Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: 92Vzl81N3yCsip37HyXechfTDQkXk7iB5nb3RBe5+D8=
Subject key identifier: 44:C3:B9:98:45:1A:0F:B2:51:36:5C:6F:86:86:B9:8E:26:D1:E1:57
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019D9B874476DBA4E6F775F41A107600278E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 03FB
Signing time: Fri 17 Apr 2026 13:00:26 +0000
Manifest this update: Fri 17 Apr 2026 13:00:26 +0000
Manifest next update: Sat 18 Apr 2026 13:00:26 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: OnHC04NO+IpGLXdscAQYP4995PNLCwKd4eOiI3sPuh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:44:76:db:a4:e6:f7:75:f4:1a:10:76:00:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Apr 17 13:00:26 2026 GMT
Not After : Apr 18 13:00:26 2026 GMT
Subject: CN=44c3b998451a0fb251365c6f8686b98e26d1e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:51:ae:63:f9:22:e5:eb:67:3f:3a:11:ee:
52:9b:09:35:a1:8e:43:8b:1b:78:26:c2:8c:1f:ed:
a1:70:05:b7:92:61:ae:18:c3:21:ab:0f:5e:c4:c4:
09:92:17:0c:51:12:37:34:d5:aa:a3:10:ad:22:81:
69:33:a4:77:8a:41:8b:e2:0e:a5:9c:1c:14:72:76:
3f:1f:88:0d:87:d9:d4:5e:ee:fb:fd:01:b3:3a:c7:
32:21:9e:89:f4:3e:4b:15:9b:5f:ea:70:3d:b4:09:
2b:ac:a5:36:4b:67:50:01:47:3f:07:e4:f4:78:90:
39:c9:1c:70:20:d7:1f:83:a1:97:fd:25:23:ac:19:
2c:ab:df:11:f7:5c:cf:2d:c4:2f:53:53:a8:06:7a:
43:9a:c3:3b:99:1c:b7:07:37:b4:f9:31:29:05:f3:
75:e6:34:ee:07:58:50:d4:07:b7:8e:07:36:d8:7b:
27:cc:88:09:d6:07:54:31:45:9a:98:83:6d:9c:77:
40:14:6c:63:9c:d8:c1:01:d4:3f:b3:49:be:19:8d:
97:56:bb:4a:91:a3:6c:33:c3:a8:59:a0:9f:7a:1f:
f9:28:d4:02:f3:a6:dd:eb:e1:a6:0f:e9:a4:6a:38:
d2:58:23:cc:1b:32:84:65:54:52:18:57:e1:f4:1e:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:B9:98:45:1A:0F:B2:51:36:5C:6F:86:86:B9:8E:26:D1:E1:57
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:81:96:7a:ed:b3:85:77:57:b9:48:20:a9:90:7c:f4:3d:9d:
30:d4:fd:09:00:30:25:c1:9b:86:06:62:b7:c4:59:49:91:bd:
5a:b7:32:3e:e2:0f:3b:06:ca:f2:45:86:d1:a0:94:98:c6:07:
f4:3e:58:03:1c:6f:4a:cf:d2:b4:0f:fe:0f:7e:35:5a:f9:7b:
43:11:7c:0a:46:be:ec:6c:44:a1:37:74:23:1f:47:ff:87:86:
1b:0b:99:51:3d:6b:77:d3:df:4f:19:0c:0f:4a:b8:9b:e9:19:
e2:22:9c:93:04:ca:47:35:7b:86:70:ad:60:68:2e:e3:08:6b:
7d:d4:f7:dd:5e:df:4b:34:56:30:be:29:78:1b:d3:ac:fe:a7:
4d:f1:c2:40:fa:d4:75:81:8b:09:36:88:5d:42:58:47:5d:98:
e1:dd:7c:51:55:82:2c:38:18:3f:72:54:16:21:b8:05:df:ab:
9f:f6:ab:7c:b9:c0:81:95:0c:31:d9:1f:42:25:29:d4:b8:c1:
b5:a1:a6:56:17:b3:dd:2f:98:c3:76:7f:0f:f9:b2:de:db:48:
19:ba:2c:cd:81:b5:5c:31:bf:e0:0c:43:83:ce:52:24:7f:1d:
ee:80:e7:9e:fa:65:e0:af:43:bd:59:86:60:21:6c:76:f5:0a:
96:4f:08:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh0R226Tm93X0GhB2ACeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjljMjE2OGQyZDgyZGRmZDhhNzA2MzdkNDQwMThhZjMw
YjFmOTcwHhcNMjYwNDE3MTMwMDI2WhcNMjYwNDE4MTMwMDI2WjAzMTEwLwYDVQQD
Eyg0NGMzYjk5ODQ1MWEwZmIyNTEzNjVjNmY4Njg2Yjk4ZTI2ZDFlMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwVRrmP5IuXrZz86Ee5Smwk1oY5D
ixt4JsKMH+2hcAW3kmGuGMMhqw9exMQJkhcMURI3NNWqoxCtIoFpM6R3ikGL4g6l
nBwUcnY/H4gNh9nUXu77/QGzOscyIZ6J9D5LFZtf6nA9tAkrrKU2S2dQAUc/B+T0
eJA5yRxwINcfg6GX/SUjrBksq98R91zPLcQvU1OoBnpDmsM7mRy3Bze0+TEpBfN1
5jTuB1hQ1Ae3jgc22HsnzIgJ1gdUMUWamINtnHdAFGxjnNjBAdQ/s0m+GY2XVrtK
kaNsM8OoWaCfeh/5KNQC86bd6+GmD+mkajjSWCPMGzKEZVRSGFfh9B400QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETDuZhFGg+yUTZcb4aGuY4m0eFXMB8GA1UdIwQY
MBaAFIn5whaNLYLd/YpwY31EAYrzCx+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTIt
YmFjYWUwMzBlMzc0LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lMWVhOWItZDUyOS00OGJhLThiYTItYmFjYWUwMzBlMzc0
LzEvaWZuQ0ZvMHRndDM5aW5CamZVUUJpdk1MSDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4GWeu2z
hXdXuUggqZB89D2dMNT9CQAwJcGbhgZit8RZSZG9WrcyPuIPOwbK8kWG0aCUmMYH
9D5YAxxvSs/StA/+D341Wvl7QxF8Cka+7GxEoTd0Ix9H/4eGGwuZUT1rd9PfTxkM
D0q4m+kZ4iKckwTKRzV7hnCtYGgu4whrfdT33V7fSzRWML4peBvTrP6nTfHCQPrU
dYGLCTaIXUJYR12Y4d18UVWCLDgYP3JUFiG4Bd+rn/arfLnAgZUMMdkfQiUp1LjB
taGmVhez3S+Yw3Z/D/my3ttIGboszYG1XDG/4AxDg85SJH8d7oDnnvpl4K9DvVmG
YCFsdvUKlk8IIg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:42 2026 by rpki-client