Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: EcaQPCupt+9bu5ATNooSNvPlfChQTxiLJ9GCAWjKsnw=
Subject key identifier: 8B:26:F5:68:9D:13:77:F9:B2:C8:2E:D4:A3:00:BA:14:BE:43:05:13
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 019E1CB44FDDC3179A45EA1E3923CB71CA1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 0CB5
Signing time: Tue 12 May 2026 15:00:39 +0000
Manifest this update: Tue 12 May 2026 15:00:39 +0000
Manifest next update: Wed 13 May 2026 15:00:39 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: hTzkydqEx5XGEgD2uHCt1DT4FVHh52XHUpLYL778Llc=)
2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:4f:dd:c3:17:9a:45:ea:1e:39:23:cb:71:ca:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: May 12 15:00:39 2026 GMT
Not After : May 13 15:00:39 2026 GMT
Subject: CN=8b26f5689d1377f9b2c82ed4a300ba14be430513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:01:3f:60:91:8a:3a:bb:8e:d9:02:9b:30:
c8:c3:7c:6d:68:d3:61:08:7f:ce:c8:63:7c:ef:11:
79:3d:85:33:4b:cf:9f:19:34:8d:f1:62:86:b2:24:
9b:97:0c:6a:6e:cc:62:04:8c:2e:80:a5:9a:77:86:
5a:b3:e8:01:81:ab:6a:50:f4:c7:8a:7b:b5:71:ca:
cb:96:0b:cd:46:13:b6:fe:bb:f9:c5:c6:cc:19:0a:
06:12:35:4c:92:f5:42:96:ed:5f:99:2d:8d:03:90:
8a:78:5a:99:cf:fc:95:f4:2a:66:28:05:6c:e1:d5:
a4:a9:44:4a:da:a3:ef:9d:f2:dc:3a:ed:33:19:18:
2a:6e:74:76:43:9f:14:0f:f5:3b:6e:13:6a:d9:33:
1d:95:66:65:8d:87:dd:47:54:a0:ef:8a:75:4c:c4:
65:63:38:d3:fa:f6:30:8b:86:89:70:3a:4a:89:b0:
19:70:41:16:93:32:80:9c:2f:ef:fb:53:25:7b:48:
2e:6a:97:58:12:03:e9:2a:48:a2:7e:a5:b2:cd:35:
bf:e4:42:ef:e3:aa:1a:c6:29:1a:3f:d2:73:fe:79:
70:e3:28:c5:72:2e:27:41:fb:11:5b:74:c1:a3:80:
32:5e:1c:3e:65:e8:69:a6:06:09:a2:44:ae:73:54:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:26:F5:68:9D:13:77:F9:B2:C8:2E:D4:A3:00:BA:14:BE:43:05:13
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5e:ec:62:94:ee:79:1d:49:65:50:6c:32:1f:00:61:a4:1a:
e1:92:0a:01:2a:cc:b0:3e:f8:bb:11:b0:59:59:6c:e9:84:7e:
9e:7f:a9:5d:0b:02:82:e8:c9:b5:7a:01:f3:1b:99:bd:7e:81:
68:e7:d7:96:d2:54:39:25:79:14:5a:e3:1c:36:46:0b:d9:9f:
fe:ae:c1:62:3b:ce:62:ab:22:59:e5:37:64:18:88:5c:1e:99:
ac:85:06:92:96:88:15:37:22:b7:94:2b:3e:99:e5:e3:03:02:
a1:ba:0b:1b:a9:e6:3a:32:30:36:ee:de:85:fe:ea:b4:a4:90:
7b:2f:4d:b4:0f:43:fb:20:8c:18:2e:52:7e:f4:62:dd:b9:85:
71:5b:db:17:d9:d5:ed:ff:6b:f4:1b:d5:55:26:ee:31:10:9a:
eb:73:df:9b:46:f8:e8:bc:6b:a0:ef:3e:ad:2f:21:a3:68:d1:
26:65:30:e8:8b:09:eb:0a:d8:03:7d:7b:0f:31:6d:bd:35:ff:
fa:7f:a0:40:03:76:09:74:b8:6b:74:5a:74:e3:81:2a:97:48:
8f:02:e1:ce:17:77:b5:5e:3e:a8:b5:b4:44:85:52:9d:6a:2e:
93:a3:75:a3:6f:60:ed:36:d7:2c:3a:e3:59:dc:d4:80:6e:4d:
f8:9c:d5:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctE/dwxeaReoeOSPLccoeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm
YjliMDUwHhcNMjYwNTEyMTUwMDM5WhcNMjYwNTEzMTUwMDM5WjAzMTEwLwYDVQQD
Eyg4YjI2ZjU2ODlkMTM3N2Y5YjJjODJlZDRhMzAwYmExNGJlNDMwNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr4BP2CRijq7jtkCmzDIw3xtaNNh
CH/OyGN87xF5PYUzS8+fGTSN8WKGsiSblwxqbsxiBIwugKWad4Zas+gBgatqUPTH
inu1ccrLlgvNRhO2/rv5xcbMGQoGEjVMkvVClu1fmS2NA5CKeFqZz/yV9CpmKAVs
4dWkqURK2qPvnfLcOu0zGRgqbnR2Q58UD/U7bhNq2TMdlWZljYfdR1Sg74p1TMRl
YzjT+vYwi4aJcDpKibAZcEEWkzKAnC/v+1Mle0guapdYEgPpKkiifqWyzTW/5ELv
46oaxikaP9Jz/nlw4yjFci4nQfsRW3TBo4AyXhw+ZehppgYJokSuc1TQHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsm9WidE3f5ssgu1KMAuhS+QwUTMB8GA1UdIwQY
MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt
NzNiZmFkODMyZDJkLzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk
LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApF7sYpTu
eR1JZVBsMh8AYaQa4ZIKASrMsD74uxGwWVls6YR+nn+pXQsCgujJtXoB8xuZvX6B
aOfXltJUOSV5FFrjHDZGC9mf/q7BYjvOYqsiWeU3ZBiIXB6ZrIUGkpaIFTcit5Qr
Ppnl4wMCoboLG6nmOjIwNu7ehf7qtKSQey9NtA9D+yCMGC5SfvRi3bmFcVvbF9nV
7f9r9BvVVSbuMRCa63Pfm0b46LxroO8+rS8ho2jRJmUw6IsJ6wrYA317DzFtvTX/
+n+gQAN2CXS4a3RadOOBKpdIjwLhzhd3tV4+qLW0RIVSnWouk6N1o29g7TbXLDrj
WdzUgG5N+JzVcw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:24:02 2026 by rpki-client