Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: NJAgjC4rSd5bhgxPUkJ/Ke/rKkRYDfTEsfdCVkwyWf0=
Subject key identifier: B3:2E:A1:6F:83:C9:6F:D1:08:E1:02:00:70:FE:38:01:C9:86:07:1A
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 019D9BBEFFD1B7DBEB206104CE50AA6F0315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 1471
Signing time: Fri 17 Apr 2026 14:01:18 +0000
Manifest this update: Fri 17 Apr 2026 14:01:18 +0000
Manifest next update: Sat 18 Apr 2026 14:01:18 +0000
Files and hashes: 1: IMFLS8lmXO1X5kPh5brIEnkKfS4.roa (hash: w30MlBbSWaBo/k7+866HLmrY83fawU5Z9usPbYOh250=)
2: P4iYo_pgPdMjfud17S1Pja-OB4g.roa (hash: V9YQ3Ly1AA0IvwxjFuA9aYy5KxQNhTDwIiK8jm1VIm0=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: I6NgXlUe7vPYqPp7wNWYYoWTO20CZem7wvAls2XybBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ff:d1:b7:db:eb:20:61:04:ce:50:aa:6f:03:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Apr 17 14:01:18 2026 GMT
Not After : Apr 18 14:01:18 2026 GMT
Subject: CN=b32ea16f83c96fd108e1020070fe3801c986071a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2a:45:00:d7:84:39:b5:83:4d:70:94:a6:c6:
0b:c2:8d:3e:77:8f:27:06:50:1a:d9:7e:15:67:af:
46:83:bd:21:b7:d8:1c:b0:39:5e:46:98:17:d1:b8:
df:c7:ea:41:e1:ca:5c:80:1d:17:6b:1c:44:0c:e0:
9d:35:53:5d:da:d2:67:d9:82:98:94:78:2a:f4:6e:
58:7e:c0:c9:4b:6d:db:d0:b3:c5:71:c3:1a:33:7d:
ab:d9:82:09:c1:42:5f:93:a6:94:86:41:76:85:9c:
d6:d3:5e:b4:f4:80:ef:d7:3a:f7:a7:ac:7d:71:7d:
03:d8:4a:f5:f7:9f:ba:2a:54:41:89:b1:db:5e:07:
7c:2e:b7:b8:ec:22:19:c4:b2:65:1b:71:4b:41:4e:
ac:81:24:60:67:10:d5:63:ea:b4:a1:b7:cb:fc:ff:
bd:0b:10:b6:35:66:ad:e8:23:7a:8a:9b:77:32:8c:
e9:ee:6a:12:27:65:f4:67:7b:a5:cf:c5:12:3e:55:
cc:21:fb:c9:14:0b:bc:af:e6:e5:92:c4:8f:77:37:
33:40:33:7e:4b:ff:b4:e4:e6:02:98:99:41:72:32:
02:a9:5e:81:f1:fd:5a:01:34:c1:f0:ae:8b:a7:1e:
63:74:73:1b:32:8d:8e:47:62:1e:f8:ed:87:e0:78:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2E:A1:6F:83:C9:6F:D1:08:E1:02:00:70:FE:38:01:C9:86:07:1A
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:95:d7:26:76:6e:8d:83:d3:3b:e5:cb:96:99:5b:c2:60:11:
37:d3:3a:e2:36:5a:1c:54:e5:a9:2f:7e:40:0a:a9:04:64:d4:
5c:13:09:d2:18:82:27:b0:26:ca:1d:49:c4:8e:ea:f5:14:32:
5b:17:2e:81:b0:2b:30:5c:61:6e:f1:55:50:73:7e:85:b0:76:
5b:14:82:00:55:e3:1a:db:c8:b6:ab:b6:7c:ac:93:19:12:40:
e3:bf:ad:4d:c9:92:51:2c:dd:2f:67:85:77:83:3a:70:66:2e:
c1:42:24:cb:df:8d:c6:58:e7:05:fb:b2:0c:21:0c:66:b4:4c:
1e:b6:75:b0:34:46:89:45:d0:4a:f9:2a:f1:fd:1f:5e:51:cf:
ac:1a:c2:6b:13:9a:af:c4:10:cb:3f:19:5b:eb:60:d4:b4:ff:
c7:20:c5:48:e8:63:ac:5a:75:ea:51:db:61:c0:f4:39:0a:b2:
81:18:32:90:06:89:91:5d:ee:7d:47:36:a5:5e:13:11:51:14:
61:eb:c2:1d:9c:fd:90:92:29:48:ba:ec:a4:e5:b6:cc:e6:1f:
5d:46:cf:1a:b0:17:51:19:e1:36:11:ef:3f:54:7f:bc:58:a8:
e0:2e:67:7e:cb:eb:46:d8:3a:6a:44:e3:26:d3:39:05:3b:35:
ad:31:b5:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvv/Rt9vrIGEEzlCqbwMVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzhmZjVkYWIzM2M0MmRhNjVmZTRlMWFiZmJjYTRlYWZi
ZGQyYWEwHhcNMjYwNDE3MTQwMTE4WhcNMjYwNDE4MTQwMTE4WjAzMTEwLwYDVQQD
EyhiMzJlYTE2ZjgzYzk2ZmQxMDhlMTAyMDA3MGZlMzgwMWM5ODYwNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSpFANeEObWDTXCUpsYLwo0+d48n
BlAa2X4VZ69Gg70ht9gcsDleRpgX0bjfx+pB4cpcgB0XaxxEDOCdNVNd2tJn2YKY
lHgq9G5YfsDJS23b0LPFccMaM32r2YIJwUJfk6aUhkF2hZzW01609IDv1zr3p6x9
cX0D2Er195+6KlRBibHbXgd8Lre47CIZxLJlG3FLQU6sgSRgZxDVY+q0obfL/P+9
CxC2NWat6CN6ipt3Mozp7moSJ2X0Z3ulz8USPlXMIfvJFAu8r+blksSPdzczQDN+
S/+05OYCmJlBcjICqV6B8f1aATTB8K6Lpx5jdHMbMo2OR2Ie+O2H4Hj9WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMuoW+DyW/RCOECAHD+OAHJhgcaMB8GA1UdIwQY
MBaAFIl4/12rM8Qtpl/k4av7yk6vvdKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQt
ZDAyZDk2YzM2Y2EzLzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yZTgzNDctZDljNy00ZTUxLTliMTQtZDAyZDk2YzM2Y2Ez
LzEvaVhqX1hhc3p4QzJtWC1UaHFfdktUcS05MHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpXXJnZu
jYPTO+XLlplbwmARN9M64jZaHFTlqS9+QAqpBGTUXBMJ0hiCJ7Amyh1JxI7q9RQy
WxcugbArMFxhbvFVUHN+hbB2WxSCAFXjGtvItqu2fKyTGRJA47+tTcmSUSzdL2eF
d4M6cGYuwUIky9+NxljnBfuyDCEMZrRMHrZ1sDRGiUXQSvkq8f0fXlHPrBrCaxOa
r8QQyz8ZW+tg1LT/xyDFSOhjrFp16lHbYcD0OQqygRgykAaJkV3ufUc2pV4TEVEU
YevCHZz9kJIpSLrspOW2zOYfXUbPGrAXURnhNhHvP1R/vFio4C5nfsvrRtg6akTj
JtM5BTs1rTG1Eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:04 2026 by rpki-client