Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: KEUovks/sfT5VLsrcE+mGgUFhmCpjj/fKbboum665yA=
Subject key identifier: D5:57:98:E7:51:4D:3E:05:EA:90:9E:1D:59:EF:D1:77:72:88:EB:A5
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019DA3E650C262C72CDF57E182FC60FE8F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 14B3
Signing time: Sun 19 Apr 2026 04:01:13 +0000
Manifest this update: Sun 19 Apr 2026 04:01:13 +0000
Manifest next update: Mon 20 Apr 2026 04:01:13 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: F/VBWHaoNETq3Qy47Q+kFX/pTEtA88zGHWDa3J1y5qk=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:50:c2:62:c7:2c:df:57:e1:82:fc:60:fe:8f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Apr 19 04:01:13 2026 GMT
Not After : Apr 20 04:01:13 2026 GMT
Subject: CN=d55798e7514d3e05ea909e1d59efd1777288eba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:96:b2:a0:45:28:e7:c6:d1:2a:7d:b4:d8:
08:71:90:22:08:37:14:18:3c:dc:09:de:88:ea:e9:
6d:74:da:86:2e:c7:81:fb:b1:54:01:c6:47:55:00:
02:41:75:0e:88:56:21:26:a5:1d:62:69:40:4f:c9:
88:e1:4b:5b:8e:35:75:d7:05:b1:c2:18:60:3d:44:
6e:a7:8b:2a:48:a5:b6:5d:2c:30:13:ba:24:c4:f5:
c3:4f:7b:42:60:2d:af:c3:8b:57:ad:82:45:eb:da:
25:0e:d8:b8:fc:ae:b9:6c:cd:e6:8c:51:a6:ac:df:
d5:14:de:37:51:5c:fe:d1:8b:6b:bf:62:e3:be:72:
ea:31:2b:37:13:dd:e0:22:84:c2:46:a6:4d:b9:3a:
42:6c:da:0b:1b:54:80:49:f0:65:9c:ee:19:2f:7e:
b8:16:18:7d:b8:0b:4a:46:ee:c3:b1:6b:eb:57:50:
8c:db:a1:0f:1c:03:f7:87:39:b1:c8:96:81:f1:c6:
f1:ce:d7:0b:ea:36:9e:9c:2d:bf:f4:ff:eb:8b:26:
31:69:f5:61:ff:be:35:4c:ad:d1:35:a5:e7:3d:9b:
76:4e:c4:4f:c7:02:23:34:c1:e8:b4:c9:dc:9c:22:
9e:a3:d7:25:d6:69:0c:92:15:54:f9:e9:b4:72:2b:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:98:E7:51:4D:3E:05:EA:90:9E:1D:59:EF:D1:77:72:88:EB:A5
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:92:c6:40:be:74:65:f4:1d:4c:73:3c:32:93:d3:9f:42:4e:
fc:1f:4d:f8:d2:3b:02:a2:37:e6:41:a7:23:ec:51:07:5b:26:
c0:46:57:28:83:d2:cf:1f:29:7f:2f:93:60:1e:79:d4:e9:13:
ba:0b:7c:da:90:06:36:22:54:09:d4:7a:a2:e6:c7:fb:4f:79:
79:6b:73:56:0f:e1:64:7c:7d:b8:5e:0c:02:26:f8:83:b2:95:
76:d8:1b:6a:7c:b8:57:84:23:58:22:50:fe:ec:2b:5f:f2:96:
ae:8a:9b:7b:52:5c:2b:c3:e6:40:00:39:ce:ce:e8:67:eb:6a:
e5:d5:f1:19:db:b5:2c:ac:61:f9:f4:dd:3d:c2:3f:b8:8a:02:
70:24:a5:b2:55:67:8f:66:dd:82:de:0a:1a:ef:98:6a:4e:1a:
6a:ed:80:e4:02:75:85:9d:e9:31:16:59:8c:36:d4:8e:b7:28:
26:27:08:0d:b9:d8:8e:a3:fe:98:ee:8a:a1:33:1b:5b:48:d9:
b4:80:38:39:9c:4c:07:81:72:f1:08:ae:f9:01:de:f8:75:2e:
ad:42:e8:73:09:81:44:86:dc:8f:e0:67:d6:27:aa:2b:72:67:
3c:10:42:9b:33:47:a5:19:49:9d:7f:a7:06:70:d2:73:b3:6a:
f6:6d:33:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5lDCYscs31fhgvxg/o+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjYwNDE5MDQwMTEzWhcNMjYwNDIwMDQwMTEzWjAzMTEwLwYDVQQD
EyhkNTU3OThlNzUxNGQzZTA1ZWE5MDllMWQ1OWVmZDE3NzcyODhlYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JSWsqBFKOfG0Sp9tNgIcZAiCDcU
GDzcCd6I6ultdNqGLseB+7FUAcZHVQACQXUOiFYhJqUdYmlAT8mI4UtbjjV11wWx
whhgPURup4sqSKW2XSwwE7okxPXDT3tCYC2vw4tXrYJF69olDti4/K65bM3mjFGm
rN/VFN43UVz+0Ytrv2LjvnLqMSs3E93gIoTCRqZNuTpCbNoLG1SASfBlnO4ZL364
Fhh9uAtKRu7DsWvrV1CM26EPHAP3hzmxyJaB8cbxztcL6jaenC2/9P/riyYxafVh
/741TK3RNaXnPZt2TsRPxwIjNMHotMncnCKeo9cl1mkMkhVU+em0ciuHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVXmOdRTT4F6pCeHVnv0XdyiOulMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJLGQL50
ZfQdTHM8MpPTn0JO/B9N+NI7AqI35kGnI+xRB1smwEZXKIPSzx8pfy+TYB551OkT
ugt82pAGNiJUCdR6oubH+095eWtzVg/hZHx9uF4MAib4g7KVdtgbany4V4QjWCJQ
/uwrX/KWroqbe1JcK8PmQAA5zs7oZ+tq5dXxGdu1LKxh+fTdPcI/uIoCcCSlslVn
j2bdgt4KGu+Yak4aau2A5AJ1hZ3pMRZZjDbUjrcoJicIDbnYjqP+mO6KoTMbW0jZ
tIA4OZxMB4Fy8Qiu+QHe+HUurULocwmBRIbcj+Bn1ieqK3JnPBBCmzNHpRlJnX+n
BnDSc7Nq9m0zAQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:27:12 2026 by rpki-client