Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: /r1DEJXYUvw5SPNwKxh3RgK7s0+zSMjYBNz0dWb0TPI=
Subject key identifier: 29:5C:A0:9C:B6:7C:10:FD:CB:0C:8B:3D:52:9B:3C:46:C2:F7:E1:52
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019E1EA362D47E59CA29D27B7E93A9A94DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: t24DKBSkq6XXz7mlDk7fB5JT7XkDeDL3xe1wB2Eo8OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:62:d4:7e:59:ca:29:d2:7b:7e:93:a9:a9:4d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=295ca09cb67c10fdcb0c8b3d529b3c46c2f7e152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:17:33:ad:e7:9a:5c:84:da:35:4b:5f:8c:
34:6e:00:58:15:fa:36:a6:a4:f6:ce:b4:44:e8:1a:
a1:4b:f3:5f:88:7f:3a:cc:86:bf:61:dc:76:0c:a1:
48:bd:6c:2b:ef:dc:ea:a9:e9:6e:05:fe:bf:d7:1f:
1b:6d:5e:6c:de:4a:f7:7e:ac:f0:f0:c1:9e:d9:c9:
28:91:87:27:ee:b7:fb:18:36:2f:eb:46:a9:8f:41:
dc:52:f9:40:22:9a:46:d8:96:ab:ec:73:1b:2f:a3:
24:63:7c:18:25:ff:8c:13:42:2c:80:1d:7b:18:bd:
e1:35:38:80:51:9b:21:76:57:e2:2c:11:58:d4:ce:
bc:70:da:58:b7:c4:5d:be:18:6c:32:ea:a8:13:aa:
e2:cf:30:8b:0d:93:e4:bc:25:0c:b3:c3:49:a3:f0:
e8:f6:2a:30:67:b0:c6:d1:0a:97:42:da:e1:0e:71:
dd:ae:48:59:4e:bf:da:29:93:9b:b1:ed:99:05:5c:
73:03:13:b2:36:5d:3b:81:d6:37:1a:7e:45:0c:d7:
a3:9b:2f:b5:97:09:ca:6b:ee:03:82:4e:25:ec:ed:
18:c2:32:7e:c4:07:16:d3:44:56:ea:ec:4a:de:e2:
91:aa:61:40:e1:c4:81:ea:e9:03:80:78:36:41:e8:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:A0:9C:B6:7C:10:FD:CB:0C:8B:3D:52:9B:3C:46:C2:F7:E1:52
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:80:74:c4:01:cc:d1:0a:25:34:32:fc:1d:64:73:7e:2b:
db:15:27:bd:0e:95:12:fe:7a:96:59:54:39:bf:6f:c2:40:d0:
18:ba:77:cf:9c:b6:a8:17:29:21:a1:8f:d6:bc:0c:1a:60:29:
29:4f:43:9b:6e:22:d6:0e:c4:8d:b0:b1:24:94:37:3a:56:56:
c3:7d:27:da:0d:1c:d9:12:e8:8b:3b:81:bb:54:e0:8c:b3:df:
28:29:a8:b4:e9:ee:b7:7d:84:2b:35:eb:fe:cf:3e:15:50:af:
74:36:8e:31:09:66:69:61:c4:fb:d7:9b:0f:08:19:ad:34:5e:
f6:5c:ea:b9:75:b4:63:94:97:cd:a7:8b:2b:9b:01:47:70:c3:
90:a8:3f:8c:d1:22:fb:8a:77:7e:bd:eb:93:6d:c8:e5:5b:44:
54:de:5c:bc:61:bd:1e:bc:b8:57:48:5d:8c:ef:d2:4e:f9:12:
bb:eb:ac:ed:02:1d:7a:c0:61:7f:a9:f0:df:56:2c:12:32:76:
b9:1e:e3:b1:d9:25:9f:51:70:a7:66:74:f9:4c:4e:4c:71:51:
43:39:4c:d1:88:eb:5d:e8:6b:c2:ca:be:9e:99:a3:ff:31:f1:
e2:bf:a8:0b:46:de:05:b0:31:e1:64:15:ad:48:a2:9c:d6:40:
d1:43:fb:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo2LUflnKKdJ7fpOpqU3kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1
NjVhODEwHhcNMjYwNTEzMDAwMTI0WhcNMjYwNTE0MDAwMTI0WjAzMTEwLwYDVQQD
EygyOTVjYTA5Y2I2N2MxMGZkY2IwYzhiM2Q1MjliM2M0NmMyZjdlMTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5EXM63nmlyE2jVLX4w0bgBYFfo2
pqT2zrRE6BqhS/NfiH86zIa/Ydx2DKFIvWwr79zqqeluBf6/1x8bbV5s3kr3fqzw
8MGe2ckokYcn7rf7GDYv60apj0HcUvlAIppG2Jar7HMbL6MkY3wYJf+ME0IsgB17
GL3hNTiAUZshdlfiLBFY1M68cNpYt8RdvhhsMuqoE6rizzCLDZPkvCUMs8NJo/Do
9iowZ7DG0QqXQtrhDnHdrkhZTr/aKZObse2ZBVxzAxOyNl07gdY3Gn5FDNejmy+1
lwnKa+4Dgk4l7O0YwjJ+xAcW00RW6uxK3uKRqmFA4cSB6ukDgHg2QejlgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClcoJy2fBD9ywyLPVKbPEbC9+FSMB8GA1UdIwQY
MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt
MTVlYTMzN2E3ODQwLzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw
LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSSAdMQB
zNEKJTQy/B1kc34r2xUnvQ6VEv56lllUOb9vwkDQGLp3z5y2qBcpIaGP1rwMGmAp
KU9Dm24i1g7EjbCxJJQ3OlZWw30n2g0c2RLoizuBu1TgjLPfKCmotOnut32EKzXr
/s8+FVCvdDaOMQlmaWHE+9ebDwgZrTRe9lzquXW0Y5SXzaeLK5sBR3DDkKg/jNEi
+4p3fr3rk23I5VtEVN5cvGG9Hry4V0hdjO/STvkSu+us7QIdesBhf6nw31YsEjJ2
uR7jsdkln1Fwp2Z0+UxOTHFRQzlM0YjrXehrwsq+npmj/zHx4r+oC0beBbAx4WQV
rUiinNZA0UP79w==
-----END CERTIFICATE-----
Generated at Wed May 13 10:15:05 2026 by rpki-client