Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: G9jSx6AoHbxymbU3rL9ViYcamlozeHYo6OZicGMVf8s=
Subject key identifier: 03:D0:B7:64:31:E6:0A:57:CF:25:FA:53:B0:A6:EA:E7:4D:83:2B:59
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019E1E6C58188B4245CA438D15B1AC0606BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 23:01:17 +0000
Manifest this update: Tue 12 May 2026 23:01:17 +0000
Manifest next update: Wed 13 May 2026 23:01:17 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: xC0Q7CgpUYaRlZaY6DNIm2i3vCI5BnOkLQmvulA014Q=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:58:18:8b:42:45:ca:43:8d:15:b1:ac:06:06:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: May 12 23:01:17 2026 GMT
Not After : May 13 23:01:17 2026 GMT
Subject: CN=03d0b76431e60a57cf25fa53b0a6eae74d832b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a0:67:c8:06:e7:79:83:3a:50:48:5f:86:03:
22:53:93:4a:f1:d5:07:93:54:a4:f4:9f:a2:cc:5b:
6f:d5:b0:37:e6:91:ee:cd:48:1c:d3:f9:c2:6c:85:
93:f1:c4:d9:dd:d4:9c:bd:ee:27:20:f1:b2:71:20:
97:69:53:50:44:61:78:9b:fc:ab:32:4c:cf:7b:1c:
1d:41:12:45:f5:07:80:49:0f:f9:80:0f:fa:cb:0b:
42:84:a7:63:9e:ca:0e:57:b0:78:89:8c:2f:95:77:
f2:38:89:81:d6:93:da:73:e2:33:37:c3:bd:41:7c:
0e:77:a3:c3:f0:9f:2c:2c:a5:25:ab:2e:af:e3:70:
c1:af:62:17:9d:30:3d:6f:c9:ec:f8:04:82:89:d1:
30:95:0f:40:8a:e3:1b:1d:f2:cd:d7:cc:f4:fe:30:
e0:22:ee:1a:6d:2d:e0:a9:81:4b:30:e2:2f:33:f1:
b4:b4:6f:a4:6e:ce:4f:24:f4:95:db:f1:83:8f:a2:
2d:98:46:a8:f8:8b:38:c8:fd:1c:37:7f:e8:b6:b7:
05:af:fa:a7:ac:b8:3f:e3:48:37:98:ae:86:f7:35:
c5:e4:49:de:4c:88:e8:76:7f:49:3a:46:59:09:89:
1a:91:3d:48:63:bb:ae:76:c5:a8:4a:47:7b:e0:19:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:B7:64:31:E6:0A:57:CF:25:FA:53:B0:A6:EA:E7:4D:83:2B:59
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c1:5d:3f:b8:8b:1b:23:f7:d3:3b:79:f8:08:52:e4:da:c4:
e7:28:91:94:7f:5c:75:63:d6:c9:af:7f:ca:8c:ac:84:5a:eb:
3d:9e:21:c8:7e:a4:ee:35:88:6a:c5:89:f0:db:3f:48:a6:61:
24:2b:54:a2:74:c3:b7:ba:b3:b0:d5:f6:51:bf:af:7b:b3:6b:
38:cb:93:00:68:f8:74:f8:b5:6e:f1:ad:6d:92:db:ce:d5:16:
86:b0:99:e1:60:8a:2e:17:f6:97:29:77:5b:0b:02:84:aa:c6:
33:dc:fd:82:44:8d:4c:4e:fa:75:60:9d:e3:bb:ee:ae:8e:a6:
b5:0e:31:20:0c:9d:92:75:cf:32:c3:73:27:e9:65:33:58:ff:
e9:0f:46:d0:07:2a:b6:b7:58:00:37:3d:37:91:ca:c4:bc:09:
59:9a:98:3b:b8:49:56:84:42:8d:91:a2:fc:a7:59:8a:66:e6:
fb:97:c0:5d:0d:82:39:7a:a5:12:17:a6:e5:1e:43:77:52:b4:
17:78:dc:3c:37:e7:4b:de:9c:64:3d:44:67:44:2c:c2:14:86:
98:5c:81:61:16:57:8c:f4:ba:b5:c6:37:64:f3:65:c9:a9:f1:
0a:55:ad:c9:0a:2e:35:6e:69:ef:55:e1:8b:1e:6f:5c:64:5d:
ec:ba:cf:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebFgYi0JFykONFbGsBga9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTc2Mjc1NTQ3Yjc1ZGYyYjA0YzRmOWIyOTFjMDcxMGM1
MDc3NDAwHhcNMjYwNTEyMjMwMTE3WhcNMjYwNTEzMjMwMTE3WjAzMTEwLwYDVQQD
EygwM2QwYjc2NDMxZTYwYTU3Y2YyNWZhNTNiMGE2ZWFlNzRkODMyYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaBnyAbneYM6UEhfhgMiU5NK8dUH
k1Sk9J+izFtv1bA35pHuzUgc0/nCbIWT8cTZ3dScve4nIPGycSCXaVNQRGF4m/yr
MkzPexwdQRJF9QeASQ/5gA/6ywtChKdjnsoOV7B4iYwvlXfyOImB1pPac+IzN8O9
QXwOd6PD8J8sLKUlqy6v43DBr2IXnTA9b8ns+ASCidEwlQ9AiuMbHfLN18z0/jDg
Iu4abS3gqYFLMOIvM/G0tG+kbs5PJPSV2/GDj6ItmEao+Is4yP0cN3/otrcFr/qn
rLg/40g3mK6G9zXF5EneTIjodn9JOkZZCYkakT1IY7uudsWoSkd74BkunwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPQt2Qx5gpXzyX6U7Cm6udNgytZMB8GA1UdIwQY
MBaAFCuXYnVUe3XfKwTE+bKRwHEMUHdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgt
ZDViMGY5MWQ5N2MyLzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81OGY0NWYtOGIwNy00ZTZhLTk1NDgtZDViMGY5MWQ5N2My
LzEvSzVkaWRWUjdkZDhyQk1UNXNwSEFjUXhRZDBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH8FdP7iL
GyP30zt5+AhS5NrE5yiRlH9cdWPWya9/yoyshFrrPZ4hyH6k7jWIasWJ8Ns/SKZh
JCtUonTDt7qzsNX2Ub+ve7NrOMuTAGj4dPi1bvGtbZLbztUWhrCZ4WCKLhf2lyl3
WwsChKrGM9z9gkSNTE76dWCd47vuro6mtQ4xIAydknXPMsNzJ+llM1j/6Q9G0Acq
trdYADc9N5HKxLwJWZqYO7hJVoRCjZGi/KdZimbm+5fAXQ2COXqlEhem5R5Dd1K0
F3jcPDfnS96cZD1EZ0QswhSGmFyBYRZXjPS6tcY3ZPNlyanxClWtyQouNW5p71Xh
ix5vXGRd7LrP9Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:57:18 2026 by rpki-client