Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier: lS+2Uk0YsnFPQT85KZwgJGt5U4alTR8mfT04UrmYgig=
Subject key identifier: 86:08:40:18:D6:EF:F8:29:9E:BF:17:79:5A:AD:B9:8E:23:FC:F5:B5
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer: /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial: 019E1CEC09519E921E454A2BB24858908CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number: 1841
Signing time: Tue 12 May 2026 16:01:31 +0000
Manifest this update: Tue 12 May 2026 16:01:31 +0000
Manifest next update: Wed 13 May 2026 16:01:31 +0000
Files and hashes: 1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: daDEvgqXsW3k5lYTGH0NSb6WtosnQA9l6E/FpUDIZTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:09:51:9e:92:1e:45:4a:2b:b2:48:58:90:8c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Validity
Not Before: May 12 16:01:31 2026 GMT
Not After : May 13 16:01:31 2026 GMT
Subject: CN=86084018d6eff8299ebf17795aadb98e23fcf5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e4:25:4f:89:65:bf:bd:fe:c6:36:ac:90:81:
73:11:a1:77:00:f8:28:3b:9d:39:57:04:fb:ec:bd:
98:6c:ad:c2:a7:35:db:3c:b2:53:04:33:af:c3:57:
55:e4:16:ae:84:9a:48:f2:27:9e:5c:e0:2d:cf:31:
43:6e:cb:73:19:4c:ef:84:41:df:9c:af:6e:9d:06:
8d:16:ab:86:8f:5d:bb:ca:db:d6:9d:b3:49:de:2b:
be:24:31:1e:ae:42:a2:a0:c9:0a:93:10:c7:41:cc:
8e:c3:91:d3:da:43:8a:90:bd:ef:87:e3:2e:e2:c9:
6c:74:2f:a2:39:17:56:8f:22:ce:d8:ee:d8:20:e8:
63:5f:97:f8:fc:1c:47:1f:47:a2:6e:1d:53:a7:e3:
b8:01:e9:4f:3d:14:13:d0:23:ab:cd:92:5a:bf:1f:
ab:e8:6d:d3:07:51:99:74:2d:bc:20:ab:95:ee:78:
87:8a:4d:8f:73:f5:45:9d:0a:e0:d0:96:0a:64:aa:
60:44:a9:ef:e8:d0:79:b1:25:50:4f:67:e1:03:f5:
58:0b:75:12:50:30:ff:22:4e:c8:78:d2:95:21:2f:
45:cb:6f:26:d1:06:98:03:70:f6:68:20:e6:f0:61:
44:8e:d3:3f:6b:f1:b4:d4:a0:52:5d:51:f5:ec:ed:
26:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:40:18:D6:EF:F8:29:9E:BF:17:79:5A:AD:B9:8E:23:FC:F5:B5
X509v3 Authority Key Identifier:
keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:01:3d:c3:e5:e3:88:07:4b:da:2f:98:79:f9:8b:f6:3b:f0:
fa:ea:fc:20:4a:82:a3:fb:b5:37:69:d8:30:fe:f7:f5:04:73:
d7:41:2d:72:ee:95:ad:80:e5:c1:63:e6:25:10:9c:fb:5c:45:
b4:ae:ef:b1:2f:1c:a7:42:13:ad:85:eb:54:34:3e:36:01:c0:
92:9d:96:2a:77:cf:ac:bf:70:54:53:5d:33:a4:a4:ba:33:8b:
64:2e:b6:12:0a:cb:71:48:9c:b6:c2:53:fa:ea:7d:a2:8f:f3:
30:ea:c5:6a:4f:77:f5:e6:c6:2e:13:50:6a:02:22:90:cc:68:
93:eb:25:7b:04:76:08:a3:c6:ab:9b:31:0c:19:f3:78:72:65:
95:35:9f:ad:c0:20:c7:bd:d8:65:97:59:32:63:2e:19:14:3c:
94:cb:29:a1:e3:d4:be:ce:c3:78:0d:0d:ba:a6:13:7f:19:25:
06:f9:f8:9e:47:07:9c:70:e0:67:d0:24:85:bb:84:3e:89:a2:
12:28:91:a2:5b:5e:43:a4:cf:a1:8c:91:2b:b2:eb:3c:2d:53:
70:fb:55:5d:79:c5:a9:dc:b4:bb:96:57:a1:19:6b:56:ed:03:
95:69:57:8f:f4:f5:a5:c0:d4:42:88:14:df:3f:24:cd:07:14:
00:1d:64:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c7AlRnpIeRUorskhYkIzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGJkNGQ1NjgyY2U2MDhlMjdjYmUyMjFhMjY3N2VjYjUw
NzQ5N2QwHhcNMjYwNTEyMTYwMTMxWhcNMjYwNTEzMTYwMTMxWjAzMTEwLwYDVQQD
Eyg4NjA4NDAxOGQ2ZWZmODI5OWViZjE3Nzk1YWFkYjk4ZTIzZmNmNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OQlT4llv73+xjaskIFzEaF3APgo
O505VwT77L2YbK3CpzXbPLJTBDOvw1dV5BauhJpI8ieeXOAtzzFDbstzGUzvhEHf
nK9unQaNFquGj127ytvWnbNJ3iu+JDEerkKioMkKkxDHQcyOw5HT2kOKkL3vh+Mu
4slsdC+iORdWjyLO2O7YIOhjX5f4/BxHH0eibh1Tp+O4AelPPRQT0COrzZJavx+r
6G3TB1GZdC28IKuV7niHik2Pc/VFnQrg0JYKZKpgRKnv6NB5sSVQT2fhA/VYC3US
UDD/Ik7IeNKVIS9Fy28m0QaYA3D2aCDm8GFEjtM/a/G01KBSXVH17O0moQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYIQBjW7/gpnr8XeVqtuY4j/PW1MB8GA1UdIwQY
MBaAFNAL1NVoLOYI4ny+Ihomd+y1B0l9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2Qt
ZWI5MzAwNjcyYWU0LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8yOTk1MjItOTMyYy00ODdhLWFmM2QtZWI5MzAwNjcyYWU0
LzEvMEF2VTFXZ3M1Z2ppZkw0aUdpWjM3TFVIU1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQE9w+Xj
iAdL2i+YefmL9jvw+ur8IEqCo/u1N2nYMP739QRz10Etcu6VrYDlwWPmJRCc+1xF
tK7vsS8cp0ITrYXrVDQ+NgHAkp2WKnfPrL9wVFNdM6SkujOLZC62EgrLcUictsJT
+up9oo/zMOrFak939ebGLhNQagIikMxok+slewR2CKPGq5sxDBnzeHJllTWfrcAg
x73YZZdZMmMuGRQ8lMspoePUvs7DeA0NuqYTfxklBvn4nkcHnHDgZ9AkhbuEPomi
EiiRolteQ6TPoYyRK7LrPC1TcPtVXXnFqdy0u5ZXoRlrVu0DlWlXj/T1pcDUQogU
3z8kzQcUAB1kPw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:24:08 2026 by rpki-client