Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: jmGwjyzBpZLKAevOnwYRuBX+LkaIw15CzzoBXOXJFSE=
Subject key identifier: 3D:D7:57:09:29:9A:4E:2F:95:76:5A:C6:57:AA:E4:C5:61:33:F8:66
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019E1EA3134677B74535FECDF4FB42CB4C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 191C
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: 23nhiRY9cVuhzeoI/5ZO+w4dXeAMS+ETROOsISig4Rc=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:13:46:77:b7:45:35:fe:cd:f4:fb:42:cb:4c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=3dd75709299a4e2f95765ac657aae4c56133f866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:27:70:a4:46:a0:dc:c0:95:b8:73:c3:15:3b:
88:db:aa:09:85:46:80:ca:77:38:e9:e2:c2:2b:ae:
48:13:2b:25:88:ed:c6:7a:9f:4e:7c:ca:2b:70:a6:
af:4e:a4:b9:b5:7b:d6:7b:62:17:3a:85:09:37:0a:
72:8c:08:e5:31:89:50:e9:29:72:ef:aa:84:8a:31:
42:6e:d7:9c:40:a7:b4:2f:4d:95:15:68:f2:b9:34:
70:36:86:46:25:d7:f9:6a:7a:2d:0a:10:59:29:28:
54:e1:53:67:92:32:44:6d:50:dd:c6:55:21:bb:59:
ae:97:ba:57:bd:aa:20:c1:3f:6e:b6:92:a1:2a:2c:
bc:d1:2c:b2:5c:d7:0d:45:96:2e:ae:0e:0f:b0:3b:
db:82:20:da:e9:ef:f7:2c:40:cd:a4:5e:a8:fa:7f:
93:51:c0:47:f7:6c:fc:68:4d:6d:33:05:f9:46:ef:
7b:e4:48:af:81:f8:0b:f4:d2:11:18:4d:c9:c4:3f:
1e:07:c0:b3:84:95:6d:6f:90:a5:f5:08:d6:89:03:
43:be:a0:9d:31:c5:ac:3c:e0:49:06:3d:dd:4f:a5:
c2:a3:0c:66:70:f4:ba:fe:46:d1:90:f5:5c:e3:1c:
a7:54:38:8c:04:ef:d1:a7:53:59:c9:ab:61:a1:f7:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D7:57:09:29:9A:4E:2F:95:76:5A:C6:57:AA:E4:C5:61:33:F8:66
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:29:5b:be:98:e9:b0:c1:08:21:be:ab:95:db:86:8e:51:aa:
60:1f:09:e2:57:58:d9:1b:b9:34:e2:36:f1:96:a7:de:db:d2:
4f:10:1d:b6:69:2c:8a:14:e6:d8:0b:1a:b7:fa:60:f4:2b:bf:
f2:19:09:ab:00:78:99:07:37:b1:ec:34:99:0f:a2:6c:22:1a:
9b:7c:77:60:eb:46:27:8f:e1:9d:e4:2f:a0:6d:b1:fd:49:3b:
dc:24:d3:9b:a2:ac:df:e6:c1:0a:62:06:0e:ba:17:16:45:02:
12:51:02:f5:4a:b9:03:af:97:dd:5d:ca:49:04:3b:49:6a:28:
3e:a6:12:95:e1:61:3f:61:99:eb:7f:b7:19:2d:a1:82:32:55:
5f:e3:36:ae:ac:ee:9e:b1:96:07:4c:d6:4a:b7:c1:48:3f:e7:
bc:5c:d1:28:03:2b:5c:af:1b:f0:81:02:40:fc:df:70:44:c4:
50:31:f7:d4:71:67:1b:6a:51:d5:be:3f:c8:46:54:15:18:90:
2a:de:a7:8f:d9:2c:a6:64:43:d5:04:0d:1f:19:d6:02:d2:54:
9a:8d:93:e0:f0:ad:0a:dc:73:75:05:99:91:03:f4:0b:d0:d2:
c8:c8:71:10:cb:45:a1:66:11:7b:e4:8c:d2:85:37:94:98:35:
ee:c3:c0:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoxNGd7dFNf7N9PtCy0wLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMWU3MmYzZDA5NTdmNWE2ZTNiZDFiODQ0YTEyYTYxNDc0
NDkwMjcwHhcNMjYwNTEzMDAwMTA0WhcNMjYwNTE0MDAwMTA0WjAzMTEwLwYDVQQD
EygzZGQ3NTcwOTI5OWE0ZTJmOTU3NjVhYzY1N2FhZTRjNTYxMzNmODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCdwpEag3MCVuHPDFTuI26oJhUaA
ync46eLCK65IEysliO3Gep9OfMorcKavTqS5tXvWe2IXOoUJNwpyjAjlMYlQ6Sly
76qEijFCbtecQKe0L02VFWjyuTRwNoZGJdf5anotChBZKShU4VNnkjJEbVDdxlUh
u1mul7pXvaogwT9utpKhKiy80SyyXNcNRZYurg4PsDvbgiDa6e/3LEDNpF6o+n+T
UcBH92z8aE1tMwX5Ru975EivgfgL9NIRGE3JxD8eB8CzhJVtb5Cl9QjWiQNDvqCd
McWsPOBJBj3dT6XCowxmcPS6/kbRkPVc4xynVDiMBO/Rp1NZyathofeejwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3XVwkpmk4vlXZaxleq5MVhM/hmMB8GA1UdIwQY
MBaAFAsecvPQlX9abjvRuEShKmFHRJAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQt
MDU0OGQzODk1YTU1LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xYTVhOTYtZDM2ZS00ZjNhLTliMzQtMDU0OGQzODk1YTU1
LzEvQ3g1eTg5Q1ZmMXB1TzlHNFJLRXFZVWRFa0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUClbvpjp
sMEIIb6rlduGjlGqYB8J4ldY2Ru5NOI28Zan3tvSTxAdtmksihTm2Asat/pg9Cu/
8hkJqwB4mQc3sew0mQ+ibCIam3x3YOtGJ4/hneQvoG2x/Uk73CTTm6Ks3+bBCmIG
DroXFkUCElEC9Uq5A6+X3V3KSQQ7SWooPqYSleFhP2GZ63+3GS2hgjJVX+M2rqzu
nrGWB0zWSrfBSD/nvFzRKAMrXK8b8IECQPzfcETEUDH31HFnG2pR1b4/yEZUFRiQ
Kt6nj9kspmRD1QQNHxnWAtJUmo2T4PCtCtxzdQWZkQP0C9DSyMhxEMtFoWYRe+SM
0oU3lJg17sPAew==
-----END CERTIFICATE-----
Generated at Wed May 13 04:56:34 2026 by rpki-client