Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: O/o8IQuu68TErmfNZkURHhRCWMaWQq8IMLXEJflrpQs=
Subject key identifier: A8:29:8F:E0:06:36:39:D5:1D:97:12:5E:9F:FA:85:CF:6D:EC:8B:EF
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 019E1EDA0B134FB4AE556913843EAAFEB4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 4E
Signing time: Wed 13 May 2026 01:01:06 +0000
Manifest this update: Wed 13 May 2026 01:01:06 +0000
Manifest next update: Thu 14 May 2026 01:01:06 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: 6cZK3bNySXjsFyIk6ehin9bLNPQc9/ZRBFfU+QO9rXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:0b:13:4f:b4:ae:55:69:13:84:3e:aa:fe:b4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: May 13 01:01:06 2026 GMT
Not After : May 14 01:01:06 2026 GMT
Subject: CN=a8298fe0063639d51d97125e9ffa85cf6dec8bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c3:cb:42:23:67:8a:36:fa:c1:2b:89:5f:7d:
ca:8c:20:18:eb:36:36:d9:e2:43:30:91:dc:6e:4a:
16:4d:ef:95:60:82:f6:8e:29:43:30:ac:4f:65:52:
24:84:86:96:9f:42:10:71:d3:96:e1:24:13:fa:89:
da:8d:8d:ff:b2:14:89:c4:a2:d3:e5:49:96:d9:f1:
2d:24:f6:f0:9b:e2:c3:b6:81:03:65:c5:a3:ae:47:
91:1f:88:11:fb:52:c9:e6:18:a3:cf:cf:6f:fe:17:
7e:68:e4:6b:2e:e7:94:4d:d8:27:9b:67:1d:ff:f9:
89:f3:73:bb:d7:c8:e0:34:d9:d4:a7:0d:ab:4f:21:
91:4a:23:63:e6:a7:c6:9d:26:7b:7c:9d:68:03:16:
fa:5e:70:5b:40:d5:ae:b6:70:eb:a6:3b:cd:ca:d2:
1b:fc:c6:3f:f3:18:e8:48:42:12:79:e8:93:12:e6:
40:82:c6:93:7b:bb:7b:f6:9e:ad:a8:e1:7a:23:e9:
2e:5b:6d:a1:81:6e:95:72:23:4c:2b:11:42:c8:32:
8e:c2:76:76:09:2b:78:02:a8:67:74:c5:e2:b1:06:
1a:db:1e:dd:5f:a7:8f:d6:9f:05:a6:c5:30:17:d1:
74:8d:4e:f5:89:7e:89:e9:19:35:a4:36:45:cc:03:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:29:8F:E0:06:36:39:D5:1D:97:12:5E:9F:FA:85:CF:6D:EC:8B:EF
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:26:f2:9c:f6:54:2e:33:04:5f:c0:8e:f4:bf:ec:7c:12:
97:07:68:28:46:cb:e5:d3:44:02:0d:4d:17:37:66:76:f3:14:
15:13:e5:d4:80:05:60:01:92:e6:89:8e:cb:d7:f4:f2:a3:0f:
49:45:56:76:63:f8:38:6f:72:a3:fc:0c:dd:99:d1:48:ea:41:
c9:4b:89:b7:15:99:b6:1f:4d:81:08:0e:aa:19:14:04:eb:18:
30:83:9b:92:e4:b5:c9:09:6d:db:d9:5f:be:7b:41:eb:85:7a:
d8:bb:3f:05:48:81:53:de:e5:44:77:cc:e5:15:b5:d7:61:f2:
99:98:71:0d:fc:04:83:3c:79:27:ea:24:cd:1f:73:b8:1c:a8:
b1:cf:6d:2f:ed:84:d2:fe:d1:e8:f3:8c:bc:38:4f:45:87:48:
b9:07:a4:99:46:e1:c2:b2:23:13:94:06:c1:1b:fc:66:4f:ba:
1d:0f:37:7d:e7:a9:29:a1:07:ce:6b:68:a3:64:46:6b:ab:d9:
61:53:13:0e:4f:63:0c:00:b9:83:af:38:4a:2a:73:dc:71:e9:
17:ab:76:14:d7:75:3f:f1:0a:48:cc:3e:db:2e:9d:de:0a:71:
fa:2c:be:6d:08:9a:26:28:af:f3:9e:ea:c6:03:82:df:87:2f:
ae:bf:83:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2gsTT7SuVWkThD6q/rTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzg0YWFjN2QxZTZkMTFjYzZiYTNhNDI3NDBjYmM5ZmE4
NWM4ODQwHhcNMjYwNTEzMDEwMTA2WhcNMjYwNTE0MDEwMTA2WjAzMTEwLwYDVQQD
EyhhODI5OGZlMDA2MzYzOWQ1MWQ5NzEyNWU5ZmZhODVjZjZkZWM4YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sPLQiNnijb6wSuJX33KjCAY6zY2
2eJDMJHcbkoWTe+VYIL2jilDMKxPZVIkhIaWn0IQcdOW4SQT+onajY3/shSJxKLT
5UmW2fEtJPbwm+LDtoEDZcWjrkeRH4gR+1LJ5hijz89v/hd+aORrLueUTdgnm2cd
//mJ83O718jgNNnUpw2rTyGRSiNj5qfGnSZ7fJ1oAxb6XnBbQNWutnDrpjvNytIb
/MY/8xjoSEISeeiTEuZAgsaTe7t79p6tqOF6I+kuW22hgW6VciNMKxFCyDKOwnZ2
CSt4AqhndMXisQYa2x7dX6eP1p8FpsUwF9F0jU71iX6J6Rk1pDZFzAMdKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgpj+AGNjnVHZcSXp/6hc9t7IvvMB8GA1UdIwQY
MBaAFP54Sqx9Hm0RzGujpCdAy8n6hciEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25oS3JIMGViUkhNYTZPa0owREx5ZnFGeUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wY2NkNmQtNmRjMC00NWFkLWI4YzAt
ZmZmODE0ZDExZjE1LzEvX25oS3JIMGViUkhNYTZPa0owREx5ZnFGeUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wY2NkNmQtNmRjMC00NWFkLWI4YzAtZmZmODE0ZDExZjE1
LzEvX25oS3JIMGViUkhNYTZPa0owREx5ZnFGeUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0Am8pz2
VC4zBF/AjvS/7HwSlwdoKEbL5dNEAg1NFzdmdvMUFRPl1IAFYAGS5omOy9f08qMP
SUVWdmP4OG9yo/wM3ZnRSOpByUuJtxWZth9NgQgOqhkUBOsYMIObkuS1yQlt29lf
vntB64V62Ls/BUiBU97lRHfM5RW112HymZhxDfwEgzx5J+okzR9zuByosc9tL+2E
0v7R6POMvDhPRYdIuQekmUbhwrIjE5QGwRv8Zk+6HQ83feepKaEHzmtoo2RGa6vZ
YVMTDk9jDAC5g684Sipz3HHpF6t2FNd1P/EKSMw+2y6d3gpx+iy+bQiaJiiv857q
xgOC34cvrr+Dxg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:55:45 2026 by rpki-client