Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 0Awzd7WEW3mh2uCOMU+1+W1yGRoBPY7UKiRqJrS2YSw=
Subject key identifier: 8F:CA:62:08:54:3A:F2:CF:26:A5:00:BA:F1:15:79:E9:62:BF:EB:FA
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019E1D22BC798BC6FF492B8ACF93DFD4304A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 17:01:16 +0000
Manifest this update: Tue 12 May 2026 17:01:16 +0000
Manifest next update: Wed 13 May 2026 17:01:16 +0000
Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: 8CvrRD3olvjzdE9dh47MqaQKgk3JuOwJAIoUYJtQG5I=)
3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:bc:79:8b:c6:ff:49:2b:8a:cf:93:df:d4:30:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: May 12 17:01:16 2026 GMT
Not After : May 13 17:01:16 2026 GMT
Subject: CN=8fca6208543af2cf26a500baf11579e962bfebfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:97:cb:f4:ab:a6:82:b1:3e:63:8f:70:27:
c9:5f:5a:a5:7a:73:a2:e9:8a:02:d5:d2:3c:7f:00:
f9:d8:fa:a5:ef:50:5a:d7:ef:c8:52:af:bc:26:94:
4e:7c:b4:2a:2f:9c:cc:da:43:13:b6:e3:bd:3d:1c:
a7:2a:fb:05:6c:8d:03:e5:60:ec:87:e0:c2:0d:c7:
5c:f3:09:7a:33:cb:18:fc:95:f6:0c:e1:89:11:cf:
1e:cf:ac:44:bf:b0:5a:02:b6:4a:6e:b6:b1:3e:d3:
e6:4b:12:72:1c:d0:50:f9:f2:86:ef:37:c4:13:bd:
03:8e:be:d1:6f:61:b1:18:75:ba:6a:72:3e:83:17:
39:5b:c3:51:ee:8d:13:4c:5c:46:da:54:1d:64:1c:
f4:80:d6:c8:7f:1f:6f:a0:8d:7c:d9:3f:d3:31:f2:
91:37:b9:79:ad:75:a9:ed:8a:fe:65:5b:68:86:6b:
35:a5:42:dd:25:04:0e:f0:64:40:9c:06:39:81:68:
16:c9:ff:dd:15:81:f0:70:04:2a:eb:d9:56:5e:94:
7b:e2:b9:49:6e:72:c2:9c:4a:21:17:3c:66:1e:9a:
f7:c1:68:e1:f1:af:e9:8d:8f:b8:2e:7b:72:48:0f:
57:16:94:c7:e7:26:6b:02:5d:a8:f1:48:30:af:42:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:62:08:54:3A:F2:CF:26:A5:00:BA:F1:15:79:E9:62:BF:EB:FA
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d6:85:b6:20:c7:a4:9b:63:03:92:e9:14:fc:a7:c7:bf:57:
a9:0d:2a:03:da:d7:70:dc:11:28:c1:55:0c:b9:2e:f9:48:66:
b0:2c:30:ab:44:84:d2:1b:35:a7:6a:27:d7:12:68:75:83:97:
ad:1e:f8:94:21:27:aa:38:16:0d:5a:5c:3d:d0:ed:66:39:08:
d7:38:53:10:77:5c:d5:0e:ef:32:5f:3e:98:a7:90:16:1d:44:
15:47:95:47:e7:e2:18:7b:cb:e6:b6:84:99:43:95:73:f9:97:
29:98:c6:61:dd:f7:f3:e6:85:df:56:65:84:63:ee:79:a8:29:
8b:85:40:93:62:a0:8a:39:60:0a:fe:b3:6a:c4:d7:9c:a4:dc:
c4:1c:0d:93:a9:8c:12:7e:49:21:c2:53:db:25:19:23:ae:6b:
ad:2c:77:65:88:33:7a:43:01:7d:d5:6f:62:a2:77:3b:8e:a9:
19:c2:40:10:5a:5d:fc:7e:77:71:7b:ad:bc:32:24:cf:8c:41:
7b:63:4e:75:cf:fa:19:90:aa:9c:30:a5:e1:32:8a:e5:af:bf:
95:64:d0:3a:67:b8:c4:be:37:31:1a:60:0b:05:83:26:54:ec:
98:72:a0:bf:43:0a:70:42:be:13:00:15:dd:1b:53:e8:50:98:
c3:92:e7:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIrx5i8b/SSuKz5Pf1DBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjYwNTEyMTcwMTE2WhcNMjYwNTEzMTcwMTE2WjAzMTEwLwYDVQQD
Eyg4ZmNhNjIwODU0M2FmMmNmMjZhNTAwYmFmMTE1NzllOTYyYmZlYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFGXy/SrpoKxPmOPcCfJX1qlenOi
6YoC1dI8fwD52Pql71Ba1+/IUq+8JpROfLQqL5zM2kMTtuO9PRynKvsFbI0D5WDs
h+DCDcdc8wl6M8sY/JX2DOGJEc8ez6xEv7BaArZKbraxPtPmSxJyHNBQ+fKG7zfE
E70Djr7Rb2GxGHW6anI+gxc5W8NR7o0TTFxG2lQdZBz0gNbIfx9voI182T/TMfKR
N7l5rXWp7Yr+ZVtohms1pULdJQQO8GRAnAY5gWgWyf/dFYHwcAQq69lWXpR74rlJ
bnLCnEohFzxmHpr3wWjh8a/pjY+4LntySA9XFpTH5yZrAl2o8Ugwr0KohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/KYghUOvLPJqUAuvEVeeliv+v6MB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdaFtiDH
pJtjA5LpFPynx79XqQ0qA9rXcNwRKMFVDLku+UhmsCwwq0SE0hs1p2on1xJodYOX
rR74lCEnqjgWDVpcPdDtZjkI1zhTEHdc1Q7vMl8+mKeQFh1EFUeVR+fiGHvL5raE
mUOVc/mXKZjGYd338+aF31ZlhGPueagpi4VAk2KgijlgCv6zasTXnKTcxBwNk6mM
En5JIcJT2yUZI65rrSx3ZYgzekMBfdVvYqJ3O46pGcJAEFpd/H53cXutvDIkz4xB
e2NOdc/6GZCqnDCl4TKK5a+/lWTQOme4xL43MRpgCwWDJlTsmHKgv0MKcEK+EwAV
3RtT6FCYw5LnWQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:59:46 2026 by rpki-client