Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: vWOl+gBjChqyafNLJMmBeBLQUgs+G3JRet45qhB7bIY=
Subject key identifier: 41:8D:62:2F:EA:57:63:1F:ED:D4:62:27:D9:90:42:ED:30:25:6F:83
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019E1E35597E2C36978E7CE891C6235B0BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 096E
Signing time: Tue 12 May 2026 22:01:13 +0000
Manifest this update: Tue 12 May 2026 22:01:13 +0000
Manifest next update: Wed 13 May 2026 22:01:13 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: bdo0OUHTfKpF4ESwnFPbqsa+D80fu/1HKzfqEY2vKVE=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:59:7e:2c:36:97:8e:7c:e8:91:c6:23:5b:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: May 12 22:01:13 2026 GMT
Not After : May 13 22:01:13 2026 GMT
Subject: CN=418d622fea57631fedd46227d99042ed30256f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:42:b2:3a:03:68:93:f3:94:6b:d9:e1:68:
71:a6:08:e9:d6:e7:5e:72:fd:06:ec:80:e6:c6:59:
5a:0f:ec:4f:96:69:d4:7e:d8:13:1c:18:4f:3a:cc:
b4:c9:1c:9d:11:dd:06:9e:e6:9e:85:81:2b:cb:5a:
6c:e9:36:16:a1:74:9b:81:88:f1:46:3d:eb:31:a5:
5d:e3:54:09:11:98:88:02:fb:06:ff:f2:da:83:0d:
d8:d7:25:eb:b5:e7:13:e2:6f:ad:c3:76:02:83:3f:
da:4f:90:4d:a7:4b:a8:7d:c0:7a:2e:14:db:e9:5a:
3f:ce:98:b3:5b:44:78:d5:b6:6a:ed:76:ff:bb:74:
59:8a:ee:6e:24:56:b5:0f:77:3d:b7:35:c5:59:ae:
b0:01:dd:04:ce:a9:b7:13:c0:9c:cc:dc:03:35:6e:
3c:43:2c:b0:7c:32:66:3e:dd:72:87:3d:3b:28:ac:
5e:24:51:e5:5d:c6:a7:15:24:c1:33:ec:ad:cf:97:
d7:a1:b7:9a:7d:10:a2:c2:b6:15:23:ab:2f:af:f9:
b4:c3:8a:df:54:54:7a:2f:13:cf:df:31:0e:8d:b9:
91:64:0e:ba:6d:b2:a9:be:fb:d1:ff:45:22:76:24:
70:01:14:ab:65:b3:cc:80:31:a6:52:20:ad:8f:af:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:62:2F:EA:57:63:1F:ED:D4:62:27:D9:90:42:ED:30:25:6F:83
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:91:0a:64:52:6c:1e:66:81:7a:7f:bf:de:f0:f1:f2:7a:
50:17:03:f3:66:7a:26:ea:1b:a3:64:04:88:8e:e0:e3:63:cb:
35:3d:26:2a:4b:03:c5:be:88:19:ac:87:12:ee:cf:73:1c:62:
bd:f7:0a:a8:cc:17:c3:6e:85:bb:4f:50:4f:02:d5:08:8c:28:
df:0a:78:eb:82:c2:4b:c3:be:f7:15:62:d2:98:65:74:8c:47:
78:25:e2:aa:21:2c:93:0c:6b:a8:c0:d4:b5:66:99:9e:32:e1:
fc:60:83:47:7e:eb:38:1b:8f:49:3f:33:73:f1:5d:1a:45:c5:
b8:66:93:dd:32:78:06:ef:20:53:d4:6a:5b:0a:ea:8c:54:c6:
ba:9b:2c:73:77:eb:b6:f3:e0:d3:c6:55:da:9a:a3:b0:3e:d8:
51:bc:59:d3:91:c3:a4:b7:b0:c7:a7:fb:88:fc:74:02:b8:26:
63:21:cf:b0:2c:9d:a5:2f:40:a8:d5:0e:56:65:a2:26:3b:c5:
62:12:db:b4:6d:ad:bc:26:c1:3a:9d:79:9a:a4:14:c1:57:da:
64:c6:41:11:d1:17:5f:7a:85:58:35:81:32:7d:8b:8b:63:f0:
4f:34:58:4e:f0:b8:a2:f1:3f:f3:70:35:9f:1a:91:71:0b:0d:
6e:8b:d4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNVl+LDaXjnzokcYjWwv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjYwNTEyMjIwMTEzWhcNMjYwNTEzMjIwMTEzWjAzMTEwLwYDVQQD
Eyg0MThkNjIyZmVhNTc2MzFmZWRkNDYyMjdkOTkwNDJlZDMwMjU2ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a1CsjoDaJPzlGvZ4Whxpgjp1ude
cv0G7IDmxllaD+xPlmnUftgTHBhPOsy0yRydEd0GnuaehYEry1ps6TYWoXSbgYjx
Rj3rMaVd41QJEZiIAvsG//Lagw3Y1yXrtecT4m+tw3YCgz/aT5BNp0uofcB6LhTb
6Vo/zpizW0R41bZq7Xb/u3RZiu5uJFa1D3c9tzXFWa6wAd0Ezqm3E8CczNwDNW48
QyywfDJmPt1yhz07KKxeJFHlXcanFSTBM+ytz5fXobeafRCiwrYVI6svr/m0w4rf
VFR6LxPP3zEOjbmRZA66bbKpvvvR/0UidiRwARSrZbPMgDGmUiCtj68YlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGNYi/qV2Mf7dRiJ9mQQu0wJW+DMB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGeRCmRS
bB5mgXp/v97w8fJ6UBcD82Z6Juobo2QEiI7g42PLNT0mKksDxb6IGayHEu7Pcxxi
vfcKqMwXw26Fu09QTwLVCIwo3wp464LCS8O+9xVi0phldIxHeCXiqiEskwxrqMDU
tWaZnjLh/GCDR37rOBuPST8zc/FdGkXFuGaT3TJ4Bu8gU9RqWwrqjFTGupssc3fr
tvPg08ZV2pqjsD7YUbxZ05HDpLewx6f7iPx0ArgmYyHPsCydpS9AqNUOVmWiJjvF
YhLbtG2tvCbBOp15mqQUwVfaZMZBEdEXX3qFWDWBMn2Li2PwTzRYTvC4ovE/83A1
nxqRcQsNbovUbw==
-----END CERTIFICATE-----
Generated at Wed May 13 05:17:17 2026 by rpki-client