Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
File: C28enwlQ5POcnF_uP4aKJOs2HvE.mft (raw, json)
Hash identifier: 0TjFvVypZ0C8ACCqFszXapgjBvG1AnpGrLyEflPsIXs=
Subject key identifier: 32:F5:91:AE:9F:26:E3:3D:66:AA:F4:29:80:B6:B3:92:8D:50:03:65
Authority key identifier: 0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
Certificate issuer: /CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Certificate serial: 019E1BD8EC35C5C388FA99B5208CEB08A4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
Manifest number: 0B9A
Signing time: Tue 12 May 2026 11:01:01 +0000
Manifest this update: Tue 12 May 2026 11:01:01 +0000
Manifest next update: Wed 13 May 2026 11:01:01 +0000
Files and hashes: 1: 47eNEnd2Os7C6QxYIyUWjsK8BKI.roa (hash: bDQzx2pBpkbEKRLQU7MeWz1QEtEvCpVdSiUpwkOWRQM=)
2: C28enwlQ5POcnF_uP4aKJOs2HvE.crl (hash: n4AGnBJdAsEkmY2jHRWYfoQPrUlNFxO1FMWjrno+ZBY=)
3: Go8PchMmH9McisfgXlxtAWx-1sM.roa (hash: x553Jvx/smgcuhkg3Q3Px6o0g0MKgX3bIXb9nbTnt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:ec:35:c5:c3:88:fa:99:b5:20:8c:eb:08:a4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6f1e9f0950e4f39c9c5fee3f868a24eb361ef1
Validity
Not Before: May 12 11:01:01 2026 GMT
Not After : May 13 11:01:01 2026 GMT
Subject: CN=32f591ae9f26e33d66aaf42980b6b3928d500365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:fe:70:39:1a:2e:38:94:53:ea:fb:11:da:
f8:43:19:7a:0c:c2:5c:53:ee:39:2e:c6:33:2a:53:
b7:a0:84:73:f8:96:e5:7d:5b:fb:2a:6e:af:0f:bb:
9f:e0:94:76:fd:0d:91:d9:f2:b4:7a:08:30:d0:36:
c5:c1:73:29:54:21:8d:a3:8c:7a:1f:31:94:da:3e:
70:62:8f:03:9c:e5:09:27:7a:99:a0:d6:8f:4d:e9:
d7:95:8e:79:74:d2:4c:74:83:62:5b:b6:f4:07:c7:
6b:a7:ea:83:11:bc:7d:48:9b:18:a4:f0:cd:39:26:
7c:e0:e7:39:9e:c7:40:a9:fa:cd:5d:26:5a:3c:9d:
e3:d8:5d:c2:8a:67:fc:75:ca:7a:a6:35:60:ae:a1:
33:4b:e9:fb:56:00:81:e4:a2:76:52:c1:1d:38:17:
30:6b:ef:62:e0:4f:9c:3d:1e:b4:ed:0e:3f:ba:7c:
37:d2:c6:f0:5c:34:9b:a0:89:d4:6b:85:4d:d5:74:
cf:e3:5d:00:88:4c:a9:96:e8:17:cc:c8:67:3a:54:
56:9b:b2:08:6c:d6:cd:8d:d6:75:dc:8b:be:c3:53:
3f:89:43:a1:59:b2:03:3f:6f:07:cf:f3:2e:cd:f1:
71:e4:1c:5c:44:67:d9:3a:81:46:01:8d:7f:bf:e8:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F5:91:AE:9F:26:E3:3D:66:AA:F4:29:80:B6:B3:92:8D:50:03:65
X509v3 Authority Key Identifier:
keyid:0B:6F:1E:9F:09:50:E4:F3:9C:9C:5F:EE:3F:86:8A:24:EB:36:1E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C28enwlQ5POcnF_uP4aKJOs2HvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e69bd3-215e-4422-9170-081bcbac4daf/1/C28enwlQ5POcnF_uP4aKJOs2HvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:71:ab:ef:3f:a6:2f:b0:fd:e4:11:6e:56:d8:b3:b0:42:95:
5e:6a:1b:86:46:e3:ac:ef:c6:4f:b1:f2:c4:ee:f0:14:a2:9e:
56:8b:f4:c1:ba:6c:17:ed:67:e6:6b:d6:e2:22:73:e2:66:82:
5d:b7:a4:ca:74:93:ad:4e:9a:76:b2:39:6a:42:1f:8c:55:31:
b7:6a:e7:e2:2c:fc:98:de:14:71:17:08:c8:37:91:94:74:a3:
f1:1b:a2:6c:29:ac:c0:4e:c4:ff:ce:d6:cb:a7:ff:e2:50:9a:
08:6f:ce:57:4d:3d:14:fd:f0:fc:e1:fc:23:4c:95:48:7f:e6:
18:9a:70:f1:2b:3d:4f:76:b7:96:1b:e4:94:f6:01:8a:6a:0f:
23:af:e7:5b:1d:c5:10:aa:cb:3e:a3:f4:3c:d8:96:cc:e2:c3:
bc:65:10:77:b5:3e:fa:b1:39:8f:b7:b6:02:a6:1b:e6:ae:37:
e1:9d:2f:6e:19:8d:88:17:ce:65:7e:b3:79:d3:90:45:1b:57:
26:0b:78:1f:0c:8d:40:fa:08:85:bd:cf:05:e6:51:dc:92:f9:
04:83:dd:59:2e:03:46:e9:38:f1:b3:75:40:a0:4a:15:29:76:
3f:4d:f3:a5:9b:7d:83:bd:68:fe:2d:fb:d3:1d:e7:53:0a:7f:
55:36:e1:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2Ow1xcOI+pm1IIzrCKSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmYxZTlmMDk1MGU0ZjM5YzljNWZlZTNmODY4YTI0ZWIz
NjFlZjEwHhcNMjYwNTEyMTEwMTAxWhcNMjYwNTEzMTEwMTAxWjAzMTEwLwYDVQQD
EygzMmY1OTFhZTlmMjZlMzNkNjZhYWY0Mjk4MGI2YjM5MjhkNTAwMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta7+cDkaLjiUU+r7Edr4Qxl6DMJc
U+45LsYzKlO3oIRz+JblfVv7Km6vD7uf4JR2/Q2R2fK0eggw0DbFwXMpVCGNo4x6
HzGU2j5wYo8DnOUJJ3qZoNaPTenXlY55dNJMdINiW7b0B8drp+qDEbx9SJsYpPDN
OSZ84Oc5nsdAqfrNXSZaPJ3j2F3Cimf8dcp6pjVgrqEzS+n7VgCB5KJ2UsEdOBcw
a+9i4E+cPR607Q4/unw30sbwXDSboInUa4VN1XTP410AiEyplugXzMhnOlRWm7II
bNbNjdZ13Iu+w1M/iUOhWbIDP28Hz/MuzfFx5BxcRGfZOoFGAY1/v+h8uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL1ka6fJuM9Zqr0KYC2s5KNUANlMB8GA1UdIwQY
MBaAFAtvHp8JUOTznJxf7j+GiiTrNh7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAt
MDgxYmNiYWM0ZGFmLzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNjliZDMtMjE1ZS00NDIyLTkxNzAtMDgxYmNiYWM0ZGFm
LzEvQzI4ZW53bFE1UE9jbkZfdVA0YUtKT3MySHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnGr7z+m
L7D95BFuVtizsEKVXmobhkbjrO/GT7HyxO7wFKKeVov0wbpsF+1n5mvW4iJz4maC
XbekynSTrU6adrI5akIfjFUxt2rn4iz8mN4UcRcIyDeRlHSj8RuibCmswE7E/87W
y6f/4lCaCG/OV009FP3w/OH8I0yVSH/mGJpw8Ss9T3a3lhvklPYBimoPI6/nWx3F
EKrLPqP0PNiWzOLDvGUQd7U++rE5j7e2AqYb5q434Z0vbhmNiBfOZX6zedOQRRtX
Jgt4HwyNQPoIhb3PBeZR3JL5BIPdWS4DRuk48bN1QKBKFSl2P03zpZt9g71o/i37
0x3nUwp/VTbhpQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:22:42 2026 by rpki-client