Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier: IDBoIU0TvYRnxNRDtraAf0TM+/YQehQBbSzNY9bJ2i8=
Subject key identifier: E4:2F:C4:1C:A6:DF:02:85:AB:4F:42:CF:77:41:04:49:EB:3C:71:0F
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer: /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial: 019E1CEBCE8F7008228F101817A658AB7FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number: 0FDC
Signing time: Tue 12 May 2026 16:01:16 +0000
Manifest this update: Tue 12 May 2026 16:01:16 +0000
Manifest next update: Wed 13 May 2026 16:01:16 +0000
Files and hashes: 1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: 1Tb5Yy/eMtuIIFgNmXaqnXw+liSNASlX/NQF9bDrPB8=)
2: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (hash: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ce:8f:70:08:22:8f:10:18:17:a6:58:ab:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
Validity
Not Before: May 12 16:01:16 2026 GMT
Not After : May 13 16:01:16 2026 GMT
Subject: CN=e42fc41ca6df0285ab4f42cf77410449eb3c710f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:0d:c7:ea:ac:b6:0a:36:96:9f:b5:f9:ac:
15:0f:d4:30:86:76:59:44:b5:69:98:99:e7:7d:98:
21:09:8d:08:d6:52:f5:2b:d3:01:40:75:46:19:84:
50:89:55:c9:9c:24:f3:14:ed:f6:d7:5f:3d:44:c9:
af:5f:60:31:f3:3b:cc:ef:d0:0c:48:ce:65:f7:fd:
4b:2a:6b:a6:47:f6:c8:bd:65:3c:5a:eb:f6:d6:8c:
03:5e:29:c1:5e:23:44:51:6c:88:52:45:ad:f2:f6:
d1:ee:36:78:11:78:7e:40:a0:4f:34:00:44:a8:c5:
07:15:14:20:a8:39:c6:5e:ef:38:cd:2e:c4:01:ad:
99:36:6a:f8:ce:17:63:1a:48:98:c1:25:83:6e:e5:
bd:75:8b:22:39:7f:25:c2:79:76:53:a5:b7:47:6a:
8d:27:e5:a6:ec:98:f8:1e:4c:5d:20:6c:24:bd:95:
e8:10:58:04:14:a8:1c:84:f0:53:a3:4a:d2:1e:8e:
a7:34:6a:d7:d8:66:8e:b2:5c:33:81:78:a3:b3:f0:
98:59:fd:c9:93:f8:4d:cc:85:38:2a:b0:77:2c:b4:
0c:3f:61:46:48:ed:27:02:35:d7:c9:ae:5c:1b:ec:
62:e8:5b:4f:f2:e0:95:ce:63:46:e7:e8:e6:e4:ea:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:C4:1C:A6:DF:02:85:AB:4F:42:CF:77:41:04:49:EB:3C:71:0F
X509v3 Authority Key Identifier:
keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:91:6b:aa:fa:be:41:ef:54:0d:e9:9e:3e:5b:90:33:bf:9d:
f3:81:d6:88:73:04:13:21:5e:9b:96:02:ed:41:0c:d9:4e:01:
ff:4c:b8:a5:70:34:62:ec:0d:97:b8:4b:b5:8c:be:f2:7d:00:
89:4b:f4:8a:d0:07:39:df:e9:8f:9c:48:0b:81:22:7d:52:a0:
94:e8:ef:0f:c9:6e:95:7c:4c:8d:ba:59:6e:16:e1:a0:46:3e:
c3:c4:31:fc:ba:e2:4a:fb:b5:81:13:3a:76:a7:95:04:b2:f9:
cb:49:15:a9:63:15:e7:ad:de:78:b1:37:f9:35:ab:da:b2:41:
48:06:ac:98:6d:a1:2d:77:de:30:f9:fb:d8:34:08:72:ab:47:
62:48:7b:f5:79:1a:fa:3c:c5:ce:79:ec:c5:89:6a:d8:e3:6a:
35:d5:85:aa:0c:ba:de:cc:6c:50:f6:70:fe:81:a6:c0:bb:56:
b6:aa:53:4d:63:13:78:c8:16:06:0d:7a:d7:d3:2a:09:c4:60:
1f:59:d8:cb:61:2f:88:23:36:f6:d1:c8:ee:ed:ad:f6:22:5c:
7f:b6:b9:4e:b3:cc:27:b8:d9:d6:b2:60:44:7b:b0:96:99:79:
8c:e2:39:8b:b3:17:e4:bd:e3:57:d4:1b:09:93:a2:8f:18:9c:
32:b9:90:64
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4c686PcAgijxAYF6ZYq3/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDkyMzIzZDIyYjQ0Mjc1ZGNlY2Q0ZGUyOTViNDQ3OTQ2
MjNlOTIwHhcNMjYwNTEyMTYwMTE2WhcNMjYwNTEzMTYwMTE2WjAzMTEwLwYDVQQD
EyhlNDJmYzQxY2E2ZGYwMjg1YWI0ZjQyY2Y3NzQxMDQ0OWViM2M3MTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1wNx+qstgo2lp+1+awVD9QwhnZZ
RLVpmJnnfZghCY0I1lL1K9MBQHVGGYRQiVXJnCTzFO321189RMmvX2Ax8zvM79AM
SM5l9/1LKmumR/bIvWU8Wuv21owDXinBXiNEUWyIUkWt8vbR7jZ4EXh+QKBPNABE
qMUHFRQgqDnGXu84zS7EAa2ZNmr4zhdjGkiYwSWDbuW9dYsiOX8lwnl2U6W3R2qN
J+Wm7Jj4HkxdIGwkvZXoEFgEFKgchPBTo0rSHo6nNGrX2GaOslwzgXijs/CYWf3J
k/hNzIU4KrB3LLQMP2FGSO0nAjXXya5cG+xi6FtP8uCVzmNG5+jm5OqAbQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOQvxBym3wKFq09Cz3dBBEnrPHEPMB8GA1UdIwQY
MBaAFPrZIyPSK0QnXc7NTeKVtEeUYj6SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10a2pJOUlyUkNkZHpzMU40cFcwUjVSaVBwSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNDlmM2FkLWVmOWUtNGZjNC05NWM0
LTRmMzcwMTFlZTU4MS8xLzEtdGtqSTlJclJDZGR6czFONHBXMFI1UmlQcEkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzgzLzQ5ZjNhZC1lZjllLTRmYzQtOTVjNC00ZjM3MDExZWU1
ODEvMS8xLXRrakk5SXJSQ2RkenMxTjRwVzBSNVJpUHBJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpFr
qvq+Qe9UDemePluQM7+d84HWiHMEEyFem5YC7UEM2U4B/0y4pXA0YuwNl7hLtYy+
8n0AiUv0itAHOd/pj5xIC4EifVKglOjvD8lulXxMjbpZbhbhoEY+w8Qx/LriSvu1
gRM6dqeVBLL5y0kVqWMV563eeLE3+TWr2rJBSAasmG2hLXfeMPn72DQIcqtHYkh7
9Xka+jzFznnsxYlq2ONqNdWFqgy63sxsUPZw/oGmwLtWtqpTTWMTeMgWBg1619Mq
CcRgH1nYy2EviCM29tHI7u2t9iJcf7a5TrPMJ7jZ1rJgRHuwlpl5jOI5i7MX5L3j
V9QbCZOijxicMrmQZA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:43:19 2026 by rpki-client