Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: 9OpBRN1Y+2tXeSnEMHj0ntLQS/UIVDSPdSatzyaTvJE=
Subject key identifier: A0:0F:F3:84:84:1C:C1:55:5B:B8:08:40:8E:36:58:B1:A1:10:30:0D
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 019E1CEB55A35AD5B5DB268D27C9A065C24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 16:00:45 +0000
Manifest this update: Tue 12 May 2026 16:00:45 +0000
Manifest next update: Wed 13 May 2026 16:00:45 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: u4f1oYA+l1Tj9a0DHFSjvLfSvN0xYTRnbAL2yXAMEiY=)
2: GKlgGJSEXZnTu8LV5y5BgeY7Aaw.roa (hash: bXptPxFQyb9Owh/hKmiA83+wjy1OBwsMr11rFf9sFDQ=)
3: jn0yEdikXWBGn1EaR0b8w0TJFr8.roa (hash: 10DA5MXiJsweYaG/q6sof9ShkMYv66PwkP1hNlnqUDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:55:a3:5a:d5:b5:db:26:8d:27:c9:a0:65:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: May 12 16:00:45 2026 GMT
Not After : May 13 16:00:45 2026 GMT
Subject: CN=a00ff384841cc1555bb808408e3658b1a110300d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2e:99:5c:ac:9e:7a:44:fd:45:91:12:90:f3:
c4:4e:ac:e1:32:d6:db:05:01:db:d1:fa:c6:1d:69:
e6:dd:ee:bd:29:ef:31:c2:db:67:6c:e6:f9:c0:17:
40:8f:35:04:42:92:47:d0:f7:97:9f:27:3f:db:cf:
a5:3f:8a:d9:04:3c:4a:87:90:97:1d:b4:02:25:ae:
38:f4:26:ff:87:bc:fe:87:e6:e9:61:d5:ad:89:9c:
90:a0:d3:54:eb:38:89:09:7b:90:c7:01:98:6a:b0:
18:60:fd:d7:38:4b:54:28:ca:0c:56:31:e7:f4:12:
1b:7c:50:07:8b:07:e2:42:18:2a:91:38:8f:6e:41:
16:b5:cf:ef:1a:20:e3:97:bd:9f:bb:2c:88:ea:c9:
00:f4:f3:17:17:43:a9:42:4f:09:fd:b5:6d:b0:6b:
4b:fc:32:cd:6c:1f:5d:aa:a5:00:17:25:f3:8a:e1:
1c:33:dd:4a:f7:99:2b:62:25:fd:59:16:4a:bc:6c:
63:3a:72:46:ba:c2:90:98:2f:92:be:41:fb:4d:bd:
a1:fa:11:f1:ad:fc:59:b4:b2:7f:eb:9a:87:69:a6:
5c:ab:33:0f:36:52:23:1a:04:af:8d:36:d3:7c:c3:
2f:6b:ac:d3:e2:b4:a6:64:10:2b:17:d4:fb:33:70:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0F:F3:84:84:1C:C1:55:5B:B8:08:40:8E:36:58:B1:A1:10:30:0D
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:d2:cd:83:30:03:d4:05:52:41:72:95:bd:bd:da:bd:2c:
f7:97:a3:69:8f:5c:11:01:0c:d3:75:17:24:60:2b:a3:47:9e:
50:06:08:22:3f:66:56:3f:64:19:0f:b4:a1:45:10:00:a4:e3:
7a:12:30:a4:93:09:38:d7:62:bf:f4:bb:d4:24:67:e5:90:22:
00:78:48:2d:c5:01:87:2a:e7:3d:b4:15:69:90:45:dc:98:18:
45:97:60:05:11:ab:60:5f:15:52:44:0b:36:18:f1:6d:31:44:
66:80:dd:38:a4:b6:52:57:64:34:58:e0:95:7e:c6:18:a0:cf:
3b:93:43:69:8c:3c:37:c3:82:6c:86:29:56:e1:de:4e:87:0c:
a7:fb:bd:5c:05:47:e5:76:e9:2b:bc:54:a4:21:00:32:9b:14:
02:b5:be:36:13:a9:e5:29:76:85:61:04:77:64:d7:96:90:85:
98:2f:da:94:9b:ef:8c:17:94:8c:8d:57:08:9c:46:2c:30:13:
ee:df:dd:c5:62:ee:31:24:ff:ae:13:87:9a:55:8e:07:c4:fe:
2f:d9:62:f6:85:10:eb:3d:4a:f7:56:fe:f5:e7:a6:48:05:54:
8d:73:ba:a2:43:f7:df:90:45:45:75:ba:7a:dc:72:c9:2c:bf:
4a:17:92:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4c61WjWtW12yaNJ8mgZcJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0NDc2ZWYzOTQ1YjM0NGZmZWUzOGRhNTZjYWNjYzVk
MDM5YjAwHhcNMjYwNTEyMTYwMDQ1WhcNMjYwNTEzMTYwMDQ1WjAzMTEwLwYDVQQD
EyhhMDBmZjM4NDg0MWNjMTU1NWJiODA4NDA4ZTM2NThiMWExMTAzMDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y6ZXKyeekT9RZESkPPETqzhMtbb
BQHb0frGHWnm3e69Ke8xwttnbOb5wBdAjzUEQpJH0PeXnyc/28+lP4rZBDxKh5CX
HbQCJa449Cb/h7z+h+bpYdWtiZyQoNNU6ziJCXuQxwGYarAYYP3XOEtUKMoMVjHn
9BIbfFAHiwfiQhgqkTiPbkEWtc/vGiDjl72fuyyI6skA9PMXF0OpQk8J/bVtsGtL
/DLNbB9dqqUAFyXziuEcM91K95krYiX9WRZKvGxjOnJGusKQmC+SvkH7Tb2h+hHx
rfxZtLJ/65qHaaZcqzMPNlIjGgSvjTbTfMMva6zT4rSmZBArF9T7M3C2GQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKAP84SEHMFVW7gIQI42WLGhEDANMB8GA1UdIwQY
MBaAFPr2RHbvOUWzRP/uONpWyszF0DmwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkVkdTg1UmJORV8tNDQybGJLek1YUU9iQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNjdlMzZjLWNkNTUtNGI1OS1hYTEy
LTc0NDJmMGUyYmQxNy8xLzEtdlpFZHU4NVJiTkVfLTQ0MmxiS3pNWFFPYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4LzY3ZTM2Yy1jZDU1LTRiNTktYWExMi03NDQyZjBlMmJk
MTcvMS8xLXZaRWR1ODVSYk5FXy00NDJsYkt6TVhRT2JBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmPS
zYMwA9QFUkFylb292r0s95ejaY9cEQEM03UXJGAro0eeUAYIIj9mVj9kGQ+0oUUQ
AKTjehIwpJMJONdiv/S71CRn5ZAiAHhILcUBhyrnPbQVaZBF3JgYRZdgBRGrYF8V
UkQLNhjxbTFEZoDdOKS2UldkNFjglX7GGKDPO5NDaYw8N8OCbIYpVuHeTocMp/u9
XAVH5XbpK7xUpCEAMpsUArW+NhOp5Sl2hWEEd2TXlpCFmC/alJvvjBeUjI1XCJxG
LDAT7t/dxWLuMST/rhOHmlWOB8T+L9li9oUQ6z1K91b+9eemSAVUjXO6okP335BF
RXW6etxyySy/SheSIQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:58 2026 by rpki-client