Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File: nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier: SBSXFEzq2wsw/OIzIMEwtKPY/bRsMVE/4RjTNXNqDPY=
Subject key identifier: 84:7A:DD:48:12:4C:DC:67:8D:74:3B:51:7A:85:D7:67:FF:8E:50:43
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer: /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial: 019E1D22541B9C5F19126241647F61AC5529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number: 0BD5
Signing time: Tue 12 May 2026 17:00:49 +0000
Manifest this update: Tue 12 May 2026 17:00:49 +0000
Manifest next update: Wed 13 May 2026 17:00:49 +0000
Files and hashes: 1: FktoGPzZbczbmYJMIxqyJDI4khU.roa (hash: Pd0QRgXE7TDiEULALaOfHMuU4dgReo9hAwqDI7vm89k=)
2: US1mag2Y_3gLjw3yqH5mtWjR1xQ.roa (hash: x23CUUEuBT6VTtfDeTHM6jIMOQ/mrX2YC4/4lHl02CU=)
3: fe4S5caqbGhoCjojIWugfijS-l4.roa (hash: 6YRbIlx6seVZp8RUl5TDchv2KEbRzRkel/i9kSVgs8g=)
4: kzMrI0imiRYxMSuFebP347S2bPA.roa (hash: a8zAVtnqtJmQ1e+sW7khdVocz/PbfFWHd0bXadNEbws=)
5: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: p/03vw2CCWaerFvIJdK1LcKTrOoVCba/4H9Sul9vReU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:54:1b:9c:5f:19:12:62:41:64:7f:61:ac:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Validity
Not Before: May 12 17:00:49 2026 GMT
Not After : May 13 17:00:49 2026 GMT
Subject: CN=847add48124cdc678d743b517a85d767ff8e5043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:1f:d8:19:c1:63:62:7b:cd:e5:88:dd:37:
15:04:4d:3f:90:6e:a5:64:2f:a6:e6:92:68:f7:c5:
7b:52:14:c7:c6:61:09:b5:70:9a:58:aa:05:b6:ff:
89:38:eb:84:60:a7:1d:f0:61:e6:b2:81:be:c5:4c:
6b:97:8c:06:ac:67:c9:ec:4c:50:bf:59:d7:c2:76:
2c:90:cb:55:6d:a8:53:f5:0c:b1:d1:6d:f6:91:51:
97:f7:ee:61:11:5b:2a:18:2d:68:e1:c7:f4:f7:ec:
21:50:58:57:1c:02:7f:54:b9:23:8a:a9:76:ad:ae:
60:6b:03:ce:e9:50:1a:22:1c:bd:5b:6c:0a:0d:02:
92:53:81:6d:d5:5f:ef:79:1e:a3:57:c1:05:38:79:
24:b3:3c:e2:ea:f2:2b:33:1f:ff:29:84:92:ab:10:
0c:93:bc:57:35:d7:3d:4a:5e:e8:3c:81:5e:ee:dd:
f2:db:37:99:0e:28:d0:41:93:b9:7f:0f:67:06:94:
91:0e:a5:7d:98:5d:23:24:aa:49:a4:04:0a:9c:5b:
54:76:41:83:5f:6a:f9:d0:99:d9:28:8f:84:78:d0:
ae:71:55:af:ce:e2:84:fa:38:97:92:77:a8:0f:18:
1b:9c:ec:03:30:dc:38:88:93:f5:a3:33:5d:7a:1a:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:DD:48:12:4C:DC:67:8D:74:3B:51:7A:85:D7:67:FF:8E:50:43
X509v3 Authority Key Identifier:
keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:85:83:70:6e:62:4b:a4:46:c3:2e:88:c7:1b:6c:3d:e8:82:
a9:b7:d6:42:73:26:d8:59:fb:c3:df:11:47:fa:c8:17:7f:ec:
c7:d6:0f:d1:1e:35:92:c5:81:d9:98:df:c8:62:26:fc:53:04:
f5:6a:4f:ce:c4:78:36:03:96:ff:b3:fd:48:8d:df:e7:fe:ca:
37:cc:91:a9:3e:70:5c:ae:1d:b8:8c:ad:bc:b4:0c:8b:bf:03:
4c:cf:e9:f0:58:bd:bf:e5:b0:f7:03:07:af:8b:b4:5c:22:54:
f5:1f:76:40:20:97:8c:8b:ae:e8:31:9c:de:fc:30:b6:1c:d9:
41:53:ee:08:bc:0f:10:dc:0d:ba:ad:af:16:57:d3:97:1a:7c:
34:e6:eb:89:c3:b2:cc:ab:22:49:30:56:4d:28:3a:0b:b8:8f:
1b:bc:5a:d2:ff:b4:d0:a3:1d:f9:64:59:61:44:8a:35:fe:da:
00:73:d8:45:aa:67:b5:0c:b5:1d:11:e5:48:6c:c2:12:35:c4:
4f:8c:01:a3:28:c0:ed:bb:1a:4f:c2:7a:50:c7:f8:ab:68:32:
97:7e:45:eb:46:66:2a:47:aa:ef:a1:7b:00:c4:60:e6:bf:38:
ac:dc:79:6e:9f:0c:83:26:ca:b4:c3:89:1f:d4:91:53:7e:b9:
f7:22:83:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIlQbnF8ZEmJBZH9hrFUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjk2Y2U1OWM1OTU1NzUzMGYwZWFhNDRjNjY0NTAzZDlj
NDAxZWQwHhcNMjYwNTEyMTcwMDQ5WhcNMjYwNTEzMTcwMDQ5WjAzMTEwLwYDVQQD
Eyg4NDdhZGQ0ODEyNGNkYzY3OGQ3NDNiNTE3YTg1ZDc2N2ZmOGU1MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGMf2BnBY2J7zeWI3TcVBE0/kG6l
ZC+m5pJo98V7UhTHxmEJtXCaWKoFtv+JOOuEYKcd8GHmsoG+xUxrl4wGrGfJ7ExQ
v1nXwnYskMtVbahT9Qyx0W32kVGX9+5hEVsqGC1o4cf09+whUFhXHAJ/VLkjiql2
ra5gawPO6VAaIhy9W2wKDQKSU4Ft1V/veR6jV8EFOHkkszzi6vIrMx//KYSSqxAM
k7xXNdc9Sl7oPIFe7t3y2zeZDijQQZO5fw9nBpSRDqV9mF0jJKpJpAQKnFtUdkGD
X2r50JnZKI+EeNCucVWvzuKE+jiXkneoDxgbnOwDMNw4iJP1ozNdehqWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR63UgSTNxnjXQ7UXqF12f/jlBDMB8GA1UdIwQY
MBaAFJy5bOWcWVV1MPDqpExmRQPZxAHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQt
ZGRiMGIxNDhlNDZiLzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ZGQ3YjEtZTMzNy00MDRkLWI3NjQtZGRiMGIxNDhlNDZi
LzEvbkxsczVaeFpWWFV3OE9xa1RHWkZBOW5FQWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4WDcG5i
S6RGwy6IxxtsPeiCqbfWQnMm2Fn7w98RR/rIF3/sx9YP0R41ksWB2ZjfyGIm/FME
9WpPzsR4NgOW/7P9SI3f5/7KN8yRqT5wXK4duIytvLQMi78DTM/p8Fi9v+Ww9wMH
r4u0XCJU9R92QCCXjIuu6DGc3vwwthzZQVPuCLwPENwNuq2vFlfTlxp8NObricOy
zKsiSTBWTSg6C7iPG7xa0v+00KMd+WRZYUSKNf7aAHPYRapntQy1HRHlSGzCEjXE
T4wBoyjA7bsaT8J6UMf4q2gyl35F60ZmKkeq76F7AMRg5r84rNx5bp8MgybKtMOJ
H9SRU3659yKDIw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:36:59 2026 by rpki-client