Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
File: vI6RiHZmXLWDii99KNdHYRM5bvQ.mft (raw, json)
Hash identifier: kPrKqHTrHY7dcVX6FYC4kot743LEEEvpLQMHYHZfLXs=
Subject key identifier: C4:B5:76:AC:F5:8A:12:66:EF:28:2F:14:22:66:D4:07:10:07:44:C2
Authority key identifier: BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
Certificate issuer: /CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Certificate serial: 019E1EA345FC020397A95BAB2CFFB385450E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
Manifest number: DB
Signing time: Wed 13 May 2026 00:01:17 +0000
Manifest this update: Wed 13 May 2026 00:01:17 +0000
Manifest next update: Thu 14 May 2026 00:01:17 +0000
Files and hashes: 1: WvZUTqnUJrfxPwj7etIyxS5XtG0.roa (hash: tjBBu94qUSlvnCT5HDdgFpmfyKhqmKvNYxBumfbCE8U=)
2: vI6RiHZmXLWDii99KNdHYRM5bvQ.crl (hash: MBBnu/6rTpoNaRgRfJd97YZNbhYb0yrYtMhHso7OfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:45:fc:02:03:97:a9:5b:ab:2c:ff:b3:85:45:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Validity
Not Before: May 13 00:01:17 2026 GMT
Not After : May 14 00:01:17 2026 GMT
Subject: CN=c4b576acf58a1266ef282f142266d407100744c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:90:79:b8:40:49:52:f4:25:11:a2:c0:25:
58:d8:cc:c5:de:b6:e6:28:04:14:eb:13:13:9d:d1:
92:7c:78:7d:55:3e:b9:15:45:20:39:f0:73:55:87:
c6:06:e2:b8:44:dc:18:33:ab:f7:55:6f:d8:42:43:
b6:f4:9d:1e:02:80:c7:11:e9:d8:a8:d4:e2:6e:d2:
f8:39:89:d1:9e:d7:cc:34:58:23:5a:98:10:0d:3e:
24:af:33:ec:44:74:b0:31:bd:21:a4:9d:30:70:d1:
24:74:50:f4:77:55:dc:26:5d:83:ee:a2:40:46:0a:
c5:2e:f9:84:ec:83:bc:0e:da:e1:05:1b:3c:f1:2b:
03:8f:ee:78:39:84:ea:7f:6d:bf:a0:60:64:3a:4c:
73:42:72:e0:50:36:88:7f:64:49:f4:12:c7:ed:ef:
d5:6e:85:0d:68:8a:16:1d:83:c0:d3:db:db:95:dc:
af:03:a1:c2:9f:4c:67:23:a1:cb:0f:be:97:55:ea:
cb:14:a9:b1:db:9c:32:f2:c1:a9:6b:b8:bf:35:f3:
43:20:e2:a4:94:cc:bb:47:03:8b:be:e8:8a:d0:31:
c3:fc:49:0a:b7:95:e5:b1:5b:4b:0f:de:b4:40:1d:
26:8b:0d:3e:5b:b7:e9:bc:f1:d1:4f:36:4c:e1:eb:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:76:AC:F5:8A:12:66:EF:28:2F:14:22:66:D4:07:10:07:44:C2
X509v3 Authority Key Identifier:
keyid:BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a4:1c:e9:ae:b5:0f:89:7b:ce:a0:83:cb:b4:d7:4c:eb:a5:
51:2c:d3:a7:cb:96:ce:66:36:17:ba:46:54:4f:a9:ec:66:f6:
16:17:9b:e0:b8:dd:f5:52:0d:36:f7:44:5b:e3:0e:dd:4d:71:
d5:95:ae:d0:ad:ac:58:11:0f:ec:6f:11:49:39:8c:82:40:47:
d7:43:d3:84:78:5b:fa:d1:ca:3d:9c:a6:d7:70:36:f1:30:fc:
fc:84:2f:42:ae:5f:03:30:46:5d:cf:ea:cc:db:de:e0:86:1b:
c2:d1:e4:57:f4:31:a8:33:74:ad:a7:f0:6a:d5:54:e5:bb:78:
d4:17:57:bd:72:91:20:77:53:7d:04:18:79:e4:fc:5f:85:77:
6d:a8:dd:ab:79:c4:9a:a4:8d:21:52:75:fc:87:51:56:f0:ee:
be:78:6e:b9:8f:81:46:e2:86:8b:87:bb:b3:0f:e8:23:ae:53:
60:08:d1:c5:53:c6:72:23:4e:e8:9e:fb:50:26:4e:04:51:81:
9e:cc:fa:62:68:28:7c:65:38:7a:16:84:cb:61:f5:df:71:18:
8e:ae:58:ca:30:d9:35:62:cc:26:89:17:67:08:14:63:cb:76:
9e:9c:43:6a:db:91:df:bb:fd:8e:41:39:b8:32:41:c4:98:22:
a7:c3:37:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo0X8AgOXqVurLP+zhUUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGU5MTg4NzY2NjVjYjU4MzhhMmY3ZDI4ZDc0NzYxMTMz
OTZlZjQwHhcNMjYwNTEzMDAwMTE3WhcNMjYwNTE0MDAwMTE3WjAzMTEwLwYDVQQD
EyhjNGI1NzZhY2Y1OGExMjY2ZWYyODJmMTQyMjY2ZDQwNzEwMDc0NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPSQebhASVL0JRGiwCVY2MzF3rbm
KAQU6xMTndGSfHh9VT65FUUgOfBzVYfGBuK4RNwYM6v3VW/YQkO29J0eAoDHEenY
qNTibtL4OYnRntfMNFgjWpgQDT4krzPsRHSwMb0hpJ0wcNEkdFD0d1XcJl2D7qJA
RgrFLvmE7IO8DtrhBRs88SsDj+54OYTqf22/oGBkOkxzQnLgUDaIf2RJ9BLH7e/V
boUNaIoWHYPA09vbldyvA6HCn0xnI6HLD76XVerLFKmx25wy8sGpa7i/NfNDIOKk
lMy7RwOLvuiK0DHD/EkKt5XlsVtLD960QB0miw0+W7fpvPHRTzZM4ethvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS1dqz1ihJm7ygvFCJm1AcQB0TCMB8GA1UdIwQY
MBaAFLyOkYh2Zly1g4ovfSjXR2ETOW70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkk2UmlIWm1YTFdEaWk5OUtOZEhZUk01YnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt
Yzk4YTFiZGU2NDc2LzEvdkk2UmlIWm1YTFdEaWk5OUtOZEhZUk01YnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2
LzEvdkk2UmlIWm1YTFdEaWk5OUtOZEhZUk01YnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKQc6a61
D4l7zqCDy7TXTOulUSzTp8uWzmY2F7pGVE+p7Gb2Fheb4Ljd9VINNvdEW+MO3U1x
1ZWu0K2sWBEP7G8RSTmMgkBH10PThHhb+tHKPZym13A28TD8/IQvQq5fAzBGXc/q
zNve4IYbwtHkV/QxqDN0rafwatVU5bt41BdXvXKRIHdTfQQYeeT8X4V3bajdq3nE
mqSNIVJ1/IdRVvDuvnhuuY+BRuKGi4e7sw/oI65TYAjRxVPGciNO6J77UCZOBFGB
nsz6YmgofGU4ehaEy2H133EYjq5YyjDZNWLMJokXZwgUY8t2npxDatuR37v9jkE5
uDJBxJgip8M32g==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:20 2026 by rpki-client