Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: KiysTHtKgVqTeIIOZzpWGY3PSGq9y4L5+GvdeNQnytw=
Subject key identifier: 7E:C8:79:3B:79:C1:9C:24:E2:5F:8E:91:48:AE:15:BE:67:4A:67:E3
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 019E2023DAD85DE4042A33D56D44110BB5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0FCA
Signing time: Wed 13 May 2026 07:01:21 +0000
Manifest this update: Wed 13 May 2026 07:01:21 +0000
Manifest next update: Thu 14 May 2026 07:01:21 +0000
Files and hashes: 1: Kpnz5Ehbi7VHXVGznq8NuzsABfw.roa (hash: S+Dpbm+TaZ7/vPNQef5cPhzvt0r2tsqQgV86TRQ02Q4=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: N4PfKC15xKhIG4JaSbyU6kP2xkd97bT/zZo5CUikeEw=)
3: V78nEVrkCr-6qVq2YThSOW0v9hQ.roa (hash: xNhsyzIzttzlPtpbDSsbaMS/afTumd4QgcW09/sybCo=)
4: wv6d_Ebz8zRqf1MynTukbGa33Mw.roa (hash: dPL9kg4wql0Qk9cME65ll/Ifth0q9haSyPRLmDFRDZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:da:d8:5d:e4:04:2a:33:d5:6d:44:11:0b:b5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: May 13 07:01:21 2026 GMT
Not After : May 14 07:01:21 2026 GMT
Subject: CN=7ec8793b79c19c24e25f8e9148ae15be674a67e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:18:42:f6:91:10:f1:a3:20:db:d6:05:87:
56:cb:a7:46:6c:00:8f:04:10:9f:74:9c:75:76:1c:
55:5f:63:79:c2:38:06:04:05:f9:92:1a:d4:52:9a:
12:fd:b8:11:cc:63:1a:c9:1b:37:f3:5f:cf:17:5a:
72:48:bf:f3:15:50:f5:e5:d9:03:e7:a9:2c:69:cd:
44:5e:cd:1d:37:f9:74:f6:0e:34:34:80:a4:e5:7c:
5f:8e:86:95:6b:82:d6:34:6f:ed:81:a6:06:3b:4d:
ce:15:8d:3f:bd:bd:e7:26:3c:f8:42:64:44:f1:3c:
00:5b:8b:d2:93:c6:78:3a:33:59:9d:35:9c:47:84:
d3:c3:70:78:04:45:d2:09:b4:38:1a:6a:9c:cc:70:
54:48:0b:e1:d9:ac:e7:cb:c4:04:f9:09:99:c0:c2:
97:e7:16:12:6c:0b:97:15:c8:74:a0:f1:7a:90:33:
d6:40:8a:54:14:81:f2:54:dc:ae:61:e7:70:6f:99:
18:c0:d7:38:82:6b:46:ff:7d:e3:99:e2:07:d6:83:
9d:80:72:4a:33:4e:7c:d8:cb:f3:c7:e4:a0:08:6b:
f8:b4:17:28:15:1a:7a:53:22:11:87:b2:38:c4:f1:
4c:68:b8:b3:8f:bc:f4:81:b6:a4:2d:3e:9c:2a:d9:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:79:3B:79:C1:9C:24:E2:5F:8E:91:48:AE:15:BE:67:4A:67:E3
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4a:f4:19:74:4e:b3:20:f8:2a:62:ff:98:09:bc:f3:45:50:
bd:38:8b:55:71:c6:22:dd:1b:14:8a:94:2f:1e:f6:d9:a4:3f:
51:d1:b5:a8:b8:48:93:78:f2:d5:49:ee:c8:d5:80:c9:a9:ff:
ee:38:4c:31:87:2a:89:31:0a:29:27:bf:0e:f6:ac:b3:13:90:
ca:db:ad:d6:a2:a3:fa:40:9a:29:0a:5a:c8:3b:a0:d9:e1:5e:
70:dd:fa:ae:e5:e0:31:21:cf:5e:39:13:7f:9c:ba:aa:f1:7b:
90:08:4d:6a:7e:ff:f8:8a:b0:0a:62:a9:3b:ca:f8:92:a0:35:
eb:86:10:d3:02:40:a1:c8:26:e4:ed:35:30:f6:c2:de:bf:93:
f3:62:f8:50:48:3a:90:b6:20:83:9c:2d:98:2a:20:3b:7a:1d:
7e:2d:05:cf:98:dd:a7:b9:b9:76:d8:f9:97:c0:b8:14:2c:78:
8f:dd:8d:b9:25:71:b1:55:2b:31:5e:46:0f:50:e6:77:5a:ec:
66:aa:f8:85:d7:9d:8b:7b:df:65:28:01:3c:50:cd:55:04:aa:
8c:f7:ac:a4:0c:dd:47:dd:0d:64:05:fa:a6:63:48:eb:dd:43:
5a:69:0f:b6:83:2f:e5:b8:42:29:cb:d7:16:c4:f5:73:63:40:
02:23:a1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI9rYXeQEKjPVbUQRC7W5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz
MzhmZmUwHhcNMjYwNTEzMDcwMTIxWhcNMjYwNTE0MDcwMTIxWjAzMTEwLwYDVQQD
Eyg3ZWM4NzkzYjc5YzE5YzI0ZTI1ZjhlOTE0OGFlMTViZTY3NGE2N2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8oYQvaREPGjINvWBYdWy6dGbACP
BBCfdJx1dhxVX2N5wjgGBAX5khrUUpoS/bgRzGMayRs381/PF1pySL/zFVD15dkD
56ksac1EXs0dN/l09g40NICk5XxfjoaVa4LWNG/tgaYGO03OFY0/vb3nJjz4QmRE
8TwAW4vSk8Z4OjNZnTWcR4TTw3B4BEXSCbQ4GmqczHBUSAvh2azny8QE+QmZwMKX
5xYSbAuXFch0oPF6kDPWQIpUFIHyVNyuYedwb5kYwNc4gmtG/33jmeIH1oOdgHJK
M0582Mvzx+SgCGv4tBcoFRp6UyIRh7I4xPFMaLizj7z0gbakLT6cKtkZ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7IeTt5wZwk4l+OkUiuFb5nSmfjMB8GA1UdIwQY
MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt
Y2VlYzQ5MTI0YzBmLzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm
LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkr0GXRO
syD4KmL/mAm880VQvTiLVXHGIt0bFIqULx722aQ/UdG1qLhIk3jy1UnuyNWAyan/
7jhMMYcqiTEKKSe/DvassxOQytut1qKj+kCaKQpayDug2eFecN36ruXgMSHPXjkT
f5y6qvF7kAhNan7/+IqwCmKpO8r4kqA164YQ0wJAocgm5O01MPbC3r+T82L4UEg6
kLYgg5wtmCogO3odfi0Fz5jdp7m5dtj5l8C4FCx4j92NuSVxsVUrMV5GD1Dmd1rs
Zqr4hdedi3vfZSgBPFDNVQSqjPespAzdR90NZAX6pmNI691DWmkPtoMv5bhCKcvX
FsT1c2NAAiOhgw==
-----END CERTIFICATE-----
Generated at Wed May 13 11:03:12 2026 by rpki-client