
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
File: fD5YWlm1I7uG1mCnFo4cHroJTaA.mft (raw, json)
Hash identifier: yvvqRIAqTju7XMQ/jXqCyqmQIRx7cMGyaxq7EUTos3Y=
Subject key identifier: B8:46:DA:6B:75:47:A9:57:0F:18:A7:F0:4B:10:D0:15:EB:5C:58:F2
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 019E1D90CBCDD7E58AF8700B4B6B158CDD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
Manifest number: 101A
Signing time: Tue 12 May 2026 19:01:29 +0000
Manifest this update: Tue 12 May 2026 19:01:29 +0000
Manifest next update: Wed 13 May 2026 19:01:29 +0000
Files and hashes: 1: CUW86B2DR7frkjRXhMj0tpGfzR0.roa (hash: +AMltbCrgBtIU8+BHyMcK4ZbfgEd7AgGyNWp1F2ZA24=)
2: FG6edaLthXtNRXgQz784XZNgYd8.roa (hash: 5nX8hTmpLoy7w0liaeZHVLXCjdNjFlEQzahTMpZo9sE=)
3: FOLDqKxEVMdWWcpgZnPDCyuO3M4.roa (hash: 0gkvmBgKUujlvBMJPfV/1P6cRqx430AdiJwroTPunR0=)
4: fD5YWlm1I7uG1mCnFo4cHroJTaA.crl (hash: r/w5WpWezNWO3pAtOSOknRDQmBv0Yq7zesYwO+J7ynI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:cb:cd:d7:e5:8a:f8:70:0b:4b:6b:15:8c:dd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: May 12 19:01:29 2026 GMT
Not After : May 13 19:01:29 2026 GMT
Subject: CN=b846da6b7547a9570f18a7f04b10d015eb5c58f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:b4:98:76:38:3d:50:9d:4e:af:95:03:e6:
10:78:98:8d:81:e7:94:5a:ff:c3:bd:43:6d:b5:0a:
77:4e:75:5d:19:0a:9b:96:37:cd:46:6a:f7:7a:06:
9d:87:a8:71:e2:76:20:73:17:65:5d:e4:d5:b6:44:
9c:77:fe:17:d4:c6:2c:09:3a:bf:4a:fd:8f:0a:98:
af:8c:83:49:01:fa:b3:5f:ea:c6:d9:5f:2d:7e:31:
b5:19:f0:a0:e1:7d:56:07:60:f7:ab:b5:76:29:95:
c6:3e:59:0a:a2:a1:b2:1f:31:ba:e3:1b:97:8f:62:
b6:77:c7:37:af:2a:fa:66:f8:00:ce:99:81:20:54:
32:70:71:f6:22:65:19:98:32:de:28:89:c8:7c:12:
d4:ce:5f:c3:d9:76:5a:1f:72:2c:9e:13:e3:83:c5:
54:c9:e5:d7:62:38:cf:bb:94:c7:11:8e:3a:f0:85:
61:4d:62:da:1d:69:9f:26:c4:31:c3:60:41:1c:ca:
24:87:7f:bf:1d:24:c3:57:45:68:9a:62:b2:a2:fe:
62:da:55:2a:d7:37:82:ea:17:55:60:b0:27:13:01:
0f:d1:06:c7:49:29:26:74:ac:0e:39:83:dd:3f:b6:
fb:d5:15:ea:66:35:0c:53:81:8e:2d:80:e0:8e:7a:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:DA:6B:75:47:A9:57:0F:18:A7:F0:4B:10:D0:15:EB:5C:58:F2
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:44:c9:ec:a5:92:89:a2:54:3b:36:f8:7a:a6:d1:15:c6:e6:
e3:ac:71:47:7d:b2:69:fd:db:07:97:12:25:16:ca:be:79:34:
11:f9:e5:09:f8:00:5a:19:9e:c3:00:fc:72:7c:96:f0:b2:e8:
e8:30:32:10:65:7f:53:ad:81:d4:bf:45:9a:a1:50:c3:87:59:
b7:57:ad:2e:c6:39:08:4a:15:06:e3:f3:fc:52:3c:51:cb:e9:
8a:aa:c8:b7:d2:1e:57:46:73:75:f7:34:ce:21:dd:f5:34:97:
90:c1:48:25:25:e4:70:a0:3a:c2:53:8b:71:12:45:b1:c1:3a:
00:c3:10:78:98:c5:4e:92:04:d7:da:a9:80:bb:91:79:43:c1:
21:d5:dc:f4:b1:72:66:a7:cf:93:28:57:b5:68:5e:92:61:21:
19:ab:96:09:70:75:87:b0:ee:33:b4:6b:a6:f9:4a:fa:43:5e:
ec:fc:6d:96:0b:c6:21:83:5c:ba:1b:5d:82:84:5c:73:96:f3:
af:b6:c9:73:84:07:8a:67:dc:ab:29:59:ac:f4:6a:50:dd:b1:
ff:d2:2a:19:dc:1d:d7:c5:39:08:ab:93:ea:9e:1b:a2:88:0c:
2e:49:2c:c4:29:ad:f7:e1:71:6a:33:a0:a2:3c:4c:b2:f5:fe:
5a:b4:24:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkMvN1+WK+HALS2sVjN13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2U1ODVhNTliNTIzYmI4NmQ2NjBhNzE2OGUxYzFlYmEw
OTRkYTAwHhcNMjYwNTEyMTkwMTI5WhcNMjYwNTEzMTkwMTI5WjAzMTEwLwYDVQQD
EyhiODQ2ZGE2Yjc1NDdhOTU3MGYxOGE3ZjA0YjEwZDAxNWViNWM1OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMi0mHY4PVCdTq+VA+YQeJiNgeeU
Wv/DvUNttQp3TnVdGQqbljfNRmr3egadh6hx4nYgcxdlXeTVtkScd/4X1MYsCTq/
Sv2PCpivjINJAfqzX+rG2V8tfjG1GfCg4X1WB2D3q7V2KZXGPlkKoqGyHzG64xuX
j2K2d8c3ryr6ZvgAzpmBIFQycHH2ImUZmDLeKInIfBLUzl/D2XZaH3IsnhPjg8VU
yeXXYjjPu5THEY468IVhTWLaHWmfJsQxw2BBHMokh3+/HSTDV0VommKyov5i2lUq
1zeC6hdVYLAnEwEP0QbHSSkmdKwOOYPdP7b71RXqZjUMU4GOLYDgjnreywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhG2mt1R6lXDxin8EsQ0BXrXFjyMB8GA1UdIwQY
MBaAFHw+WFpZtSO7htZgpxaOHB66CU2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUt
NmRjMWY1NjAzMWViLzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yNmUzMmEtMzViYS00NDNmLWJjMWUtNmRjMWY1NjAzMWVi
LzEvZkQ1WVdsbTFJN3VHMW1DbkZvNGNIcm9KVGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0TJ7KWS
iaJUOzb4eqbRFcbm46xxR32yaf3bB5cSJRbKvnk0EfnlCfgAWhmewwD8cnyW8LLo
6DAyEGV/U62B1L9FmqFQw4dZt1etLsY5CEoVBuPz/FI8UcvpiqrIt9IeV0Zzdfc0
ziHd9TSXkMFIJSXkcKA6wlOLcRJFscE6AMMQeJjFTpIE19qpgLuReUPBIdXc9LFy
ZqfPkyhXtWhekmEhGauWCXB1h7DuM7RrpvlK+kNe7PxtlgvGIYNcuhtdgoRcc5bz
r7bJc4QHimfcqylZrPRqUN2x/9IqGdwd18U5CKuT6p4boogMLkksxCmt9+FxajOg
ojxMsvX+WrQkfw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:28 2026 by rpki-client