Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: 5DTDPK+LOingg9V9+CiiSjWerzBv0EejvPuU0mlwf40=
Subject key identifier: 84:87:98:70:01:9B:EB:53:26:A2:A0:70:4C:51:C1:06:68:B1:A8:B1
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 019E20912D4C0AC3DAE70587C4ADAA6B6613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 16C1
Signing time: Wed 13 May 2026 09:00:45 +0000
Manifest this update: Wed 13 May 2026 09:00:45 +0000
Manifest next update: Thu 14 May 2026 09:00:45 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: ieHoQz7zaBqgmqta3q83ZS0P27JbZ1cSo3Cz8kWP6jQ=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:2d:4c:0a:c3:da:e7:05:87:c4:ad:aa:6b:66:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: May 13 09:00:45 2026 GMT
Not After : May 14 09:00:45 2026 GMT
Subject: CN=84879870019beb5326a2a0704c51c10668b1a8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ce:4b:4c:e1:a5:8f:33:57:d0:9d:00:a8:e0:
b4:f2:ed:f1:d8:f7:68:4c:e8:eb:3e:ab:f1:43:90:
d8:f4:2d:64:a1:99:5b:a7:72:7e:bf:41:c4:6f:24:
72:5c:40:3c:4e:e7:a7:f5:0d:05:b6:81:38:7b:41:
98:26:64:a3:b1:de:3d:5f:e4:77:b6:a8:ac:2a:41:
dc:13:05:46:42:a8:29:af:5b:13:99:66:50:d0:ac:
0f:59:89:de:31:63:ae:bb:f0:a7:9c:18:56:d4:da:
7b:a2:7c:95:db:b0:84:06:d4:6e:82:e2:80:c2:b2:
0d:2e:9e:f7:c8:05:18:9c:7e:3c:18:c9:93:69:74:
8a:da:c9:c3:aa:35:b2:fe:06:df:05:95:9a:5f:fa:
af:65:d4:5a:51:c4:cd:2c:d7:79:45:f7:00:94:18:
c1:af:8c:ea:05:3a:d9:02:96:82:4a:ff:fd:44:61:
4a:c6:77:00:2f:7f:21:c3:1a:a9:78:ff:ab:02:e5:
04:6f:41:d3:30:5c:3e:27:98:6d:be:38:5a:7f:35:
d1:d5:e9:1d:e0:e0:c0:60:7c:ea:c4:e2:d9:04:cc:
e6:b1:6b:ee:87:ec:33:98:7d:ea:8e:c1:d1:ef:c8:
a3:98:5d:83:6c:9f:f3:f9:9d:83:37:39:fe:23:ba:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:98:70:01:9B:EB:53:26:A2:A0:70:4C:51:C1:06:68:B1:A8:B1
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b1:55:a7:1f:77:9e:c1:00:fa:99:ee:ba:38:18:ef:55:7d:
ec:4b:81:ee:f9:a5:b1:5b:7b:bf:60:c8:e7:ef:bc:9a:e8:8e:
52:9d:9d:86:65:46:af:eb:ef:d8:fb:a2:a5:5f:43:b2:c1:71:
b0:ac:6b:ec:8a:b9:18:9d:47:20:b5:cf:68:0f:4c:cc:bb:9d:
16:f0:d8:c8:f0:0e:19:77:f7:8c:41:47:e7:28:ec:41:28:64:
af:74:00:10:d9:43:d6:3a:a9:6c:5f:8f:31:41:a8:1f:a8:dd:
cf:40:a6:f5:25:77:37:c3:c4:45:94:72:8c:56:1e:bd:c8:9b:
7e:42:00:d6:c0:ba:c8:1a:5b:c2:59:76:d7:f4:ed:ce:c1:06:
ed:03:c6:89:2b:9e:0e:12:73:f9:14:dc:e5:36:83:3e:20:8e:
28:f8:64:53:36:6f:2c:60:8e:c4:27:28:0c:3a:98:e3:3c:96:
2c:c0:fa:e2:50:9c:5e:93:2b:ae:93:f6:b0:cf:0b:a6:7e:72:
62:57:56:78:51:44:75:f6:a3:b7:dd:1c:34:87:df:71:80:41:
2e:de:74:13:70:99:e6:6d:42:3e:ff:cd:7f:76:b0:c5:d9:a1:
79:65:ad:3d:74:87:1a:2d:3d:ea:bd:86:97:32:e9:d3:d4:e9:
50:94:e0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkS1MCsPa5wWHxK2qa2YTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz
Y2UxYmMwHhcNMjYwNTEzMDkwMDQ1WhcNMjYwNTE0MDkwMDQ1WjAzMTEwLwYDVQQD
Eyg4NDg3OTg3MDAxOWJlYjUzMjZhMmEwNzA0YzUxYzEwNjY4YjFhOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi85LTOGljzNX0J0AqOC08u3x2Pdo
TOjrPqvxQ5DY9C1koZlbp3J+v0HEbyRyXEA8Tuen9Q0FtoE4e0GYJmSjsd49X+R3
tqisKkHcEwVGQqgpr1sTmWZQ0KwPWYneMWOuu/CnnBhW1Np7onyV27CEBtRuguKA
wrINLp73yAUYnH48GMmTaXSK2snDqjWy/gbfBZWaX/qvZdRaUcTNLNd5RfcAlBjB
r4zqBTrZApaCSv/9RGFKxncAL38hwxqpeP+rAuUEb0HTMFw+J5htvjhafzXR1ekd
4ODAYHzqxOLZBMzmsWvuh+wzmH3qjsHR78ijmF2DbJ/z+Z2DNzn+I7p4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISHmHABm+tTJqKgcExRwQZosaixMB8GA1UdIwQY
MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct
MmFkMTk1MjY0YzcyLzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy
LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLFVpx93
nsEA+pnuujgY71V97EuB7vmlsVt7v2DI5++8muiOUp2dhmVGr+vv2PuipV9DssFx
sKxr7Iq5GJ1HILXPaA9MzLudFvDYyPAOGXf3jEFH5yjsQShkr3QAENlD1jqpbF+P
MUGoH6jdz0Cm9SV3N8PERZRyjFYevcibfkIA1sC6yBpbwll21/TtzsEG7QPGiSue
DhJz+RTc5TaDPiCOKPhkUzZvLGCOxCcoDDqY4zyWLMD64lCcXpMrrpP2sM8Lpn5y
YldWeFFEdfajt90cNIffcYBBLt50E3CZ5m1CPv/Nf3awxdmheWWtPXSHGi096r2G
lzLp09TpUJTgmQ==
-----END CERTIFICATE-----
Generated at Wed May 13 14:12:05 2026 by rpki-client