Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: YxL7m7QW+yPUs4c83aUxLpCtzpFive6kanVuqTptIl4=
Subject key identifier: E3:E8:78:8B:CE:FC:27:A6:B5:A2:2C:ED:94:B9:77:62:3D:52:76:02
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 019E1CEBCBC2E93B9B175A3F99A57699FBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 1272
Signing time: Tue 12 May 2026 16:01:15 +0000
Manifest this update: Tue 12 May 2026 16:01:15 +0000
Manifest next update: Wed 13 May 2026 16:01:15 +0000
Files and hashes: 1: FT6hKDdOscZGglIPmnTSBT_NdEw.roa (hash: XuMv35p4+01j1k8oQho1O4/aKo7qUhSStQREoa1ANMI=)
2: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: GHMfE3bq5GBt8N5NANjqLEaPaTXVN+JPUcjQy4W2mYM=)
3: saGe65xuOQseP3c8kU3JX4FXHXE.roa (hash: /UkorSrGGemFtdnd/VIVCcjbVQGt7/xFaIltioMhlUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:cb:c2:e9:3b:9b:17:5a:3f:99:a5:76:99:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: May 12 16:01:15 2026 GMT
Not After : May 13 16:01:15 2026 GMT
Subject: CN=e3e8788bcefc27a6b5a22ced94b977623d527602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:00:ae:06:b1:1c:ce:f2:c9:14:3e:14:44:
54:86:46:4f:d4:a9:92:fd:b1:9b:b6:db:ac:3f:23:
16:85:c2:24:eb:b0:5b:03:af:3c:57:bb:de:0d:f8:
90:55:80:82:c5:47:de:84:5e:58:f6:e3:09:4a:4c:
12:42:9a:56:1b:df:48:cd:21:d3:69:e0:34:64:71:
5c:44:fd:f4:74:62:ce:dc:3e:3f:38:90:ed:01:f2:
ac:88:c1:af:87:95:53:94:fe:79:0e:53:65:11:ea:
1d:4d:99:34:af:0b:4c:e4:78:05:a2:26:2b:84:30:
ef:0b:9e:96:15:ea:f1:6a:3a:0c:51:0a:08:80:c0:
38:24:c1:61:97:fb:d8:1e:1c:fa:fe:60:f3:90:a0:
c0:9a:c0:86:b8:4b:e6:2a:fb:a9:6d:a9:95:31:17:
cb:be:ce:1d:e9:43:cb:3f:e7:d8:22:1b:7b:a9:e5:
49:0a:17:d0:ac:fc:d5:17:fe:b2:a2:d8:6e:62:ed:
bd:e1:10:56:89:bb:9c:8a:88:2b:43:9a:7e:88:0d:
de:d4:94:96:b1:8b:c7:65:d1:8f:6c:f3:bb:08:82:
d6:4e:a5:5f:04:67:67:95:a5:68:bc:ec:55:5d:9d:
19:d5:1d:84:55:a0:2c:3a:6e:c8:d8:f4:39:04:50:
dd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E8:78:8B:CE:FC:27:A6:B5:A2:2C:ED:94:B9:77:62:3D:52:76:02
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:e6:f2:5b:49:f5:1e:91:0a:8a:49:36:8c:8a:4f:40:82:
0f:30:a1:ce:77:27:e2:1f:51:6f:52:6d:ac:0f:31:e4:25:02:
b7:cc:44:42:ff:38:13:83:e7:a5:69:f2:c5:d5:04:ea:f7:59:
23:58:c5:bc:f2:69:42:3a:d2:fc:c4:25:c5:31:07:fe:53:1d:
22:13:b3:d7:c9:aa:6b:d1:6d:6e:6f:48:5f:79:54:48:b1:df:
6e:ae:b9:4d:8d:e5:bf:42:44:3c:fd:11:5b:95:df:64:8b:89:
78:3a:14:58:5e:20:ec:7e:c9:d6:c2:ab:f8:9c:a6:8f:a5:32:
f2:fa:42:32:61:96:e2:7c:74:ba:2f:a7:85:72:a4:61:11:dd:
e1:c0:1d:2e:d9:02:06:cd:b7:dd:09:58:b6:82:d8:4e:0c:69:
22:36:0c:5c:b4:cc:51:6b:67:9a:8c:91:23:1e:af:f9:30:86:
cc:fa:93:a5:07:01:ea:30:2c:d8:30:10:f4:04:27:5f:85:ae:
9a:62:5c:61:65:73:8d:5e:92:c9:2a:f2:54:e0:7e:3d:48:43:
e9:64:62:92:5e:00:18:ef:ba:1d:aa:82:0c:8d:3c:ee:8b:c4:
6b:05:1e:f5:b4:3e:fa:80:25:eb:4b:d6:71:dc:19:3a:a0:14:
70:c9:dd:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c68vC6TubF1o/maV2mfvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3
YzEyMTkwHhcNMjYwNTEyMTYwMTE1WhcNMjYwNTEzMTYwMTE1WjAzMTEwLwYDVQQD
EyhlM2U4Nzg4YmNlZmMyN2E2YjVhMjJjZWQ5NGI5Nzc2MjNkNTI3NjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5goArgaxHM7yyRQ+FERUhkZP1KmS
/bGbttusPyMWhcIk67BbA688V7veDfiQVYCCxUfehF5Y9uMJSkwSQppWG99IzSHT
aeA0ZHFcRP30dGLO3D4/OJDtAfKsiMGvh5VTlP55DlNlEeodTZk0rwtM5HgFoiYr
hDDvC56WFerxajoMUQoIgMA4JMFhl/vYHhz6/mDzkKDAmsCGuEvmKvupbamVMRfL
vs4d6UPLP+fYIht7qeVJChfQrPzVF/6yothuYu294RBWibuciogrQ5p+iA3e1JSW
sYvHZdGPbPO7CILWTqVfBGdnlaVovOxVXZ0Z1R2EVaAsOm7I2PQ5BFDdwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPoeIvO/CemtaIs7ZS5d2I9UnYCMB8GA1UdIwQY
MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt
YjIxZGQzZjY4YWJhLzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh
LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMjm8ltJ
9R6RCopJNoyKT0CCDzChzncn4h9Rb1JtrA8x5CUCt8xEQv84E4PnpWnyxdUE6vdZ
I1jFvPJpQjrS/MQlxTEH/lMdIhOz18mqa9Ftbm9IX3lUSLHfbq65TY3lv0JEPP0R
W5XfZIuJeDoUWF4g7H7J1sKr+Jymj6Uy8vpCMmGW4nx0ui+nhXKkYRHd4cAdLtkC
Bs233QlYtoLYTgxpIjYMXLTMUWtnmoyRIx6v+TCGzPqTpQcB6jAs2DAQ9AQnX4Wu
mmJcYWVzjV6SySryVOB+PUhD6WRikl4AGO+6HaqCDI087ovEawUe9bQ++oAl60vW
cdwZOqAUcMndLg==
-----END CERTIFICATE-----
Generated at Tue May 12 23:18:21 2026 by rpki-client