
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: dhRtnbFeISR0C373fYojPrCKG7YoC7stE9kAJcfd3qk=
Subject key identifier: F5:C3:87:95:51:85:6C:A9:2A:C8:8B:5D:7A:8E:93:21:88:29:B5:40
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 019E1D909EEA8948118A358853D8D10F9E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 14A1
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: U8QREfR/e/CTyNOhSKnW6WC6/WPRyhaho4/FVjYKRog=)
2: sV7_z3SZk6LqLitV-wqEx_InYyY.roa (hash: uJQknWD1q4gFVKPsqZnSjyh2z6Bj3wZE5RXoYc2FcBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9e:ea:89:48:11:8a:35:88:53:d8:d1:0f:9e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=f5c3879551856ca92ac88b5d7a8e93218829b540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:9f:c1:af:5f:53:2b:66:f3:b8:ec:5a:ba:
1d:03:95:54:ce:a4:60:52:06:50:48:85:07:f8:c8:
3a:82:d9:f5:22:dd:7d:a9:a7:53:65:24:27:24:93:
b7:b5:b2:2e:20:dc:1d:8a:fc:d7:c9:8b:a1:e4:c7:
e6:2c:17:5b:5b:4d:9f:93:2a:65:02:ae:ed:0e:f2:
b5:80:62:43:7f:30:83:41:53:3f:85:2f:16:28:f4:
c0:55:08:dc:3d:60:fb:ba:69:92:b1:ef:87:30:89:
f2:dc:e6:6e:b2:0a:bb:7f:91:0c:86:4b:b8:7d:f1:
c4:5a:23:3e:b9:00:86:2c:05:4c:c3:24:53:06:e0:
ca:5d:11:72:0e:71:c7:f3:0e:2f:27:56:40:01:b5:
3c:75:c9:ad:54:93:aa:65:45:6a:20:7f:1f:bf:19:
5f:d0:6e:52:02:47:8c:5b:3c:c5:ff:69:35:6c:57:
b6:b3:9a:89:e8:b0:fc:a6:3a:42:dc:91:ce:e3:6a:
d2:c7:ee:10:46:5e:97:06:5e:11:3f:c9:45:75:22:
b9:b3:8f:02:b6:bb:09:e7:ac:cc:e4:36:ee:8f:ff:
2b:76:37:1e:d1:ee:6b:cd:a3:5e:36:e1:0f:02:06:
83:f7:2a:c4:a8:b5:fb:cb:4c:20:80:ea:ec:9b:83:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:87:95:51:85:6C:A9:2A:C8:8B:5D:7A:8E:93:21:88:29:B5:40
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:dc:23:15:ee:61:78:e8:07:2b:5f:e2:d5:b0:1e:34:64:36:
03:22:4c:f7:1f:5b:ac:0c:76:a6:a9:70:a3:ff:5f:4f:ac:c8:
59:c3:7c:97:7b:ba:0b:2c:0e:a0:64:65:30:7f:70:26:20:3a:
31:4c:33:bd:65:e3:cf:fb:96:2f:ea:24:80:af:bd:2a:fa:ed:
07:60:b7:70:aa:18:fb:b6:7d:ef:7e:c4:05:d3:fe:3e:16:3b:
8a:d5:92:40:f3:c4:0e:b4:a5:81:bc:e7:15:54:b3:ba:ff:c6:
81:f2:ab:53:4f:5c:ef:e9:d1:15:ec:bc:03:2a:b5:cb:13:4b:
d9:30:51:c6:15:59:3f:f1:cd:4b:1a:86:d4:86:1c:ce:10:5a:
3f:f9:b4:cf:f6:ac:bb:84:23:f0:5b:03:cf:0d:00:db:42:bb:
4b:7c:d6:ea:9e:1d:fe:8b:6b:6d:26:d4:b6:29:fb:58:b4:3d:
a4:eb:43:97:cc:aa:27:a7:9f:e1:57:dc:b1:e1:e3:62:b9:ec:
4c:0d:d6:3b:92:59:6d:56:75:74:6a:55:7e:4b:6f:32:b1:5a:
01:39:d1:cf:fb:f5:16:89:e4:e2:ea:f7:41:95:ff:c7:be:01:
67:70:06:83:c8:4b:c6:aa:31:19:97:93:9b:79:e8:68:2f:37:
1d:07:59:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkJ7qiUgRijWIU9jRD55cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGEyMzdkMTE3ZGY3N2UwYjhhYTUxMmY2ZjI1ZmIyMDdm
OWEyYjEwHhcNMjYwNTEyMTkwMTE3WhcNMjYwNTEzMTkwMTE3WjAzMTEwLwYDVQQD
EyhmNWMzODc5NTUxODU2Y2E5MmFjODhiNWQ3YThlOTMyMTg4MjliNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmefwa9fUytm87jsWrodA5VUzqRg
UgZQSIUH+Mg6gtn1It19qadTZSQnJJO3tbIuINwdivzXyYuh5MfmLBdbW02fkypl
Aq7tDvK1gGJDfzCDQVM/hS8WKPTAVQjcPWD7ummSse+HMIny3OZusgq7f5EMhku4
ffHEWiM+uQCGLAVMwyRTBuDKXRFyDnHH8w4vJ1ZAAbU8dcmtVJOqZUVqIH8fvxlf
0G5SAkeMWzzF/2k1bFe2s5qJ6LD8pjpC3JHO42rSx+4QRl6XBl4RP8lFdSK5s48C
trsJ56zM5Dbuj/8rdjce0e5rzaNeNuEPAgaD9yrEqLX7y0wggOrsm4MnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXDh5VRhWypKsiLXXqOkyGIKbVAMB8GA1UdIwQY
MBaAFAtKI30Rffd+C4qlEvbyX7IH+aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTIt
MjVjOWFmYmIzMjIxLzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTItMjVjOWFmYmIzMjIx
LzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtwjFe5h
eOgHK1/i1bAeNGQ2AyJM9x9brAx2pqlwo/9fT6zIWcN8l3u6CywOoGRlMH9wJiA6
MUwzvWXjz/uWL+okgK+9KvrtB2C3cKoY+7Z9737EBdP+PhY7itWSQPPEDrSlgbzn
FVSzuv/GgfKrU09c7+nRFey8Ayq1yxNL2TBRxhVZP/HNSxqG1IYczhBaP/m0z/as
u4Qj8FsDzw0A20K7S3zW6p4d/otrbSbUtin7WLQ9pOtDl8yqJ6ef4VfcseHjYrns
TA3WO5JZbVZ1dGpVfktvMrFaATnRz/v1Fonk4ur3QZX/x74BZ3AGg8hLxqoxGZeT
m3noaC83HQdZEA==
-----END CERTIFICATE-----
Generated at Wed May 13 00:35:56 2026 by rpki-client