Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: kpSVfP4ElRfCekuG3nvd9k/JTpOu/TmfXnkJqmTdU0E=
Subject key identifier: 8C:B2:94:CE:28:53:49:85:F4:2E:8C:62:CD:72:8D:71:D0:55:E5:52
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019E1EA301D90EA972BD5B199F0281B95D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:59 +0000
Manifest this update: Wed 13 May 2026 00:00:59 +0000
Manifest next update: Thu 14 May 2026 00:00:59 +0000
Files and hashes: 1: 4usRpBobCHCzpwrJfO9MESi2eHE.roa (hash: 9o5TwDkw3VuguoRghDhwwlw0Cs2+gJaMgEUU/235EeA=)
2: OaJvJxx6v6GWi19b1tfcABNBceQ.roa (hash: TnzXeBtI+3T5OrY62DPWKmO+Wg3GD37hX6hbBQYvfBw=)
3: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: hYxnxFbAGIIxElmxwuoT3SAbKSZj0OLwViXBtAKKkQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:01:d9:0e:a9:72:bd:5b:19:9f:02:81:b9:5d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: May 13 00:00:59 2026 GMT
Not After : May 14 00:00:59 2026 GMT
Subject: CN=8cb294ce28534985f42e8c62cd728d71d055e552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:59:a6:c6:62:5f:9d:b2:15:88:08:c4:7b:
8d:4f:42:00:55:bc:5e:5d:56:e3:e0:2d:ed:3b:7e:
c5:7b:ee:97:ab:53:ef:67:3a:33:29:9c:fb:96:90:
d6:09:d6:7c:c7:a5:0a:52:a5:22:99:7c:cb:da:ff:
5c:1c:f1:1c:2c:18:55:2c:32:2f:56:bb:01:a9:b7:
07:8e:52:d0:91:66:80:dc:ed:51:e9:8e:9b:da:ea:
e3:5f:ec:5d:29:59:be:b6:a0:28:e1:57:3c:dd:27:
05:53:00:84:ca:1e:2a:80:fd:df:00:73:42:ac:e4:
d0:6c:0a:75:a5:9f:14:07:96:a5:50:60:44:00:82:
7e:78:80:00:bc:c7:f1:35:29:18:64:80:9b:49:5d:
37:18:48:a3:c5:9f:63:dc:4c:dc:83:88:5e:d0:bd:
41:35:bb:23:7b:93:fb:40:cc:61:90:da:8f:23:4c:
82:58:ab:28:c2:c7:e0:00:0f:ea:1e:b4:77:82:0e:
e4:1b:2a:cc:1e:88:eb:21:50:83:97:ce:a5:8f:5e:
23:28:88:91:b5:c1:46:43:73:ab:b2:cf:6e:95:65:
86:b8:8b:9b:84:16:13:a2:ad:75:bc:41:a8:3f:f9:
13:1b:8b:1f:f8:31:a3:a8:41:d8:f9:7a:74:d4:a9:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B2:94:CE:28:53:49:85:F4:2E:8C:62:CD:72:8D:71:D0:55:E5:52
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3f:e8:35:9f:a6:84:ad:60:17:3f:41:a2:9c:fc:fd:e9:13:
e4:e4:71:11:55:13:ce:47:30:b7:27:43:f2:d8:e8:16:68:72:
54:f0:e8:57:d9:82:05:ca:f1:3e:5c:3d:b4:1b:18:8b:ae:2c:
2c:b9:ab:0e:07:1c:55:f3:51:ce:0c:1a:e5:df:9a:de:b4:08:
b0:38:7c:3b:2b:ec:bc:12:9f:aa:07:91:1e:c4:5e:9a:83:c4:
87:ca:de:91:93:e1:dc:49:6d:01:02:bc:4b:e4:2d:a7:b8:55:
1d:f3:62:db:d1:9c:e3:04:e7:ef:43:d3:fa:e3:9a:22:f1:b4:
b2:30:c2:70:41:fb:3d:1a:89:b6:b1:8e:10:ba:6c:dc:8a:e3:
83:51:de:ed:b8:a1:b4:e5:de:1c:39:6f:3b:71:f1:0b:39:ee:
1d:45:6a:20:22:7a:f4:f3:28:46:b9:55:97:44:77:95:29:50:
0b:6a:5c:3d:f5:56:bb:fa:b5:10:e4:34:07:b5:fa:5c:ab:11:
8a:f0:67:d9:a9:6f:07:30:d6:8d:00:67:46:0a:61:2e:c0:53:
51:de:d8:1d:ec:ce:4a:aa:69:b6:bb:66:ca:1e:84:6e:2a:4b:
dc:f1:04:b8:99:c9:27:7b:b1:83:9e:08:69:67:fa:43:30:0a:
40:c7:b3:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eowHZDqlyvVsZnwKBuV0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZGU3MDdkNmMwMTAwNmIyYWNhNjg3ZWFhYjI5Y2I0NzM2
Yjc2NjgwHhcNMjYwNTEzMDAwMDU5WhcNMjYwNTE0MDAwMDU5WjAzMTEwLwYDVQQD
Eyg4Y2IyOTRjZTI4NTM0OTg1ZjQyZThjNjJjZDcyOGQ3MWQwNTVlNTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IdZpsZiX52yFYgIxHuNT0IAVbxe
XVbj4C3tO37Fe+6Xq1PvZzozKZz7lpDWCdZ8x6UKUqUimXzL2v9cHPEcLBhVLDIv
VrsBqbcHjlLQkWaA3O1R6Y6b2urjX+xdKVm+tqAo4Vc83ScFUwCEyh4qgP3fAHNC
rOTQbAp1pZ8UB5alUGBEAIJ+eIAAvMfxNSkYZICbSV03GEijxZ9j3Ezcg4he0L1B
Nbsje5P7QMxhkNqPI0yCWKsowsfgAA/qHrR3gg7kGyrMHojrIVCDl86lj14jKIiR
tcFGQ3Orss9ulWWGuIubhBYToq11vEGoP/kTG4sf+DGjqEHY+Xp01KkCcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyylM4oU0mF9C6MYs1yjXHQVeVSMB8GA1UdIwQY
MBaAFHDecH1sAQBrKspofqqynLRza3ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQt
MThlNWM1MzdkNTFkLzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82Y2UwYzAtOTM3Yy00YTQzLTllODQtMThlNWM1MzdkNTFk
LzEvY041d2ZXd0JBR3NxeW1oLXFyS2N0SE5yZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD/oNZ+m
hK1gFz9Bopz8/ekT5ORxEVUTzkcwtydD8tjoFmhyVPDoV9mCBcrxPlw9tBsYi64s
LLmrDgccVfNRzgwa5d+a3rQIsDh8OyvsvBKfqgeRHsRemoPEh8rekZPh3EltAQK8
S+Qtp7hVHfNi29Gc4wTn70PT+uOaIvG0sjDCcEH7PRqJtrGOELps3Irjg1He7bih
tOXeHDlvO3HxCznuHUVqICJ69PMoRrlVl0R3lSlQC2pcPfVWu/q1EOQ0B7X6XKsR
ivBn2alvBzDWjQBnRgphLsBTUd7YHezOSqpptrtmyh6EbipL3PEEuJnJJ3uxg54I
aWf6QzAKQMezDQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:09:34 2026 by rpki-client