
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: RXVpQXudFkkz2jo44pc+WOc6T0N6OOeIXoRqeJLL/8s=
Subject key identifier: 75:35:88:BD:18:42:66:C5:27:36:E9:04:C1:AC:04:24:38:BE:69:E8
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019E1D224CB78728ACC308BA7BF33694CE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 17:00:47 +0000
Manifest this update: Tue 12 May 2026 17:00:47 +0000
Manifest next update: Wed 13 May 2026 17:00:47 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: dVtY2Erq3Sze/hGAtzHJxkvpT+Ok0WR/vWyO0SkwFho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:4c:b7:87:28:ac:c3:08:ba:7b:f3:36:94:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: May 12 17:00:47 2026 GMT
Not After : May 13 17:00:47 2026 GMT
Subject: CN=753588bd184266c52736e904c1ac042438be69e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3c:77:01:df:8c:81:15:ff:74:64:fe:7e:da:
46:84:04:09:a5:13:ab:85:67:0d:e7:3e:c2:61:1b:
f7:d3:a7:91:d3:9b:21:c7:fc:3a:31:7e:a2:10:c2:
98:6a:db:45:85:1e:cb:03:bc:a5:5d:e4:51:f1:4f:
49:61:12:dd:93:36:be:09:58:af:79:48:13:88:88:
19:2b:c8:51:31:d6:4c:5d:c5:e5:8b:aa:22:44:bd:
a5:d8:68:2a:03:c3:0a:fc:53:98:7d:15:fc:18:2d:
83:74:b7:52:0d:2c:9f:37:23:43:e7:54:f0:4d:71:
55:da:4e:9c:b4:56:d5:f7:78:94:f6:8e:96:0c:ba:
30:5f:a2:51:d0:5a:bf:38:19:a5:59:15:06:89:de:
da:b2:20:10:fb:d7:62:28:2d:91:33:5c:bb:10:50:
a5:dd:e2:3f:ee:07:56:6a:59:0e:9c:4d:f7:cb:6c:
62:ed:bf:c5:33:e1:01:97:dc:ba:64:ed:27:21:1f:
9f:c3:09:df:ec:6b:b6:90:f1:66:48:62:42:dc:91:
ad:88:1f:5a:c3:9c:21:23:f2:7d:a9:31:11:a7:7b:
30:44:f5:4b:52:4f:bd:4c:e8:a5:23:b8:4d:76:ef:
6d:bb:c5:7f:6b:20:c4:34:9c:7b:28:0e:3b:fa:53:
b4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:88:BD:18:42:66:C5:27:36:E9:04:C1:AC:04:24:38:BE:69:E8
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:66:d0:4a:5c:aa:b4:39:c7:b9:c9:ae:ef:df:eb:a8:4a:fc:
59:e6:a4:c2:4b:95:57:81:8f:91:24:86:87:22:e9:7d:b7:d0:
b5:d1:fd:27:68:d4:2d:c1:b9:32:0b:3f:df:db:52:8b:a0:f7:
16:89:fd:43:9f:e7:3a:4e:01:d9:ee:8b:97:ff:8a:8f:ac:f8:
93:2f:90:6f:39:68:d5:33:9a:b5:89:6e:24:2a:14:5b:aa:bc:
44:8a:a5:75:80:1f:8b:30:6c:b2:78:56:45:8f:91:c7:32:cb:
5b:62:f8:b6:a7:2c:c3:ca:a6:64:92:ea:fa:92:36:0d:49:89:
9a:24:f1:5f:4a:e2:6e:73:1c:ae:45:7b:50:11:9a:e8:7d:37:
3e:b6:df:f5:b4:99:69:13:ed:dd:bb:9b:aa:2c:92:6c:48:28:
59:1b:07:d2:bd:d1:b5:49:67:57:62:ec:8a:77:7e:38:bf:20:
d9:b1:ca:7b:9e:20:9b:0f:75:df:4a:fa:08:95:ad:a3:8f:81:
7b:5d:4c:15:17:71:ae:dd:1d:75:b9:92:58:1c:57:62:9e:66:
f0:45:f2:0c:3e:92:6b:60:40:9a:ee:73:e6:0e:2e:33:05:08:
47:e3:4d:32:0e:c3:60:52:21:a0:12:94:1b:44:55:5d:b0:fa:
91:ac:10:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIky3hyiswwi6e/M2lM5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm
M2IyMjQwHhcNMjYwNTEyMTcwMDQ3WhcNMjYwNTEzMTcwMDQ3WjAzMTEwLwYDVQQD
Eyg3NTM1ODhiZDE4NDI2NmM1MjczNmU5MDRjMWFjMDQyNDM4YmU2OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzx3Ad+MgRX/dGT+ftpGhAQJpROr
hWcN5z7CYRv306eR05shx/w6MX6iEMKYattFhR7LA7ylXeRR8U9JYRLdkza+CViv
eUgTiIgZK8hRMdZMXcXli6oiRL2l2GgqA8MK/FOYfRX8GC2DdLdSDSyfNyND51Tw
TXFV2k6ctFbV93iU9o6WDLowX6JR0Fq/OBmlWRUGid7asiAQ+9diKC2RM1y7EFCl
3eI/7gdWalkOnE33y2xi7b/FM+EBl9y6ZO0nIR+fwwnf7Gu2kPFmSGJC3JGtiB9a
w5whI/J9qTERp3swRPVLUk+9TOilI7hNdu9tu8V/ayDENJx7KA47+lO0rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHU1iL0YQmbFJzbpBMGsBCQ4vmnoMB8GA1UdIwQY
MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt
ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx
LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWbQSlyq
tDnHucmu79/rqEr8WeakwkuVV4GPkSSGhyLpfbfQtdH9J2jULcG5Mgs/39tSi6D3
Fon9Q5/nOk4B2e6Ll/+Kj6z4ky+Qbzlo1TOatYluJCoUW6q8RIqldYAfizBssnhW
RY+RxzLLW2L4tqcsw8qmZJLq+pI2DUmJmiTxX0ribnMcrkV7UBGa6H03Prbf9bSZ
aRPt3bubqiySbEgoWRsH0r3RtUlnV2Lsind+OL8g2bHKe54gmw9130r6CJWto4+B
e11MFRdxrt0ddbmSWBxXYp5m8EXyDD6Sa2BAmu5z5g4uMwUIR+NNMg7DYFIhoBKU
G0RVXbD6kawQ0g==
-----END CERTIFICATE-----
Generated at Tue May 12 22:07:59 2026 by rpki-client