Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
File: cCD5EV0ZQDH8XISfFau_2A4IYis.mft (raw, json)
Hash identifier: AQOp6x/aiL56GlEEsV9XGN28pO6KbXbneTxfz00XI28=
Subject key identifier: 77:84:0F:BA:D8:12:64:4E:8E:1F:02:9A:EA:1E:17:9E:52:F8:8B:03
Authority key identifier: 70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
Certificate issuer: /CN=7020f9115d194031fc5c849f15abbfd80e08622b
Certificate serial: 019E1D90796B385C938E64876CAF43FF3C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
Manifest number: 1291
Signing time: Tue 12 May 2026 19:01:07 +0000
Manifest this update: Tue 12 May 2026 19:01:07 +0000
Manifest next update: Wed 13 May 2026 19:01:07 +0000
Files and hashes: 1: Zp7Fe8FwoCOs4zIHiove7NEPEJ4.roa (hash: gsPnmHx5RKtQUbjYCFzF5Dr3Op9dQI7pc6RXkhPL+X4=)
2: cCD5EV0ZQDH8XISfFau_2A4IYis.crl (hash: zw05MkCtDRmDW4SglyizxNvvXLI/VtiO9sCRWbQuOAk=)
3: k-KxVntGfZQqdYlvvADf0vCCShs.asa (hash: tbsoShLfVTUpofMwAUlpBczIlKTh5FfBkdjkDOkAdOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:79:6b:38:5c:93:8e:64:87:6c:af:43:ff:3c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7020f9115d194031fc5c849f15abbfd80e08622b
Validity
Not Before: May 12 19:01:07 2026 GMT
Not After : May 13 19:01:07 2026 GMT
Subject: CN=77840fbad812644e8e1f029aea1e179e52f88b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:de:01:90:60:d9:04:5a:50:b3:2d:58:ce:
a5:ac:21:ed:ad:d8:7f:9f:b2:77:88:72:a4:91:b3:
09:36:84:b5:ef:27:26:14:32:af:13:7a:5b:d6:0c:
2b:f3:2a:49:f5:d3:c2:87:ad:c6:c5:e5:00:56:c5:
93:d1:5c:d4:0e:a4:c8:f9:36:02:46:e8:66:50:fb:
28:30:48:3a:b0:75:50:d4:85:46:95:74:aa:71:9c:
13:11:0c:41:a9:80:80:59:7a:ea:d2:13:9f:95:b2:
46:59:5d:aa:7e:e7:fe:fa:55:98:51:72:59:ad:4a:
97:27:09:0a:dc:b0:59:e6:d0:1d:c5:0b:43:9e:31:
d9:a8:bd:c3:cf:ba:9c:97:96:d1:b9:50:3c:3a:cc:
de:f7:bb:f9:5a:ba:db:8d:33:9b:7a:61:2d:7f:03:
73:b5:3a:2b:f3:ba:f6:2a:a4:cb:68:ee:84:c3:b4:
2c:e3:de:12:d4:c3:f2:3c:a9:ae:90:05:d6:88:e2:
5c:c5:32:02:0d:89:8d:1a:b7:5b:b5:ba:ce:63:e3:
50:ba:1f:1b:88:29:8c:46:10:14:56:bd:bd:87:1b:
17:42:66:63:c2:b8:c0:a7:09:16:62:5f:84:7a:1a:
28:d7:a9:dd:21:b4:8b:cc:d2:8a:2c:17:ae:68:4e:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:0F:BA:D8:12:64:4E:8E:1F:02:9A:EA:1E:17:9E:52:F8:8B:03
X509v3 Authority Key Identifier:
keyid:70:20:F9:11:5D:19:40:31:FC:5C:84:9F:15:AB:BF:D8:0E:08:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCD5EV0ZQDH8XISfFau_2A4IYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/990513-f49c-45fb-a7bb-5f045688bb99/1/cCD5EV0ZQDH8XISfFau_2A4IYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b8:50:5b:3b:07:3f:a5:7e:e9:49:58:ea:0f:cc:7d:5c:97:
7f:aa:65:76:23:04:c8:76:90:a3:ba:c5:72:0e:60:9b:26:0d:
b6:cc:ee:28:20:08:c6:9c:8f:42:68:2f:60:ba:c5:96:fc:58:
3e:ee:85:2b:c1:d5:48:7d:5d:6b:79:41:7f:26:1d:9a:40:e6:
cb:72:c7:70:d0:bb:b2:7a:f8:7d:07:c9:d2:20:a6:94:a6:a9:
7f:32:cd:90:bc:f4:e5:b1:cc:9a:d4:74:c4:ec:09:0c:49:b0:
27:af:ed:3a:23:55:f6:25:2f:36:34:b1:bc:5a:10:fc:af:88:
9e:5b:38:85:96:12:68:a8:ba:f3:89:24:6f:e6:9d:8d:3b:f3:
0b:26:d0:81:ed:ff:d0:0a:75:2c:ad:fb:7c:1f:7e:0d:3a:bd:
48:e5:5b:c4:48:c8:65:f5:78:1c:d8:f0:4e:77:e4:7f:ed:58:
40:2f:82:df:ba:ae:ed:b9:9d:d1:c9:d6:ac:23:9b:45:9e:56:
a8:dc:cb:a1:08:fd:0e:ca:bb:e8:ff:d6:49:72:8b:4c:91:27:
ff:2f:89:cb:76:8d:0e:85:96:c3:b7:1a:d9:f0:67:91:20:ce:
31:2d:b8:bf:d0:9e:a7:db:32:f3:7b:be:07:eb:fb:51:d3:22:
e9:ee:a6:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkHlrOFyTjmSHbK9D/zx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMjBmOTExNWQxOTQwMzFmYzVjODQ5ZjE1YWJiZmQ4MGUw
ODYyMmIwHhcNMjYwNTEyMTkwMTA3WhcNMjYwNTEzMTkwMTA3WjAzMTEwLwYDVQQD
Eyg3Nzg0MGZiYWQ4MTI2NDRlOGUxZjAyOWFlYTFlMTc5ZTUyZjg4YjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9jeAZBg2QRaULMtWM6lrCHtrdh/
n7J3iHKkkbMJNoS17ycmFDKvE3pb1gwr8ypJ9dPCh63GxeUAVsWT0VzUDqTI+TYC
RuhmUPsoMEg6sHVQ1IVGlXSqcZwTEQxBqYCAWXrq0hOflbJGWV2qfuf++lWYUXJZ
rUqXJwkK3LBZ5tAdxQtDnjHZqL3Dz7qcl5bRuVA8Osze97v5WrrbjTObemEtfwNz
tTor87r2KqTLaO6Ew7Qs494S1MPyPKmukAXWiOJcxTICDYmNGrdbtbrOY+NQuh8b
iCmMRhAUVr29hxsXQmZjwrjApwkWYl+Eehoo16ndIbSLzNKKLBeuaE7+wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeED7rYEmROjh8CmuoeF55S+IsDMB8GA1UdIwQY
MBaAFHAg+RFdGUAx/FyEnxWrv9gOCGIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmIt
NWYwNDU2ODhiYjk5LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85OTA1MTMtZjQ5Yy00NWZiLWE3YmItNWYwNDU2ODhiYjk5
LzEvY0NENUVWMFpRREg4WElTZkZhdV8yQTRJWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrhQWzsH
P6V+6UlY6g/MfVyXf6pldiMEyHaQo7rFcg5gmyYNtszuKCAIxpyPQmgvYLrFlvxY
Pu6FK8HVSH1da3lBfyYdmkDmy3LHcNC7snr4fQfJ0iCmlKapfzLNkLz05bHMmtR0
xOwJDEmwJ6/tOiNV9iUvNjSxvFoQ/K+Inls4hZYSaKi684kkb+adjTvzCybQge3/
0Ap1LK37fB9+DTq9SOVbxEjIZfV4HNjwTnfkf+1YQC+C37qu7bmd0cnWrCObRZ5W
qNzLoQj9Dsq76P/WSXKLTJEn/y+Jy3aNDoWWw7ca2fBnkSDOMS24v9Cep9sy83u+
B+v7UdMi6e6mdg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:20:14 2026 by rpki-client