Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
File: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft (raw, json)
Hash identifier: 9UlKAJlgAgrdPSsgmMyF48ywMYNVyQWHIYHtB303V6Q=
Subject key identifier: 78:6D:00:2E:9A:39:F5:F6:06:A5:0B:BD:AD:F5:6E:91:00:4C:81:B1
Authority key identifier: 22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
Certificate issuer: /CN=22edf0d881aeea2e59999b81d2975113e14055f5
Certificate serial: 019D992B682B461345A22A23890C10629060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
Manifest number: 0FE1
Signing time: Fri 17 Apr 2026 02:00:51 +0000
Manifest this update: Fri 17 Apr 2026 02:00:51 +0000
Manifest next update: Sat 18 Apr 2026 02:00:51 +0000
Files and hashes: 1: Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl (hash: 6ut3qBVGUYUe149iigHUTgAcA/sXCZlvmKhqiuf98VI=)
2: S_236S6LrjgT0CjMBoHTME1HmNg.asa (hash: 8731wnWHxsVljJafZl3JaKEFPo0YrlA4VvFytptnVGw=)
3: b-LGQlL8LzZm4UGWUiPrtbF_a1A.roa (hash: FK35y/gUkNUiIhgZhYId2WxExylNkVhtjFm+uxSpPqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:68:2b:46:13:45:a2:2a:23:89:0c:10:62:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22edf0d881aeea2e59999b81d2975113e14055f5
Validity
Not Before: Apr 17 02:00:51 2026 GMT
Not After : Apr 18 02:00:51 2026 GMT
Subject: CN=786d002e9a39f5f606a50bbdadf56e91004c81b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:3e:05:7d:99:41:c6:a0:31:cc:90:a8:dc:
65:2e:66:bf:68:37:b4:34:f6:4c:c0:92:9a:53:c2:
ab:30:b8:8e:33:72:9d:23:0e:0c:95:d8:12:b3:a1:
6d:49:95:b1:35:d0:02:4c:3d:00:e7:61:9e:72:59:
bf:03:c3:cf:53:71:0a:86:04:56:5d:33:8e:7a:c8:
53:b4:bb:08:17:1e:fc:6d:95:7a:74:47:c0:18:39:
5f:e2:bc:8f:31:04:5b:60:d9:f1:bd:8e:25:8b:28:
68:2c:30:6e:80:16:b0:07:75:b3:9e:90:9e:40:9d:
6d:d8:af:ca:06:4d:e0:2a:d5:a6:b6:94:2c:8f:d4:
73:63:55:44:ce:f3:82:2e:4c:17:d1:62:7b:7f:31:
eb:71:39:18:4e:58:77:5b:66:d9:05:78:51:c8:04:
6c:8d:10:86:98:22:7b:04:b4:b8:98:18:2f:5b:d3:
2c:9a:50:33:01:4f:74:0a:a4:c1:0d:3f:e3:59:96:
fe:54:af:dd:55:01:f1:1e:a1:09:ef:c8:74:40:54:
19:81:07:36:d1:fa:d6:d9:f0:41:94:3a:65:2a:a6:
23:45:b0:72:60:37:0c:cd:a3:e5:f6:5c:8c:f8:cd:
53:a2:cc:7a:03:d6:30:f3:3e:46:83:ab:a2:07:af:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:00:2E:9A:39:F5:F6:06:A5:0B:BD:AD:F5:6E:91:00:4C:81:B1
X509v3 Authority Key Identifier:
keyid:22:ED:F0:D8:81:AE:EA:2E:59:99:9B:81:D2:97:51:13:E1:40:55:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/765f62-e035-45da-bc64-4753efc8929d/1/Iu3w2IGu6i5ZmZuB0pdRE-FAVfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c7:73:98:18:8d:8b:23:d9:41:a7:e2:26:48:76:8b:92:d0:
d1:1c:d4:65:96:a0:fe:a7:76:f1:d2:b0:6e:c4:0d:3d:90:33:
23:40:f9:c4:d0:fe:b4:ea:1a:51:79:28:60:5f:cf:da:fe:69:
18:41:7f:7e:46:db:d7:71:38:d7:1a:77:f4:90:cd:e6:e9:fa:
b4:a1:c3:01:18:ba:95:73:25:a3:41:74:df:bf:ca:97:12:9a:
59:d6:29:63:54:f0:dc:43:a0:1f:e8:41:68:e4:7b:1b:90:8a:
ba:d7:a2:9b:7d:b8:7d:6d:d9:77:7a:1b:e7:d1:2e:7a:ad:b6:
a3:8a:76:17:91:b5:6b:d7:d2:23:34:c4:6b:ae:bb:66:05:13:
33:b1:63:8a:7c:a7:81:d8:52:c1:a3:86:1a:4f:7f:17:23:db:
1b:0e:1a:0b:3e:1c:e3:9c:2c:53:f0:81:c8:86:f4:5e:d6:76:
e5:db:fe:5b:aa:b6:3d:05:92:7d:e6:8a:cd:8a:5d:f3:81:55:
d9:b4:bb:0b:82:3f:aa:9d:73:11:9e:ba:80:f6:f7:bd:0a:a7:
38:05:61:ab:87:b5:d5:99:18:ac:30:1a:f2:08:bb:a3:5a:bd:
32:78:65:c9:09:d9:1b:3b:ff:17:3f:8d:e6:1f:80:5c:9b:35:
0c:a9:22:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK2grRhNFoiojiQwQYpBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWRmMGQ4ODFhZWVhMmU1OTk5OWI4MWQyOTc1MTEzZTE0
MDU1ZjUwHhcNMjYwNDE3MDIwMDUxWhcNMjYwNDE4MDIwMDUxWjAzMTEwLwYDVQQD
Eyg3ODZkMDAyZTlhMzlmNWY2MDZhNTBiYmRhZGY1NmU5MTAwNGM4MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZQ+BX2ZQcagMcyQqNxlLma/aDe0
NPZMwJKaU8KrMLiOM3KdIw4MldgSs6FtSZWxNdACTD0A52Geclm/A8PPU3EKhgRW
XTOOeshTtLsIFx78bZV6dEfAGDlf4ryPMQRbYNnxvY4liyhoLDBugBawB3WznpCe
QJ1t2K/KBk3gKtWmtpQsj9RzY1VEzvOCLkwX0WJ7fzHrcTkYTlh3W2bZBXhRyARs
jRCGmCJ7BLS4mBgvW9MsmlAzAU90CqTBDT/jWZb+VK/dVQHxHqEJ78h0QFQZgQc2
0frW2fBBlDplKqYjRbByYDcMzaPl9lyM+M1Tosx6A9Yw8z5Gg6uiB6+hHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhtAC6aOfX2BqULva31bpEATIGxMB8GA1UdIwQY
MBaAFCLt8NiBruouWZmbgdKXURPhQFX1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83NjVmNjItZTAzNS00NWRhLWJjNjQt
NDc1M2VmYzg5MjlkLzEvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83NjVmNjItZTAzNS00NWRhLWJjNjQtNDc1M2VmYzg5Mjlk
LzEvSXUzdzJJR3U2aTVabVp1QjBwZFJFLUZBVmZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXsdzmBiN
iyPZQafiJkh2i5LQ0RzUZZag/qd28dKwbsQNPZAzI0D5xND+tOoaUXkoYF/P2v5p
GEF/fkbb13E41xp39JDN5un6tKHDARi6lXMlo0F037/KlxKaWdYpY1Tw3EOgH+hB
aOR7G5CKuteim324fW3Zd3ob59Eueq22o4p2F5G1a9fSIzTEa667ZgUTM7Fjinyn
gdhSwaOGGk9/FyPbGw4aCz4c45wsU/CByIb0XtZ25dv+W6q2PQWSfeaKzYpd84FV
2bS7C4I/qp1zEZ66gPb3vQqnOAVhq4e11ZkYrDAa8gi7o1q9MnhlyQnZGzv/Fz+N
5h+AXJs1DKkizQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:11 2026 by rpki-client