Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft (raw, json)
Hash identifier: i4fMy3Qtm7I1ZzFXtuHHCZn4QepC2h0r47/UEUCW5VU=
Subject key identifier: D4:88:41:A6:A3:3A:6F:82:9D:66:F0:4A:0B:62:98:D5:B4:76:97:02
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 019E1D22DDCF0E2C95D73086F3A4D132BD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
Manifest number: 0CF9
Signing time: Tue 12 May 2026 17:01:24 +0000
Manifest this update: Tue 12 May 2026 17:01:24 +0000
Manifest next update: Wed 13 May 2026 17:01:24 +0000
Files and hashes: 1: jbAqNXtEEA5VMmJmYWIDy0wpLeE.roa (hash: heA9ElftnVcEx/Z56cUQXfy2JpdBhi/Gw5ToPa737lc=)
2: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl (hash: jeWO6gE/xtE4fri1YJAuWZtv2IWgRbou+oroONpuNGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:dd:cf:0e:2c:95:d7:30:86:f3:a4:d1:32:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: May 12 17:01:24 2026 GMT
Not After : May 13 17:01:24 2026 GMT
Subject: CN=d48841a6a33a6f829d66f04a0b6298d5b4769702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:91:93:d6:f8:6e:15:64:74:76:5d:1b:86:8e:
f6:7f:ba:fe:93:31:9b:76:de:50:16:0e:5c:47:1f:
47:3d:0d:b4:ff:92:d3:e1:12:1a:7f:5a:25:8b:66:
55:81:a9:bf:ad:9d:c9:98:fd:04:53:c4:de:bb:52:
8e:79:52:21:5e:b6:7d:61:a8:da:31:02:f0:c7:16:
ba:20:28:46:0d:58:2d:19:96:ac:06:04:35:51:ee:
3e:5e:34:69:ba:e0:95:46:20:f8:bd:4f:da:71:12:
94:c6:53:2c:61:ee:87:42:20:52:5d:a5:02:a8:51:
4c:a4:3e:05:5e:c5:09:dc:f1:9d:47:78:00:a4:da:
52:bd:a2:ee:09:4e:1b:75:c7:64:f5:ef:81:b0:23:
9c:07:52:bb:31:c7:a1:b0:56:55:dd:fc:8f:9f:a8:
fd:3d:79:07:76:6c:87:16:de:69:50:6d:f1:88:ba:
8c:3e:b0:d2:cc:ba:23:de:e8:9a:52:91:81:c5:2c:
50:5f:66:5a:57:c6:e1:bf:83:1e:2a:74:f7:7c:ba:
e4:48:1e:99:69:08:31:c2:08:e4:94:95:27:f3:52:
84:86:92:6f:b8:8d:1e:92:1d:7a:be:2a:bb:68:ad:
47:d4:73:df:83:34:d0:4c:31:0e:f9:5f:84:70:19:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:88:41:A6:A3:3A:6F:82:9D:66:F0:4A:0B:62:98:D5:B4:76:97:02
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3e:a5:0d:52:3f:10:62:55:44:99:a4:96:63:4a:df:d4:26:
6b:ed:10:74:87:78:12:36:00:53:06:9d:65:cf:c9:e2:cf:66:
6c:39:09:5a:56:ac:49:c2:3c:95:56:fb:f1:c2:e8:34:3a:5b:
f0:d2:db:5c:ee:7c:11:fb:67:9f:05:9c:e5:45:2c:f9:40:cb:
c5:bf:5f:18:d6:6d:69:23:55:2e:42:66:43:6a:c8:82:26:a2:
cf:f2:5e:33:3c:d0:c8:18:3a:76:df:03:ac:9a:eb:87:40:c1:
d4:c4:5d:6a:a2:c4:b3:d9:b4:fa:18:52:ad:9c:79:e2:b0:2c:
8a:d5:55:b3:00:8b:a6:a2:15:fc:04:8b:23:ad:ab:0c:80:b5:
83:5d:a1:a4:7d:8d:29:0a:22:d8:33:f9:b3:71:32:9e:0b:7e:
4f:bf:f2:60:10:e9:a5:d5:ba:d5:8c:ee:4a:40:5a:5e:bd:0f:
ac:93:dd:c5:d8:4e:fc:28:d0:ff:1c:2d:63:78:db:d3:a8:c5:
45:66:da:92:10:24:54:ae:af:0c:23:ea:08:7e:ab:1e:f9:ec:
55:9a:1e:60:62:2f:e1:08:9e:d9:12:5e:78:57:b1:03:b7:f1:
3d:3d:cc:7b:fa:63:b7:ba:e7:8f:ee:66:88:9d:4f:82:1c:12:
37:7d:7c:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIt3PDiyV1zCG86TRMr08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NDc4OTNmYjViMzQ4ZTY4YTY2ZDU1YTI4ZjI3OGNiZjM5
MzFkZjQwHhcNMjYwNTEyMTcwMTI0WhcNMjYwNTEzMTcwMTI0WjAzMTEwLwYDVQQD
EyhkNDg4NDFhNmEzM2E2ZjgyOWQ2NmYwNGEwYjYyOThkNWI0NzY5NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZGT1vhuFWR0dl0bho72f7r+kzGb
dt5QFg5cRx9HPQ20/5LT4RIaf1oli2ZVgam/rZ3JmP0EU8Teu1KOeVIhXrZ9Yaja
MQLwxxa6IChGDVgtGZasBgQ1Ue4+XjRpuuCVRiD4vU/acRKUxlMsYe6HQiBSXaUC
qFFMpD4FXsUJ3PGdR3gApNpSvaLuCU4bdcdk9e+BsCOcB1K7McehsFZV3fyPn6j9
PXkHdmyHFt5pUG3xiLqMPrDSzLoj3uiaUpGBxSxQX2ZaV8bhv4MeKnT3fLrkSB6Z
aQgxwgjklJUn81KEhpJvuI0ekh16viq7aK1H1HPfgzTQTDEO+V+EcBkY7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSIQaajOm+CnWbwSgtimNW0dpcCMB8GA1UdIwQY
MBaAFKZHiT+1s0jmimbVWijyeMvzkx30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDIt
ZDYyNDQ5NmRkY2M4LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kYThjYjEtMWJmYy00M2ZkLWEwZDItZDYyNDQ5NmRkY2M4
LzEvcGtlSlA3V3pTT2FLWnRWYUtQSjR5X09USGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhD6lDVI/
EGJVRJmklmNK39Qma+0QdId4EjYAUwadZc/J4s9mbDkJWlasScI8lVb78cLoNDpb
8NLbXO58EftnnwWc5UUs+UDLxb9fGNZtaSNVLkJmQ2rIgiaiz/JeMzzQyBg6dt8D
rJrrh0DB1MRdaqLEs9m0+hhSrZx54rAsitVVswCLpqIV/ASLI62rDIC1g12hpH2N
KQoi2DP5s3Eyngt+T7/yYBDppdW61YzuSkBaXr0PrJPdxdhO/CjQ/xwtY3jb06jF
RWbakhAkVK6vDCPqCH6rHvnsVZoeYGIv4Qie2RJeeFexA7fxPT3Me/pjt7rnj+5m
iJ1PghwSN318Ow==
-----END CERTIFICATE-----
Generated at Wed May 13 02:29:33 2026 by rpki-client