Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: uJKFaglTg3zBvTLvWXjR99Bs+HZ6ZE0ctcjzOmzxVCU=
Subject key identifier: E1:F2:56:CF:50:81:91:33:6A:09:96:61:E0:88:78:1C:F5:FE:D1:52
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019E1ED9AD0A057BE1C45690630D8C5C6A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 01:00:42 +0000
Manifest this update: Wed 13 May 2026 01:00:42 +0000
Manifest next update: Thu 14 May 2026 01:00:42 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: rz0p19Y7KIXSw/Rj3acMzKfxvc1s/xpnzijsayFAWAo=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ad:0a:05:7b:e1:c4:56:90:63:0d:8c:5c:6a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: May 13 01:00:42 2026 GMT
Not After : May 14 01:00:42 2026 GMT
Subject: CN=e1f256cf508191336a099661e088781cf5fed152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:ee:7e:6a:41:a1:75:75:63:a4:7d:35:cc:
86:89:43:1f:55:7c:a4:a3:32:b7:62:08:15:01:79:
44:b1:f1:2a:1b:9c:36:a5:52:95:2f:e5:65:21:66:
be:ee:fb:33:48:73:b8:72:df:e5:3f:a9:1f:3f:7b:
19:93:ae:51:21:ad:28:b4:ba:a8:40:64:b2:bd:cd:
be:24:92:dd:00:41:ad:00:84:52:be:67:65:e5:6e:
c2:bc:ff:0c:d5:d0:5c:c2:54:44:fc:3c:a5:92:9d:
c6:22:5e:aa:30:75:04:c8:e8:fb:50:f1:c9:0a:f7:
0e:70:5b:2a:7f:e8:b4:f8:65:72:24:1d:7d:9c:8f:
93:fc:8c:66:56:ca:c4:c5:e5:64:0f:98:3f:22:d0:
7f:b3:d3:a3:4b:36:6d:ba:c0:10:91:1b:1b:23:e8:
6d:9d:1c:5a:f5:ca:87:ab:0e:af:66:e1:81:66:69:
84:c9:db:bf:0d:9d:c7:1d:b4:49:bd:f3:99:37:8e:
ab:0a:0a:f3:be:03:2d:01:da:64:67:44:81:75:45:
4a:8b:17:3d:d8:a3:92:4b:94:1f:42:35:7a:54:29:
07:43:81:be:f3:4e:4c:09:43:21:3f:20:f6:e8:a4:
60:35:cc:e4:d0:af:d6:11:b0:48:c7:ea:2b:0c:fe:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:56:CF:50:81:91:33:6A:09:96:61:E0:88:78:1C:F5:FE:D1:52
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0e:8a:00:00:d5:35:4c:23:84:83:4b:55:32:49:a4:d4:a5:
57:13:e4:d7:cb:45:cd:5c:91:24:bd:a6:24:59:9c:2f:99:19:
00:e4:0d:cf:57:f2:0e:f6:56:1c:b1:35:2e:8b:04:45:11:87:
58:70:f4:eb:a2:71:04:a9:ce:6e:bc:fd:fc:c0:80:13:61:32:
aa:1f:b0:6a:5a:6a:45:01:fb:bd:de:8a:1b:ce:cd:59:98:a6:
9b:4a:78:a7:32:69:86:95:a6:6b:ca:47:62:78:c0:cf:f1:10:
bc:63:37:de:cc:9a:47:f7:38:8a:76:af:d3:25:16:7d:29:9e:
8a:33:49:e4:a3:b8:02:21:32:49:88:ca:5c:61:a8:79:16:6f:
59:38:41:bd:78:4f:9c:38:39:ef:f0:04:f7:aa:23:84:82:e3:
02:53:80:81:ed:1a:82:df:d9:d0:20:8f:05:0f:fd:4b:dd:c0:
2b:de:08:07:68:88:96:eb:00:3e:d7:3e:1f:52:d4:ff:37:2c:
11:fb:59:f7:4b:f8:b0:a4:9a:4f:4b:57:49:40:35:66:50:c6:
70:1e:32:f5:b1:46:30:9a:63:e8:ac:8e:fa:31:42:ec:ba:47:
ef:51:35:b2:3c:f1:4b:6d:42:ae:72:49:2f:21:a8:41:95:6a:
44:20:d4:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2a0KBXvhxFaQYw2MXGpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjYwNTEzMDEwMDQyWhcNMjYwNTE0MDEwMDQyWjAzMTEwLwYDVQQD
EyhlMWYyNTZjZjUwODE5MTMzNmEwOTk2NjFlMDg4NzgxY2Y1ZmVkMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkzufmpBoXV1Y6R9NcyGiUMfVXyk
ozK3YggVAXlEsfEqG5w2pVKVL+VlIWa+7vszSHO4ct/lP6kfP3sZk65RIa0otLqo
QGSyvc2+JJLdAEGtAIRSvmdl5W7CvP8M1dBcwlRE/Dylkp3GIl6qMHUEyOj7UPHJ
CvcOcFsqf+i0+GVyJB19nI+T/IxmVsrExeVkD5g/ItB/s9OjSzZtusAQkRsbI+ht
nRxa9cqHqw6vZuGBZmmEydu/DZ3HHbRJvfOZN46rCgrzvgMtAdpkZ0SBdUVKixc9
2KOSS5QfQjV6VCkHQ4G+805MCUMhPyD26KRgNczk0K/WEbBIx+orDP4nFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHyVs9QgZEzagmWYeCIeBz1/tFSMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw6KAADV
NUwjhINLVTJJpNSlVxPk18tFzVyRJL2mJFmcL5kZAOQNz1fyDvZWHLE1LosERRGH
WHD066JxBKnObrz9/MCAE2Eyqh+walpqRQH7vd6KG87NWZimm0p4pzJphpWma8pH
YnjAz/EQvGM33syaR/c4inav0yUWfSmeijNJ5KO4AiEySYjKXGGoeRZvWThBvXhP
nDg57/AE96ojhILjAlOAge0agt/Z0CCPBQ/9S93AK94IB2iIlusAPtc+H1LU/zcs
EftZ90v4sKSaT0tXSUA1ZlDGcB4y9bFGMJpj6KyO+jFC7LpH71E1sjzxS21CrnJJ
LyGoQZVqRCDU4g==
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:37 2026 by rpki-client