Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
File: v2wd9mI3TUrs0Miz-EMS30ISVZk.mft (raw, json)
Hash identifier: zIB9Kf7GSJgMX/GfDJLQFg0J/eOezY6+9LFnAv4oc4E=
Subject key identifier: 2D:DD:13:C2:75:1A:C9:ED:4D:D9:BB:24:F8:31:BF:87:04:B8:A8:A3
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 019E1EA3C9A837F067F36EF6F34281CB826F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
Manifest number: 17E0
Signing time: Wed 13 May 2026 00:01:50 +0000
Manifest this update: Wed 13 May 2026 00:01:50 +0000
Manifest next update: Thu 14 May 2026 00:01:50 +0000
Files and hashes: 1: C0a13JZ0RSPrkMSd5oEqtcq4rwk.roa (hash: 6ypJkRhP+y1RaXO9CpneyswfDWMF34KW/IwPdUjopIU=)
2: SPQiaZ3julcN6ImZOduLjd1qohM.roa (hash: 0YIxYrRhuUKf32GXdhAAMFjgeWQ0j2Tfw0leBwT+5Aw=)
3: v2wd9mI3TUrs0Miz-EMS30ISVZk.crl (hash: 3o+SM+UPlGFUghkbOx71JMe1P+xsC9TQAUPLGsfGKH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:c9:a8:37:f0:67:f3:6e:f6:f3:42:81:cb:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: May 13 00:01:50 2026 GMT
Not After : May 14 00:01:50 2026 GMT
Subject: CN=2ddd13c2751ac9ed4dd9bb24f831bf8704b8a8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:c0:75:6d:a1:18:8d:53:45:2b:38:8c:b0:
de:1a:b5:ff:db:af:d1:92:3b:22:38:b0:49:10:17:
02:bd:72:03:d3:a2:e8:09:8e:6f:8e:14:2b:1d:67:
e3:f0:90:12:30:9a:b9:86:3d:16:d9:7c:9f:8b:ed:
ab:6c:43:db:9a:2c:80:a0:d1:21:53:8a:c9:8a:66:
36:e9:28:b4:51:54:1f:80:3c:f9:d8:5b:1b:09:85:
3d:97:60:2b:09:d1:7f:7c:a2:a8:16:b0:93:37:92:
de:33:3e:c0:01:c6:14:2b:3c:41:44:bf:e7:48:2e:
e3:67:a8:45:56:c0:3d:79:81:a2:de:57:9d:51:82:
dd:90:23:6e:0d:31:f1:19:9d:5d:95:66:3b:c8:59:
06:fd:ac:be:6f:da:19:62:87:9f:67:58:c2:69:dd:
0a:69:c4:c7:3f:ad:da:c2:a2:c0:3a:75:09:6e:04:
16:1e:48:c6:41:55:d2:f9:69:ff:34:30:82:28:bc:
4b:67:41:8e:ed:11:a9:76:46:a5:a4:48:90:d9:1a:
80:61:1c:a1:82:c8:85:93:46:4c:e7:6f:6d:24:07:
f8:a5:11:2e:da:93:03:5b:73:ae:6f:ae:fb:b2:01:
60:fa:d6:18:51:63:1b:4e:66:84:7d:17:d1:30:c1:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:13:C2:75:1A:C9:ED:4D:D9:BB:24:F8:31:BF:87:04:B8:A8:A3
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9e:5a:de:bd:d0:71:0f:e5:da:c7:83:24:e7:f8:65:c7:59:
fe:e7:94:a9:48:2d:cd:57:74:6f:1a:12:24:64:cb:a4:b1:37:
fd:f4:fc:db:ec:71:87:96:07:54:74:07:8e:30:48:54:5d:31:
b5:09:59:03:ff:87:8f:71:9d:c5:25:49:3a:70:4f:47:46:b6:
3c:3b:fe:09:fd:ae:ec:22:e6:4d:e9:39:47:58:09:f3:09:a0:
70:16:ff:46:2d:12:be:bf:1b:63:7e:62:8a:3e:7b:4c:c4:97:
e5:5c:af:c6:a5:f9:36:31:67:12:72:a9:36:39:f6:e8:d2:9b:
1f:b7:be:33:40:2e:1e:2b:17:44:96:cf:0d:ef:1a:96:f9:9f:
1a:d1:28:f4:8e:4f:37:b0:1e:50:cc:85:12:ce:74:e8:20:07:
c1:25:ef:3b:bf:ef:14:7e:05:76:2e:bf:59:5b:4b:2c:99:a1:
f1:68:d4:4b:50:cc:b2:63:0d:e7:48:f8:e8:36:55:13:eb:69:
9f:e9:ba:bb:1f:76:1c:7c:38:c3:25:f0:67:e1:10:a0:94:0f:
c8:58:26:66:c4:a2:96:3d:37:50:3d:86:23:16:e1:c0:2f:09:
5c:e0:b7:ab:b2:7e:3f:18:bf:f6:70:ff:6a:6c:f2:95:71:10:
6e:f2:6f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo8moN/Bn827280KBy4JvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjYwNTEzMDAwMTUwWhcNMjYwNTE0MDAwMTUwWjAzMTEwLwYDVQQD
EygyZGRkMTNjMjc1MWFjOWVkNGRkOWJiMjRmODMxYmY4NzA0YjhhOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IPAdW2hGI1TRSs4jLDeGrX/26/R
kjsiOLBJEBcCvXID06LoCY5vjhQrHWfj8JASMJq5hj0W2Xyfi+2rbEPbmiyAoNEh
U4rJimY26Si0UVQfgDz52FsbCYU9l2ArCdF/fKKoFrCTN5LeMz7AAcYUKzxBRL/n
SC7jZ6hFVsA9eYGi3ledUYLdkCNuDTHxGZ1dlWY7yFkG/ay+b9oZYoefZ1jCad0K
acTHP63awqLAOnUJbgQWHkjGQVXS+Wn/NDCCKLxLZ0GO7RGpdkalpEiQ2RqAYRyh
gsiFk0ZM529tJAf4pREu2pMDW3Oub677sgFg+tYYUWMbTmaEfRfRMMGSqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3dE8J1GsntTdm7JPgxv4cEuKijMB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL55a3r3Q
cQ/l2seDJOf4ZcdZ/ueUqUgtzVd0bxoSJGTLpLE3/fT82+xxh5YHVHQHjjBIVF0x
tQlZA/+Hj3GdxSVJOnBPR0a2PDv+Cf2u7CLmTek5R1gJ8wmgcBb/Ri0Svr8bY35i
ij57TMSX5VyvxqX5NjFnEnKpNjn26NKbH7e+M0AuHisXRJbPDe8alvmfGtEo9I5P
N7AeUMyFEs506CAHwSXvO7/vFH4Fdi6/WVtLLJmh8WjUS1DMsmMN50j46DZVE+tp
n+m6ux92HHw4wyXwZ+EQoJQPyFgmZsSilj03UD2GIxbhwC8JXOC3q7J+Pxi/9nD/
amzylXEQbvJvAw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:04:15 2026 by rpki-client