Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: /boLs4tnEDAy/qAnvMw31g6lUcUNMgNjZOr/4pIcuzg=
Subject key identifier: 23:9C:F8:00:3D:69:92:2B:BB:CF:46:11:A5:78:10:6C:B2:FF:43:FA
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019E1D59CB0CD8616B0B58E362FEB96FAB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 012E
Signing time: Tue 12 May 2026 18:01:24 +0000
Manifest this update: Tue 12 May 2026 18:01:24 +0000
Manifest next update: Wed 13 May 2026 18:01:24 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: 0ijoaeonHy1r546P1wep6E1xSGKk02dhVzo4HXijzJs=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:cb:0c:d8:61:6b:0b:58:e3:62:fe:b9:6f:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: May 12 18:01:24 2026 GMT
Not After : May 13 18:01:24 2026 GMT
Subject: CN=239cf8003d69922bbbcf4611a578106cb2ff43fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:69:86:3f:16:c0:b4:73:5b:6a:30:6b:0c:
9e:d3:14:54:11:72:c0:e5:64:4f:fc:1f:c8:9e:3d:
46:92:7f:a3:ff:e6:2d:0d:0d:60:82:f7:ab:61:5e:
2f:96:0a:fe:7a:82:89:27:49:0c:ae:01:93:09:a9:
9d:63:ef:eb:70:89:4b:ee:f2:9b:57:14:2b:13:9c:
11:dd:cf:c7:1d:17:f7:ac:8d:7b:26:12:66:6b:ee:
d7:25:53:c7:85:57:5a:a3:cd:99:0b:9d:e6:bf:58:
21:71:b0:6d:8a:fe:39:fe:a0:96:a9:a5:be:68:d2:
ea:f0:42:4d:14:79:d7:b0:0f:55:a1:20:6a:c9:53:
2f:c7:1e:8b:8f:8c:8c:fb:6d:4d:9b:41:b1:d5:2e:
14:0c:fd:9b:18:64:fb:6b:8f:d5:af:0a:9b:72:fa:
63:42:5f:46:02:07:5b:62:5f:30:c5:a9:7f:68:14:
f9:02:4e:5b:c5:9f:10:ac:ad:93:9d:e4:cf:cd:62:
bd:f5:96:52:c6:93:a3:86:6f:86:95:cf:93:32:83:
8d:19:cb:98:0c:18:0e:c1:8c:49:fa:75:8d:a4:ef:
a1:13:ca:6e:94:32:b3:7b:75:57:d5:35:ff:4d:13:
a5:40:fb:70:bd:bc:76:6a:dc:7e:ee:32:8a:05:1a:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9C:F8:00:3D:69:92:2B:BB:CF:46:11:A5:78:10:6C:B2:FF:43:FA
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:07:98:92:bc:b7:2a:35:f8:5b:b3:67:03:8b:4d:b7:73:20:
f4:72:36:65:08:1f:16:dd:e5:89:57:97:f9:c6:bf:3d:de:f1:
10:c7:c5:50:00:25:32:71:c4:0e:48:79:5f:81:89:c4:d1:9f:
c1:b8:c8:a8:c5:72:78:c7:fa:d4:c7:4f:bd:31:0f:fa:c2:92:
dc:2b:39:e7:94:f6:de:aa:8b:89:54:28:a6:e2:e9:73:70:a4:
56:66:fd:c7:6f:8b:2e:4a:6e:c0:24:b7:f6:84:81:7f:70:d9:
d1:05:4f:cc:69:f9:7c:35:14:f1:b8:18:3a:10:4e:cf:dc:16:
18:df:de:04:37:f5:7f:cf:91:6e:f1:f5:90:c1:0b:66:74:4d:
a2:c0:f3:fd:eb:23:fd:3d:7c:8f:36:82:86:6c:09:11:d6:ac:
9f:83:6a:07:29:d8:d8:13:68:45:40:ff:c4:22:f9:bc:b3:f7:
b2:bd:3d:6b:82:92:71:27:c0:b6:a2:67:4a:ce:27:13:96:e8:
c7:df:d0:49:c6:82:6a:98:ac:40:29:a6:9b:97:23:39:a1:a9:
b4:a3:c2:68:7b:ba:5a:a2:80:42:22:e1:d3:20:87:33:b0:bc:
75:9e:2a:4c:89:eb:94:93:67:b8:93:55:3b:bd:9b:23:9a:71:
86:07:c9:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWcsM2GFrC1jjYv65b6tOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTg4ZTQ2NjAwOTUyMDU2MjA2MWJlZjY1YjdmNDgyOTgy
ODk4NjUwHhcNMjYwNTEyMTgwMTI0WhcNMjYwNTEzMTgwMTI0WjAzMTEwLwYDVQQD
EygyMzljZjgwMDNkNjk5MjJiYmJjZjQ2MTFhNTc4MTA2Y2IyZmY0M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIFphj8WwLRzW2owawye0xRUEXLA
5WRP/B/Inj1Gkn+j/+YtDQ1ggverYV4vlgr+eoKJJ0kMrgGTCamdY+/rcIlL7vKb
VxQrE5wR3c/HHRf3rI17JhJma+7XJVPHhVdao82ZC53mv1ghcbBtiv45/qCWqaW+
aNLq8EJNFHnXsA9VoSBqyVMvxx6Lj4yM+21Nm0Gx1S4UDP2bGGT7a4/Vrwqbcvpj
Ql9GAgdbYl8wxal/aBT5Ak5bxZ8QrK2TneTPzWK99ZZSxpOjhm+Glc+TMoONGcuY
DBgOwYxJ+nWNpO+hE8pulDKze3VX1TX/TROlQPtwvbx2atx+7jKKBRqchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOc+AA9aZIru89GEaV4EGyy/0P6MB8GA1UdIwQY
MBaAFCtYjkZgCVIFYgYb72W39IKYKJhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2Zjgt
Y2NhZmI4MjQ3M2E1LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zNzVmMTYtNmFlZS00NjJhLWE2ZjgtY2NhZmI4MjQ3M2E1
LzEvSzFpT1JtQUpVZ1ZpQmh2dlpiZjBncGdvbUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgeYkry3
KjX4W7NnA4tNt3Mg9HI2ZQgfFt3liVeX+ca/Pd7xEMfFUAAlMnHEDkh5X4GJxNGf
wbjIqMVyeMf61MdPvTEP+sKS3Cs555T23qqLiVQopuLpc3CkVmb9x2+LLkpuwCS3
9oSBf3DZ0QVPzGn5fDUU8bgYOhBOz9wWGN/eBDf1f8+RbvH1kMELZnRNosDz/esj
/T18jzaChmwJEdasn4NqBynY2BNoRUD/xCL5vLP3sr09a4KScSfAtqJnSs4nE5bo
x9/QScaCapisQCmmm5cjOaGptKPCaHu6WqKAQiLh0yCHM7C8dZ4qTInrlJNnuJNV
O72bI5pxhgfJpg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:01:54 2026 by rpki-client