Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: uYCd+Eb5GRDyrMqgkU4OWy8VXAWBkDqW12NhpPhnXF4=
Subject key identifier: 25:12:C0:67:CC:21:EA:72:CD:F0:24:66:58:42:D8:15:C7:3F:9F:8D
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 019E1F1169024D7EF0F66A47009F45B72E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 02:01:35 +0000
Manifest this update: Wed 13 May 2026 02:01:35 +0000
Manifest next update: Thu 14 May 2026 02:01:35 +0000
Files and hashes: 1: Ve64xTr98MUDsiJSZXk12KQ3yVc.roa (hash: wfd77vHmSmUiY8IWmiT9ZwxLolfac6GRsY7+Cx91Rus=)
2: dN5Ucpkm5kNY0YR-q9sxfd6c9rc.roa (hash: ZLBcri8/aXQmB4WoSvVto5wYAi5xFB1PoBjafKyFXT8=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: 49fDfTsuszNhCzqiaLtQNurJ1jXVaEdwe/reftA2hJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:69:02:4d:7e:f0:f6:6a:47:00:9f:45:b7:2e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: May 13 02:01:35 2026 GMT
Not After : May 14 02:01:35 2026 GMT
Subject: CN=2512c067cc21ea72cdf024665842d815c73f9f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:f3:2e:27:e1:7b:b5:0d:1f:a3:d6:c3:b3:
27:94:72:35:7e:53:e3:d6:28:79:5a:9e:d3:15:2f:
63:48:f7:2c:6e:b9:bb:de:cd:b7:da:f2:e9:e0:24:
93:cb:3c:fa:2e:ed:09:c7:36:85:06:8f:d2:ea:db:
45:7b:13:72:c9:64:62:84:75:05:5d:0b:cb:3f:3f:
92:c3:6d:c6:50:bd:45:8e:ab:25:0c:9a:f2:b6:43:
3a:42:7b:3e:3e:f9:69:a4:78:a0:37:9b:ba:da:ed:
01:58:fd:0b:e8:04:e7:2c:1d:ac:2d:30:2e:22:ba:
d8:18:ea:c5:7d:46:87:d9:e9:92:07:ce:1b:35:88:
2c:61:53:46:e5:78:16:e4:db:33:23:3a:c0:02:4d:
7a:c5:27:35:ce:cc:85:80:c2:2b:01:18:95:f6:3f:
dc:e2:e1:19:97:70:d4:ea:8e:f1:a7:cf:f0:a2:e6:
96:d3:22:86:48:89:b0:48:69:c1:77:d1:5c:01:3f:
43:41:39:93:6c:d2:ac:0e:3b:6b:22:49:77:fe:6a:
38:6c:6a:f5:53:c2:12:c8:10:57:3d:ef:69:9d:fc:
7d:0b:f0:57:2e:3e:95:bd:ec:4f:1e:dd:c0:fe:9a:
ea:44:62:d9:1b:91:50:0d:53:69:c1:13:97:f5:91:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:C0:67:CC:21:EA:72:CD:F0:24:66:58:42:D8:15:C7:3F:9F:8D
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:32:6f:24:ec:38:eb:e7:1f:2c:74:8a:fe:08:c0:36:69:cd:
50:7e:df:ce:e1:72:c9:89:23:ed:c7:4a:da:ef:36:df:fa:3b:
c9:b0:34:0d:3b:cc:80:cb:7b:0c:78:8b:a3:6f:25:c6:4d:f2:
83:86:6f:83:5b:c7:4c:75:25:07:44:f7:5c:eb:b1:04:3a:a8:
e6:6d:2e:50:ad:8f:31:ab:53:83:3b:f8:1b:05:dd:db:eb:2e:
f7:d9:77:c9:e9:7a:76:aa:d5:00:b6:86:c6:fc:9b:6a:2d:90:
1e:9d:2a:ba:3b:01:e3:ef:83:53:d7:99:1d:7f:9f:a5:37:fe:
7b:49:dc:1b:53:0d:12:85:85:b9:09:61:a8:b2:45:37:2f:63:
e9:4c:f9:a3:6d:c6:fe:fa:55:f5:e1:34:c0:49:73:20:8f:cb:
d1:9c:38:5e:2f:44:c2:4f:7f:a2:28:d7:97:fe:e3:85:ba:e7:
2c:5c:f3:36:14:c7:55:c5:d1:75:4a:71:99:08:9f:b0:55:cc:
96:97:79:fd:db:8c:4f:bb:1e:b6:9e:28:b3:31:ac:77:fd:6c:
69:e9:d7:92:f7:a3:47:11:74:4c:d9:8f:68:b5:26:99:bb:d4:
52:50:f4:2a:a6:04:05:60:34:fb:a4:77:8e:98:82:55:3c:98:
33:30:62:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEWkCTX7w9mpHAJ9Fty40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMzFlMmNhODI0Y2E4ZDU1NjI0MDZhNzAyMWFlM2MxM2Ex
NDI1ZDgwHhcNMjYwNTEzMDIwMTM1WhcNMjYwNTE0MDIwMTM1WjAzMTEwLwYDVQQD
EygyNTEyYzA2N2NjMjFlYTcyY2RmMDI0NjY1ODQyZDgxNWM3M2Y5ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2vzLifhe7UNH6PWw7MnlHI1flPj
1ih5Wp7TFS9jSPcsbrm73s232vLp4CSTyzz6Lu0JxzaFBo/S6ttFexNyyWRihHUF
XQvLPz+Sw23GUL1FjqslDJrytkM6Qns+PvlppHigN5u62u0BWP0L6ATnLB2sLTAu
IrrYGOrFfUaH2emSB84bNYgsYVNG5XgW5NszIzrAAk16xSc1zsyFgMIrARiV9j/c
4uEZl3DU6o7xp8/wouaW0yKGSImwSGnBd9FcAT9DQTmTbNKsDjtrIkl3/mo4bGr1
U8ISyBBXPe9pnfx9C/BXLj6VvexPHt3A/prqRGLZG5FQDVNpwROX9ZEK3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUSwGfMIepyzfAkZlhC2BXHP5+NMB8GA1UdIwQY
MBaAFLAx4sqCTKjVViQGpwIa48E6FCXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEvc0RIaXlvSk1xTlZXSkFhbkFocmp3VG9VSmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyTJvJOw4
6+cfLHSK/gjANmnNUH7fzuFyyYkj7cdK2u823/o7ybA0DTvMgMt7DHiLo28lxk3y
g4Zvg1vHTHUlB0T3XOuxBDqo5m0uUK2PMatTgzv4GwXd2+su99l3yel6dqrVALaG
xvybai2QHp0qujsB4++DU9eZHX+fpTf+e0ncG1MNEoWFuQlhqLJFNy9j6Uz5o23G
/vpV9eE0wElzII/L0Zw4Xi9Ewk9/oijXl/7jhbrnLFzzNhTHVcXRdUpxmQifsFXM
lpd5/duMT7setp4oszGsd/1saenXkvejRxF0TNmPaLUmmbvUUlD0KqYEBWA0+6R3
jpiCVTyYMzBikQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:31:37 2026 by rpki-client