Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: HlOkljrdhlE2jgarFctMVtA00//mBlnAYm7MqhY53a4=
Subject key identifier: CA:48:10:08:AA:72:52:F5:BE:71:CC:A6:EE:ED:07:CF:12:7C:95:54
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 019E1CEB7BE3C570357DAE397B4B27FF6821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 05FC
Signing time: Tue 12 May 2026 16:00:55 +0000
Manifest this update: Tue 12 May 2026 16:00:55 +0000
Manifest next update: Wed 13 May 2026 16:00:55 +0000
Files and hashes: 1: NwXP9XjEV_tAQNFwDQBmSN78alU.roa (hash: I0Ts9gFxat3bJUV/IHoujUultkWM8WN3TtuoR0WHIVg=)
2: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: 2sQgMuA1bXDL4z3fNHUtNbkmQ0QPframdnUYKTcRgrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:7b:e3:c5:70:35:7d:ae:39:7b:4b:27:ff:68:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: May 12 16:00:55 2026 GMT
Not After : May 13 16:00:55 2026 GMT
Subject: CN=ca481008aa7252f5be71cca6eeed07cf127c9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:61:19:f3:95:05:4b:b6:c2:8e:ea:0c:0b:
a4:8f:90:c0:96:a0:64:ab:ac:ca:a3:33:5a:b6:a8:
dd:24:9c:e9:a7:07:46:5e:ea:b2:f4:e5:27:2d:47:
2d:98:1a:75:58:6e:b9:16:fd:a9:ba:d5:fe:4c:76:
36:ad:d5:8e:d9:ae:3d:8d:a7:80:f2:cd:d3:e9:59:
9d:6f:32:33:9c:23:d3:15:0c:92:c3:77:20:bd:15:
61:d1:8e:4b:ae:55:3c:dc:57:ef:83:03:11:af:ce:
ae:69:27:62:1c:c1:bb:7e:ea:e7:40:ba:ab:26:2d:
02:0b:57:f9:98:92:2e:a7:8c:a3:2e:32:ea:97:2e:
d1:61:b0:e2:a5:c1:97:93:15:fc:3f:b7:a7:23:ed:
f8:f7:37:32:4e:65:ea:24:6b:37:f4:90:43:73:e9:
04:26:6d:79:26:68:eb:57:10:ad:07:2e:5a:9f:33:
99:64:49:de:a4:18:91:d7:8c:83:5f:79:c7:7c:6d:
0e:1e:ea:74:21:f2:ca:dd:f6:be:bf:62:8e:2c:7e:
68:1b:b9:5b:20:ae:c8:04:88:08:56:f9:b9:58:10:
64:43:24:59:a6:5a:cb:e2:93:94:e1:71:c3:7d:03:
12:1e:bc:3f:34:62:6e:92:92:b5:9f:03:ac:4f:54:
b5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:48:10:08:AA:72:52:F5:BE:71:CC:A6:EE:ED:07:CF:12:7C:95:54
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:ff:d5:9a:81:9e:65:7e:a1:fc:ae:35:73:55:e1:9b:ec:
9f:c2:ea:d8:98:ec:f6:59:1d:31:5b:f2:9b:84:67:ca:96:9c:
c6:48:19:c1:95:25:44:5d:e6:a4:a8:29:ed:ea:6c:ea:68:01:
11:d8:30:ba:59:01:9b:16:53:a4:58:9f:28:0a:11:0a:93:97:
ff:4c:58:c4:89:43:79:52:d1:89:a5:79:a9:17:72:e6:0d:a2:
e2:f6:1a:fb:54:36:c5:97:f6:18:af:b2:f9:6c:fe:e7:d6:18:
c0:c1:f2:55:79:ad:86:c1:48:2b:f6:15:ed:88:09:79:ee:7b:
7d:16:19:07:56:dc:e1:5a:e7:f9:ec:e6:b9:3a:16:05:d0:3a:
b9:13:87:13:88:ed:e5:01:6f:48:23:10:7d:c7:43:a4:f6:c2:
32:b4:c0:71:83:97:a9:40:41:2e:51:03:5e:bb:1b:a6:82:05:
96:cc:19:8f:fd:21:75:84:e9:8e:04:7b:6f:8d:90:af:9c:72:
7e:e5:89:46:2f:84:56:7e:2f:c1:91:93:db:87:81:f3:23:fa:
82:8a:c7:aa:a2:f7:06:73:79:51:3d:0d:e2:1b:5a:46:62:86:
4a:60:62:f6:4d:8a:8a:3c:35:38:50:f3:ce:c1:17:5e:d4:d0:
0e:f2:75:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c63vjxXA1fa45e0sn/2ghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ODE1YzdkMGU4NjNjMjE3ODBmOGJmNGI5ZWNjM2E5YzY0
NTkyOTgwHhcNMjYwNTEyMTYwMDU1WhcNMjYwNTEzMTYwMDU1WjAzMTEwLwYDVQQD
EyhjYTQ4MTAwOGFhNzI1MmY1YmU3MWNjYTZlZWVkMDdjZjEyN2M5NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGVhGfOVBUu2wo7qDAukj5DAlqBk
q6zKozNatqjdJJzppwdGXuqy9OUnLUctmBp1WG65Fv2putX+THY2rdWO2a49jaeA
8s3T6VmdbzIznCPTFQySw3cgvRVh0Y5LrlU83FfvgwMRr86uaSdiHMG7furnQLqr
Ji0CC1f5mJIup4yjLjLqly7RYbDipcGXkxX8P7enI+349zcyTmXqJGs39JBDc+kE
Jm15JmjrVxCtBy5anzOZZEnepBiR14yDX3nHfG0OHup0IfLK3fa+v2KOLH5oG7lb
IK7IBIgIVvm5WBBkQyRZplrL4pOU4XHDfQMSHrw/NGJukpK1nwOsT1S1zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpIEAiqclL1vnHMpu7tB88SfJVUMB8GA1UdIwQY
MBaAFHaBXH0OhjwheA+L9Lnsw6nGRZKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEt
ZTU0NzM5NWQ2YjQ3LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yYWFhNDktMjgyMy00ZWUyLWI1ZDEtZTU0NzM5NWQ2YjQ3
LzEvZG9GY2ZRNkdQQ0Y0RDR2MHVlekRxY1pGa3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGr/1ZqB
nmV+ofyuNXNV4Zvsn8Lq2Jjs9lkdMVvym4RnypacxkgZwZUlRF3mpKgp7eps6mgB
EdgwulkBmxZTpFifKAoRCpOX/0xYxIlDeVLRiaV5qRdy5g2i4vYa+1Q2xZf2GK+y
+Wz+59YYwMHyVXmthsFIK/YV7YgJee57fRYZB1bc4Vrn+ezmuToWBdA6uROHE4jt
5QFvSCMQfcdDpPbCMrTAcYOXqUBBLlEDXrsbpoIFlswZj/0hdYTpjgR7b42Qr5xy
fuWJRi+EVn4vwZGT24eB8yP6gorHqqL3BnN5UT0N4htaRmKGSmBi9k2Kijw1OFDz
zsEXXtTQDvJ1xA==
-----END CERTIFICATE-----
Generated at Tue May 12 23:39:17 2026 by rpki-client