Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: VeBlZTy5LroItzxGwoCtb1xevcf8ulVlwnrvc0rKUKM=
Subject key identifier: 91:B6:48:01:1B:02:8A:EC:F6:9D:F5:32:25:45:BF:6D:E3:72:FB:6D
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 019E1F7F1A92BD4C696378DA1ACBEDB9C02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 15F5
Signing time: Wed 13 May 2026 04:01:23 +0000
Manifest this update: Wed 13 May 2026 04:01:23 +0000
Manifest next update: Thu 14 May 2026 04:01:23 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: wUVV3328xSf41r4/B/0yda70d4ATQ1sBOgtdWFF052U=)
2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1a:92:bd:4c:69:63:78:da:1a:cb:ed:b9:c0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: May 13 04:01:23 2026 GMT
Not After : May 14 04:01:23 2026 GMT
Subject: CN=91b648011b028aecf69df5322545bf6de372fb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:45:50:d6:c6:be:b7:ce:47:81:cf:85:fa:
a0:28:cf:94:86:43:9a:7c:50:45:7f:cd:92:a4:fa:
db:d6:e3:36:33:2b:c7:d4:6f:3d:11:99:f2:96:bc:
71:63:57:a7:2f:44:a7:9b:4d:01:f9:c0:67:e6:36:
85:9b:a6:9d:88:5f:a2:42:d4:a1:40:0d:88:66:77:
d4:78:b4:86:bc:93:b4:6f:66:a7:74:c5:ca:4f:49:
46:24:e5:46:63:71:85:29:7e:5e:2d:83:7b:5f:d7:
e4:50:b1:9b:a8:9f:51:78:a4:bc:54:eb:1a:d6:3e:
3f:6a:a4:b3:0f:a2:82:e7:05:0d:2b:dd:d0:87:43:
4f:c9:12:75:d2:0f:b2:45:2d:c8:0b:96:06:48:a5:
ce:1f:ec:62:f0:19:a9:e8:7e:82:db:77:e5:27:02:
7e:de:cc:48:78:9e:75:b2:9c:84:8e:44:84:f7:57:
d4:b6:80:7e:37:70:da:15:e9:78:08:45:ce:88:e9:
c4:07:b7:72:ea:20:f6:89:11:d9:96:06:27:6c:0a:
68:6b:33:2f:42:df:5b:a1:74:71:d5:9f:e5:e3:d7:
96:b9:ec:71:31:79:92:4d:d0:0b:85:96:c8:1f:de:
34:7a:67:94:e9:51:4c:2c:fb:2a:37:72:d4:52:3c:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B6:48:01:1B:02:8A:EC:F6:9D:F5:32:25:45:BF:6D:E3:72:FB:6D
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:42:72:81:e9:7d:60:49:fb:4c:57:5e:13:7f:7a:a3:8b:
6c:85:33:72:53:93:78:7d:8e:9f:15:40:2b:2f:8e:5e:7d:4f:
cb:12:3a:13:65:75:63:2e:29:bf:00:35:4a:07:74:2d:05:2c:
f9:1b:d7:2c:51:b1:64:e6:e0:f0:cd:a6:ed:82:51:6f:99:c2:
01:1f:a6:3e:fa:19:0e:b2:1e:ad:76:0e:ea:35:2e:46:d6:bb:
33:7c:6b:76:47:ef:a3:f5:96:bf:98:3e:6a:24:05:55:b3:42:
e6:84:a3:7b:87:9c:35:93:28:71:28:04:03:d7:8b:36:da:89:
29:95:ef:27:bc:5e:4a:f8:53:ce:31:22:dd:ee:69:2e:0b:4e:
53:b2:ed:2b:39:4d:5b:dd:bb:2c:27:14:77:c6:4b:ca:a7:c1:
5d:5f:eb:a9:33:a8:df:7f:8e:14:24:ca:0f:ee:fd:c1:34:ff:
1e:57:65:14:0f:b2:ad:4f:f5:97:e6:1f:21:60:7a:86:26:83:
76:f6:1e:b2:8d:7e:c6:30:71:5c:e5:95:5d:2d:67:70:df:3e:
90:5a:bd:2b:2e:ec:e6:bd:0d:b6:0a:e9:36:53:5b:9f:fb:21:
6f:72:fc:be:75:ae:a4:4c:c2:0e:f4:5e:93:48:aa:ab:56:3a:
7d:9f:ad:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffxqSvUxpY3jaGsvtucAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz
MTQzMjAwHhcNMjYwNTEzMDQwMTIzWhcNMjYwNTE0MDQwMTIzWjAzMTEwLwYDVQQD
Eyg5MWI2NDgwMTFiMDI4YWVjZjY5ZGY1MzIyNTQ1YmY2ZGUzNzJmYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8xFUNbGvrfOR4HPhfqgKM+UhkOa
fFBFf82SpPrb1uM2MyvH1G89EZnylrxxY1enL0Snm00B+cBn5jaFm6adiF+iQtSh
QA2IZnfUeLSGvJO0b2andMXKT0lGJOVGY3GFKX5eLYN7X9fkULGbqJ9ReKS8VOsa
1j4/aqSzD6KC5wUNK93Qh0NPyRJ10g+yRS3IC5YGSKXOH+xi8Bmp6H6C23flJwJ+
3sxIeJ51spyEjkSE91fUtoB+N3DaFel4CEXOiOnEB7dy6iD2iRHZlgYnbApoazMv
Qt9boXRx1Z/l49eWuexxMXmSTdALhZbIH940emeU6VFMLPsqN3LUUjxkeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJG2SAEbAors9p31MiVFv23jcvttMB8GA1UdIwQY
MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It
ZjhkNmJkMzBjYzE5LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5
LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhNCcoHp
fWBJ+0xXXhN/eqOLbIUzclOTeH2OnxVAKy+OXn1PyxI6E2V1Yy4pvwA1Sgd0LQUs
+RvXLFGxZObg8M2m7YJRb5nCAR+mPvoZDrIerXYO6jUuRta7M3xrdkfvo/WWv5g+
aiQFVbNC5oSje4ecNZMocSgEA9eLNtqJKZXvJ7xeSvhTzjEi3e5pLgtOU7LtKzlN
W927LCcUd8ZLyqfBXV/rqTOo33+OFCTKD+79wTT/HldlFA+yrU/1l+YfIWB6hiaD
dvYeso1+xjBxXOWVXS1ncN8+kFq9Ky7s5r0NtgrpNlNbn/shb3L8vnWupEzCDvRe
k0iqq1Y6fZ+tdg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:52:57 2026 by rpki-client