BD:5F:52:FC:9D:72:50:D9:C4:A4
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 019DA4C18D14B7D72CDD9BBD8EC70C70B822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
Manifest number: 1019
Signing time: Sun 19 Apr 2026 08:00:41 +0000
Manifest this update: Sun 19 Apr 2026 08:00:41 +0000
Manifest next update: Mon 20 Apr 2026 08:00:41 +0000
Files and hashes: 1: 1lY-CsGva2obFTlBMU3iZDfCreA.roa (hash: Snn45LbsQALIONEF3gxNerrBtObVtDy584EK4tr9H6g=)
2: 2bVvxRffnJ6GQKgs2LoPDWvUcK4.roa (hash: er7wIVOxtiLCvuKAAvSBfYTSBvkd5n1t/IW0taeZM7Y=)
3: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (hash: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw=)
4: IixFhb2I-yfK3ynuW7ldZXX874M.crl (hash: AOs2Z2RHlpNQhts0ONNLDMfg2a3vUHC4baI8BpubeGs=)
5: QdRrKIrH4mGJmO4pGdzpank3gew.roa (hash: uL5ZvBd0SOggdi3Ll3eXsAHR4s6R5DvUqu2sa+EiNtI=)
6: TruqXXhyrBV8Cwe5yzCBt7QLsCE.roa (hash: Ab+jWWB0kPKqVoiUmBfNBgr0bDHAA/s+gzbI3fKh/Jo=)
7: YIiAdksRfvM2tL27jCCRXB5ju3Q.roa (hash: QClgQMgXCLixY3zPZ3xGliorGs5EkE6bJGcMO+wqsBg=)
8: hD3IqorNDrlwkzGUmybhJLv5L2k.roa (hash: ZaWNL4A6CBZBDeNroOwIUO67tG+ZeiSsCvPL+QQ5od4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:8d:14:b7:d7:2c:dd:9b:bd:8e:c7:0c:70:b8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Apr 19 08:00:41 2026 GMT
Not After : Apr 20 08:00:41 2026 GMT
Subject: CN=e613787c183fa819ac02bd5f52fc9d7250d9c4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:d6:56:29:2e:d7:a1:94:16:98:48:0e:55:
19:da:f0:50:42:07:00:b2:ca:e5:61:d2:bf:de:a7:
30:7f:f1:db:34:79:16:54:8c:8d:7f:77:ee:de:23:
76:cd:be:f2:50:44:61:71:bd:f1:a5:82:74:d8:4e:
ab:bc:89:12:7c:0a:2f:ac:61:6a:5e:d9:c9:27:35:
c9:98:bb:1a:52:97:dc:5b:55:fc:97:09:eb:d1:c9:
bf:6c:60:e3:90:ad:5a:b9:f1:14:9a:79:29:5c:43:
73:d6:2f:00:a9:38:1b:0b:07:3f:f8:85:7a:60:8e:
84:73:44:e2:85:d0:b8:ea:a4:02:1b:59:b4:aa:75:
4c:e4:d7:3e:b8:d2:ab:04:d3:d4:4d:3f:e4:33:2a:
06:7d:20:56:55:62:cf:ce:7b:71:ed:6b:dc:c3:7c:
af:40:33:b6:60:c4:01:9c:84:6d:c4:e4:5c:5f:ab:
14:15:0a:d8:e3:ec:aa:23:7d:b4:93:20:54:fd:34:
99:6f:7e:97:ad:a0:f5:49:5e:c8:cf:06:46:54:ae:
9b:08:4a:f6:75:1a:c0:ae:60:6b:de:db:17:42:84:
80:d2:f7:40:5a:3f:e6:44:a4:c9:64:bf:7c:95:46:
1a:90:b1:e9:ed:14:8b:28:28:ac:3b:cf:c9:fe:18:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:13:78:7C:18:3F:A8:19:AC:02:BD:5F:52:FC:9D:72:50:D9:C4:A4
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:70:92:b0:a8:68:b8:18:ab:f7:b1:81:21:b1:4b:29:be:f1:
e5:11:f8:c6:0c:34:98:99:bf:72:ce:f3:fb:cf:d7:5d:6a:0f:
cd:4d:e6:4b:31:02:67:30:eb:b1:87:df:98:e9:1d:3d:8e:32:
fa:bd:1e:80:6d:16:b9:63:f1:12:10:8c:ad:e1:eb:76:bb:ed:
8e:e7:33:79:71:03:93:71:66:4e:d2:ac:1b:5a:58:ab:84:3b:
6b:7b:8b:e9:13:b3:36:cd:89:26:f2:3c:d4:23:34:c5:be:83:
85:00:a2:48:0f:20:f4:0e:1e:25:c2:88:ac:b6:c3:76:6e:d9:
23:0f:20:09:f7:d6:88:a9:1d:d7:cc:9f:62:5d:f4:07:03:d5:
6c:c2:5e:c8:de:d1:5a:ab:eb:ce:c1:34:00:03:22:fe:6c:ba:
6d:7b:2d:9f:da:86:db:fb:03:54:22:3b:bc:fe:b7:49:4c:c4:
00:0a:e9:80:5c:b1:cc:2a:e7:28:13:b3:96:5a:3a:8a:4b:f9:
d8:2b:f7:2b:c2:97:26:29:b8:1c:a9:db:99:31:59:53:cb:13:
f7:8f:c8:5b:bc:4a:c7:ec:a0:e6:b8:91:e8:a5:76:ad:d0:05:
22:7d:d7:85:42:d3:2c:20:13:93:4e:fe:55:4c:8b:dc:e9:ca:
42:24:41:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwY0Ut9cs3Zu9jscMcLgiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm
Y2VmODMwHhcNMjYwNDE5MDgwMDQxWhcNMjYwNDIwMDgwMDQxWjAzMTEwLwYDVQQD
EyhlNjEzNzg3YzE4M2ZhODE5YWMwMmJkNWY1MmZjOWQ3MjUwZDljNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8zWViku16GUFphIDlUZ2vBQQgcA
ssrlYdK/3qcwf/HbNHkWVIyNf3fu3iN2zb7yUERhcb3xpYJ02E6rvIkSfAovrGFq
XtnJJzXJmLsaUpfcW1X8lwnr0cm/bGDjkK1aufEUmnkpXENz1i8AqTgbCwc/+IV6
YI6Ec0TihdC46qQCG1m0qnVM5Nc+uNKrBNPUTT/kMyoGfSBWVWLPzntx7Wvcw3yv
QDO2YMQBnIRtxORcX6sUFQrY4+yqI320kyBU/TSZb36XraD1SV7IzwZGVK6bCEr2
dRrArmBr3tsXQoSA0vdAWj/mRKTJZL98lUYakLHp7RSLKCisO8/J/hgxQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYTeHwYP6gZrAK9X1L8nXJQ2cSkMB8GA1UdIwQY
MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt
YzY0N2E4YzFkZGZhLzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh
LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXCSsKho
uBir97GBIbFLKb7x5RH4xgw0mJm/cs7z+8/XXWoPzU3mSzECZzDrsYffmOkdPY4y
+r0egG0WuWPxEhCMreHrdrvtjuczeXEDk3FmTtKsG1pYq4Q7a3uL6ROzNs2JJvI8
1CM0xb6DhQCiSA8g9A4eJcKIrLbDdm7ZIw8gCffWiKkd18yfYl30BwPVbMJeyN7R
WqvrzsE0AAMi/my6bXstn9qG2/sDVCI7vP63SUzEAArpgFyxzCrnKBOzllo6ikv5
2Cv3K8KXJim4HKnbmTFZU8sT94/IW7xKx+yg5riR6KV2rdAFIn3XhULTLCATk07+
VUyL3OnKQiRBRw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:01 2026 by rpki-client