Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: +scmXKxDx730LeG+xB7Q25W1gKK5lMDuqNqIVeOIDvQ=
Subject key identifier: D0:D0:CD:94:A1:B9:FC:F9:0E:BA:CC:B3:D0:F7:D9:DD:93:E2:A1:41
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019E1EA395C3EB27F28396C7ED8EF7935A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1098
Signing time: Wed 13 May 2026 00:01:37 +0000
Manifest this update: Wed 13 May 2026 00:01:37 +0000
Manifest next update: Thu 14 May 2026 00:01:37 +0000
Files and hashes: 1: ArYyyh5YO0OWycK2LlltpOul3lg.roa (hash: lMXxXdbwW8BQ9CKu60A8CvAAyRSCnVbNOZhtJBxrPNE=)
2: BT6gT2aXUKobQoi0V8TrSbNpCIg.roa (hash: 11Cz/ogVHj/bpFBPmz3A/2aEj7h9dMBvKj8VckkwRKk=)
3: T5tl9sNyRkL0P_NR5adTD-3N3sU.roa (hash: v1uOfCq/sSctVYDZAL9hq4TwyQTRwSAfePolYoMfHVQ=)
4: U3uskgBenRf6gNmvfw00tQrNEBw.roa (hash: w5v1jJOvEj/131xyDcqoUJ1bR2/pHLOj9IxhyRXP9Dk=)
5: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 1yabkATZJT6xU8T9xGYJkMp7Vuogs25laJJLwCbpG9k=)
6: jcdUCN5v_fEw6tgouDGmsAi4uqQ.roa (hash: aK8/MYOjzg2j9dQklFTXiZMZEJgQejRF7dLncl3fyJg=)
7: k7hJTfgDumtyjLIH8k2U23iL6Aw.roa (hash: jecljpmw4G9uzZveHC4O7i+a3N6nmGbCOyKln0VRe/8=)
8: uvv9qPqkc14AyTkKhEshaclg-ro.roa (hash: oelEEgJXLeJc3nzjBLZO2ZEiqv1cxH4FuyLv/ZRpkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:95:c3:eb:27:f2:83:96:c7:ed:8e:f7:93:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: May 13 00:01:37 2026 GMT
Not After : May 14 00:01:37 2026 GMT
Subject: CN=d0d0cd94a1b9fcf90ebaccb3d0f7d9dd93e2a141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cb:40:08:52:01:7f:56:46:ae:80:73:4b:39:
ee:09:08:c4:fb:e3:d7:98:76:d0:3b:35:ac:4c:3c:
be:d1:6e:5a:9c:2c:aa:db:9a:ee:47:80:96:0c:ab:
8b:f2:14:4d:c8:18:79:8b:ac:d4:31:7e:1b:bc:84:
ae:ef:41:c3:14:3c:07:5a:ea:5c:21:68:24:c7:68:
ae:b4:14:94:cc:bc:ef:2d:87:73:12:01:39:a9:6f:
6d:bc:c4:cb:c5:3f:fd:c4:d8:c6:64:a1:06:f2:39:
a7:86:38:b4:af:aa:c6:10:b7:c2:5b:e9:0d:12:ca:
1e:57:f6:dd:6c:95:f7:ea:66:f6:16:1b:cf:96:e6:
bd:e3:cf:e2:b6:74:e3:9b:7a:b0:a2:ca:c4:ec:99:
46:43:ee:80:c8:c0:b8:f8:e4:02:90:1f:6a:6b:e8:
e1:21:85:50:1c:09:a4:4e:32:f3:95:aa:a7:21:23:
f8:59:c6:21:f5:93:ce:b3:23:c1:28:66:a0:c7:6f:
8d:60:a5:35:1f:a2:53:f8:6e:26:ee:d8:c4:d0:83:
7c:a3:9b:1f:8d:67:dd:5f:58:af:80:00:ab:0c:d1:
bb:31:78:e4:e0:d7:bf:5f:a5:e7:93:b2:a0:10:20:
0b:a3:79:b0:be:be:8e:d3:7a:66:2e:9e:32:b9:11:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:CD:94:A1:B9:FC:F9:0E:BA:CC:B3:D0:F7:D9:DD:93:E2:A1:41
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:b7:cf:1c:78:29:17:e9:c1:98:ce:61:8c:e7:e8:a2:74:63:
eb:95:26:ea:cc:ab:2c:6e:a5:eb:a2:89:06:a3:e6:d8:2b:39:
cf:ce:58:c6:f0:58:21:b8:d0:fe:c6:e4:b7:da:7b:b2:06:b5:
df:85:54:96:ba:4e:56:c8:0d:e1:62:b6:ff:60:b8:fe:7c:96:
d2:0b:63:f4:c8:d9:49:35:72:e1:3c:ee:3e:c7:98:64:e9:eb:
ae:b8:4c:43:ac:bc:81:d0:7f:34:36:79:23:3c:ea:ef:11:0d:
ce:12:a0:b8:26:21:77:46:59:4a:f4:a0:83:02:29:f3:8e:50:
d3:0e:e9:0e:92:43:90:e1:90:14:26:b5:1b:9f:fb:79:a8:14:
36:05:f4:f2:41:fb:37:5b:c1:a8:2e:c7:8d:40:1f:21:06:33:
9a:b9:86:a2:2b:f6:a0:b0:ce:77:68:97:8e:84:d7:53:f3:48:
4b:1f:62:a6:41:cc:de:88:9c:eb:a9:76:f2:96:19:8b:cc:14:
0b:d6:0a:dd:69:f5:8f:ce:e7:4c:51:cb:4f:02:0a:5d:ac:9d:
42:db:30:cb:6a:f4:bc:12:e7:a3:09:a2:a0:83:3b:dc:ec:fc:
54:ae:0a:fe:5c:d4:f8:07:bb:11:32:3e:58:bb:18:5d:c7:66:
a3:ba:67:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo5XD6yfyg5bH7Y73k1o+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwNTEzMDAwMTM3WhcNMjYwNTE0MDAwMTM3WjAzMTEwLwYDVQQD
EyhkMGQwY2Q5NGExYjlmY2Y5MGViYWNjYjNkMGY3ZDlkZDkzZTJhMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ctACFIBf1ZGroBzSznuCQjE++PX
mHbQOzWsTDy+0W5anCyq25ruR4CWDKuL8hRNyBh5i6zUMX4bvISu70HDFDwHWupc
IWgkx2iutBSUzLzvLYdzEgE5qW9tvMTLxT/9xNjGZKEG8jmnhji0r6rGELfCW+kN
EsoeV/bdbJX36mb2FhvPlua948/itnTjm3qwosrE7JlGQ+6AyMC4+OQCkB9qa+jh
IYVQHAmkTjLzlaqnISP4WcYh9ZPOsyPBKGagx2+NYKU1H6JT+G4m7tjE0IN8o5sf
jWfdX1ivgACrDNG7MXjk4Ne/X6Xnk7KgECALo3mwvr6O03pmLp4yuREulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDQzZShufz5DrrMs9D32d2T4qFBMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7fPHHgp
F+nBmM5hjOfoonRj65Um6syrLG6l66KJBqPm2Cs5z85YxvBYIbjQ/sbkt9p7sga1
34VUlrpOVsgN4WK2/2C4/nyW0gtj9MjZSTVy4TzuPseYZOnrrrhMQ6y8gdB/NDZ5
Izzq7xENzhKguCYhd0ZZSvSggwIp845Q0w7pDpJDkOGQFCa1G5/7eagUNgX08kH7
N1vBqC7HjUAfIQYzmrmGoiv2oLDOd2iXjoTXU/NISx9ipkHM3oic66l28pYZi8wU
C9YK3Wn1j87nTFHLTwIKXaydQtswy2r0vBLnowmioIM73Oz8VK4K/lzU+Ae7ETI+
WLsYXcdmo7pnMQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:09:48 2026 by rpki-client