Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: Q8RhErMKkX0pGBh9bR5S3H0fJScKWeBDYIDp1aNqbhY=
Subject key identifier: 30:9D:5C:68:32:44:4D:68:CF:2D:64:0A:9A:48:63:F0:02:9F:54:83
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 019D99D037AFE13D2A30E3106AFA6419DBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 14AC
Signing time: Fri 17 Apr 2026 05:00:52 +0000
Manifest this update: Fri 17 Apr 2026 05:00:52 +0000
Manifest next update: Sat 18 Apr 2026 05:00:52 +0000
Files and hashes: 1: AXDbFHRRURCQerpRgnAggK7Ta-Y.roa (hash: p8zZBqBwXmRPjDHpTUw1CzO1XmAgl9lFsGmMaXiazxE=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: VCyWxlFXDK3lcxreqqDBZhmBCZPnnm6IF4uuvoZWxcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:37:af:e1:3d:2a:30:e3:10:6a:fa:64:19:db:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Apr 17 05:00:52 2026 GMT
Not After : Apr 18 05:00:52 2026 GMT
Subject: CN=309d5c6832444d68cf2d640a9a4863f0029f5483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2e:5b:b1:1e:76:e4:58:f6:e7:3b:f1:e2:c0:
9c:97:de:e0:1e:78:a9:11:41:7f:4e:09:ec:09:4f:
95:5a:d7:2b:01:14:45:42:e5:b5:d0:ca:36:89:40:
99:50:19:ac:15:05:76:d5:06:e1:87:05:56:7d:9b:
fe:bf:a4:e8:0a:61:9f:ba:d6:9b:30:f2:4a:9b:8d:
0f:04:d3:bb:c1:bb:ea:5d:ea:ef:fe:13:1d:c9:53:
ef:8a:53:29:7a:a3:31:a2:3d:f9:5b:b4:a7:3c:b7:
8f:52:db:e3:04:a7:e9:38:92:c0:9c:2a:b8:0a:a1:
2b:05:d6:d6:a9:d3:a8:48:fa:7f:a6:8e:fe:91:87:
cf:82:62:62:30:c3:77:2a:b8:4e:57:13:33:29:1a:
75:45:cf:40:9c:a4:09:6b:8c:cf:22:8a:ff:1e:a4:
b2:5f:cf:aa:e6:7b:22:5c:fa:1a:68:a5:58:5e:29:
9c:23:eb:d0:92:c0:a3:a0:48:24:3a:7d:d2:95:4e:
9a:0c:0c:e2:bf:47:81:4f:a4:9e:fc:a2:9d:c5:75:
04:62:06:61:ae:05:bb:5c:1b:84:4e:23:f7:d3:d8:
88:c8:a0:86:e5:1e:e8:10:63:e9:60:2f:0f:38:01:
23:bd:61:8f:74:90:a3:27:cd:04:b8:72:51:5c:58:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9D:5C:68:32:44:4D:68:CF:2D:64:0A:9A:48:63:F0:02:9F:54:83
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ca:fd:30:4a:65:e8:03:20:14:72:a0:d5:55:70:21:c0:3a:
de:c2:2b:80:da:73:c6:73:f9:eb:bb:03:12:68:7a:fe:ed:2f:
74:bf:c2:a8:c0:8c:7c:e1:fe:1a:f3:42:d3:93:33:9b:88:d0:
a9:e2:b5:cd:c9:41:ef:50:05:14:b5:0f:7a:68:b6:ac:d6:30:
d8:1f:e6:79:51:2b:91:7c:3f:98:42:4e:5f:ec:8a:86:86:98:
07:3b:a3:96:ce:e3:92:38:42:2e:db:0b:a3:c3:05:69:3a:e8:
9c:01:23:bb:8d:10:2b:20:f4:97:cf:74:36:68:df:82:05:f3:
4f:21:76:5c:0d:81:54:f8:9c:ac:54:49:b6:ad:8f:94:5d:7f:
a4:7b:e8:e2:17:42:9a:a5:f6:9d:b4:b8:71:2a:99:27:9f:7e:
de:eb:cc:67:9c:91:a7:9c:ce:76:89:2b:5c:65:86:ca:ca:c5:
b4:40:0c:24:81:88:59:fa:39:b3:f1:1d:c6:cb:95:bf:7e:62:
df:52:6a:4d:99:a9:a5:b4:89:82:ef:1b:4d:34:42:62:c6:2e:
5f:19:17:5b:cd:6b:e4:95:71:7b:63:7e:2f:26:98:36:13:ce:
a4:d0:38:3e:ba:46:3e:23:4b:47:a1:83:ed:36:66:08:3d:f1:
35:11:52:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0Dev4T0qMOMQavpkGdvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZmI1MjhhYmEwMThmMTQyZjQ0NDRjY2NjOTcyMzczNmNk
NGU0YjYwHhcNMjYwNDE3MDUwMDUyWhcNMjYwNDE4MDUwMDUyWjAzMTEwLwYDVQQD
EygzMDlkNWM2ODMyNDQ0ZDY4Y2YyZDY0MGE5YTQ4NjNmMDAyOWY1NDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC5bsR525Fj25zvx4sCcl97gHnip
EUF/TgnsCU+VWtcrARRFQuW10Mo2iUCZUBmsFQV21QbhhwVWfZv+v6ToCmGfutab
MPJKm40PBNO7wbvqXerv/hMdyVPvilMpeqMxoj35W7SnPLePUtvjBKfpOJLAnCq4
CqErBdbWqdOoSPp/po7+kYfPgmJiMMN3KrhOVxMzKRp1Rc9AnKQJa4zPIor/HqSy
X8+q5nsiXPoaaKVYXimcI+vQksCjoEgkOn3SlU6aDAziv0eBT6Se/KKdxXUEYgZh
rgW7XBuETiP309iIyKCG5R7oEGPpYC8POAEjvWGPdJCjJ80EuHJRXFj3WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCdXGgyRE1ozy1kCppIY/ACn1SDMB8GA1UdIwQY
MBaAFCL7Uoq6AY8UL0REzMyXI3Ns1OS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQt
NmFlOTBiMjQ3NTkyLzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zODFkNjktMmM0MS00NWE4LTkwZDQtNmFlOTBiMjQ3NTky
LzEvSXZ0U2lyb0JqeFF2UkVUTXpKY2pjMnpVNUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMr9MEpl
6AMgFHKg1VVwIcA63sIrgNpzxnP567sDEmh6/u0vdL/CqMCMfOH+GvNC05Mzm4jQ
qeK1zclB71AFFLUPemi2rNYw2B/meVErkXw/mEJOX+yKhoaYBzujls7jkjhCLtsL
o8MFaTronAEju40QKyD0l890NmjfggXzTyF2XA2BVPicrFRJtq2PlF1/pHvo4hdC
mqX2nbS4cSqZJ59+3uvMZ5yRp5zOdokrXGWGysrFtEAMJIGIWfo5s/EdxsuVv35i
31JqTZmppbSJgu8bTTRCYsYuXxkXW81r5JVxe2N+LyaYNhPOpNA4PrpGPiNLR6GD
7TZmCD3xNRFSWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:27 2026 by rpki-client