Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: mjhxvIpRA69XbXegpA0NOD/SOMkA3Ysx9zktv+ctZQI=
Subject key identifier: 3A:0A:E8:96:F4:4E:42:05:ED:34:CA:8D:B5:44:C3:6E:18:F3:48:E2
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 019E1E6C152EB291FF0F10BC0F6277324CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: AD
Signing time: Tue 12 May 2026 23:01:00 +0000
Manifest this update: Tue 12 May 2026 23:01:00 +0000
Manifest next update: Wed 13 May 2026 23:01:00 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: zzUY2ipJ2VeURXXneKQCrxNWFc0lwuzqf2v6TwOdf8E=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:15:2e:b2:91:ff:0f:10:bc:0f:62:77:32:4c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: May 12 23:01:00 2026 GMT
Not After : May 13 23:01:00 2026 GMT
Subject: CN=3a0ae896f44e4205ed34ca8db544c36e18f348e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:e1:1f:15:20:1b:f4:67:b0:c1:b5:9e:be:
79:ae:42:d4:5e:d8:d7:32:68:bc:a5:63:97:b9:64:
04:2f:e4:4b:24:8a:3b:19:91:29:49:2e:07:b9:a0:
a2:1a:43:b0:32:00:fb:df:07:85:21:27:32:10:fa:
1e:ff:e7:07:11:1c:7f:8a:16:38:67:83:51:72:d6:
ca:20:98:cc:1e:2f:48:7c:da:52:1d:cc:90:10:1a:
30:ac:8f:a1:a1:cb:08:44:88:c6:72:ed:61:54:82:
3e:f5:e8:b8:93:71:31:64:ba:92:56:fc:b3:83:bd:
af:04:9b:4f:6b:30:dd:74:ee:3c:d4:a4:fa:f1:9c:
13:c9:bf:c6:3b:53:20:59:e2:b2:64:d6:72:33:a4:
9e:25:45:77:2f:10:c5:fc:90:ce:08:4a:cd:ac:c4:
9c:e5:e6:f1:16:f1:34:14:f7:ed:b1:11:7b:c1:5b:
51:ab:06:e8:e0:cd:65:f6:85:73:d1:fe:55:ea:9b:
ed:d0:16:fa:95:14:19:16:e8:1b:a5:02:ce:63:41:
d6:6e:6a:05:c6:49:6a:56:0c:06:61:5c:68:9c:a4:
64:fd:3d:5c:71:a0:f5:8d:2a:c0:40:9f:60:f1:a5:
f7:4d:30:a1:1e:99:09:ad:0e:f8:20:78:a7:b5:53:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:E8:96:F4:4E:42:05:ED:34:CA:8D:B5:44:C3:6E:18:F3:48:E2
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:18:c3:0e:ed:08:0f:6d:46:bd:1f:04:ec:88:c0:de:cd:1e:
f8:c2:83:fd:66:47:53:08:4a:27:e9:4a:67:73:15:79:0d:cf:
91:cd:e1:48:f9:51:06:84:82:67:dc:d2:48:8b:21:69:1f:fe:
54:b6:2e:33:54:67:be:96:be:1d:3c:0f:c8:f5:60:e2:64:91:
68:ed:dc:44:56:e2:00:c5:f4:d7:b6:64:d4:54:07:78:a9:3c:
02:8c:3e:79:24:d5:69:73:1e:d5:a8:44:71:9d:66:72:4d:f2:
a4:b5:42:ce:03:48:56:35:c8:12:b1:17:f9:20:9e:fd:a5:29:
18:8c:db:ab:ea:0e:16:5c:a0:27:61:2f:83:d5:fa:d5:29:6a:
06:6a:a0:53:7a:1a:eb:09:60:b8:02:4f:fb:0a:66:c2:f9:97:
2f:67:0f:88:72:c1:e7:5b:a7:a3:f1:a3:57:27:bd:45:1d:d7:
42:f7:9b:79:59:8c:2c:c8:b4:85:51:37:b7:1c:6a:62:95:e6:
c1:c7:a6:8e:6a:24:0b:ab:7b:57:d4:26:f5:3a:ec:de:52:6d:
86:7c:d4:c9:fa:84:bb:ad:20:89:0a:a9:c5:7e:9e:c2:b1:ec:
01:31:a2:93:58:44:38:0f:3b:e3:c3:ed:e7:2a:cf:f5:66:bf:
aa:f4:21:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebBUuspH/DxC8D2J3MkzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTBkMzEzMmRlMWJjMmRkMjY1ZDZlMWFmYzZmYjE2YjZl
YzFiMDgwHhcNMjYwNTEyMjMwMTAwWhcNMjYwNTEzMjMwMTAwWjAzMTEwLwYDVQQD
EygzYTBhZTg5NmY0NGU0MjA1ZWQzNGNhOGRiNTQ0YzM2ZTE4ZjM0OGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKfhHxUgG/RnsMG1nr55rkLUXtjX
Mmi8pWOXuWQEL+RLJIo7GZEpSS4HuaCiGkOwMgD73weFIScyEPoe/+cHERx/ihY4
Z4NRctbKIJjMHi9IfNpSHcyQEBowrI+hocsIRIjGcu1hVII+9ei4k3ExZLqSVvyz
g72vBJtPazDddO481KT68ZwTyb/GO1MgWeKyZNZyM6SeJUV3LxDF/JDOCErNrMSc
5ebxFvE0FPftsRF7wVtRqwbo4M1l9oVz0f5V6pvt0Bb6lRQZFugbpQLOY0HWbmoF
xklqVgwGYVxonKRk/T1ccaD1jSrAQJ9g8aX3TTChHpkJrQ74IHintVPOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoK6Jb0TkIF7TTKjbVEw24Y80jiMB8GA1UdIwQY
MBaAFLRQ0xMt4bwt0mXW4a/G+xa27BsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZEVEV5M2h2QzNTWmRiaHI4YjdGcmJzR3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jZmVmNjctZWZkZi00OWJhLWI5NmIt
NjVmYzMzZGU0ZjM5LzEvdEZEVEV5M2h2QzNTWmRiaHI4YjdGcmJzR3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9jZmVmNjctZWZkZi00OWJhLWI5NmItNjVmYzMzZGU0ZjM5
LzEvdEZEVEV5M2h2QzNTWmRiaHI4YjdGcmJzR3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRjDDu0I
D21GvR8E7IjA3s0e+MKD/WZHUwhKJ+lKZ3MVeQ3Pkc3hSPlRBoSCZ9zSSIshaR/+
VLYuM1Rnvpa+HTwPyPVg4mSRaO3cRFbiAMX017Zk1FQHeKk8Aow+eSTVaXMe1ahE
cZ1mck3ypLVCzgNIVjXIErEX+SCe/aUpGIzbq+oOFlygJ2Evg9X61SlqBmqgU3oa
6wlguAJP+wpmwvmXL2cPiHLB51uno/GjVye9RR3XQvebeVmMLMi0hVE3txxqYpXm
wcemjmokC6t7V9Qm9Trs3lJthnzUyfqEu60giQqpxX6ewrHsATGik1hEOA8748Pt
5yrP9Wa/qvQhSg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:41 2026 by rpki-client