Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
File: R0kcIjvm4aqla_7G2g2pDEqFKq8.mft (raw, json)
Hash identifier: sb+UGF3h9jbTl4yBKJqajNHV/CcMkRfaQ4HtU30Frho=
Subject key identifier: 48:60:25:F2:59:1B:15:C3:53:AE:C1:8C:15:D0:E5:8A:8C:98:8C:9D
Authority key identifier: 47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
Certificate issuer: /CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Certificate serial: 019E20C868FB6643F49EB1A0FC24F677DC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
Manifest number: 066F
Signing time: Wed 13 May 2026 10:01:05 +0000
Manifest this update: Wed 13 May 2026 10:01:05 +0000
Manifest next update: Thu 14 May 2026 10:01:05 +0000
Files and hashes: 1: R0kcIjvm4aqla_7G2g2pDEqFKq8.crl (hash: dD0MpLrTzwduveHeMnhEaKwa80wQavDjQzm5vyVR6S8=)
2: V4COJnXwmFmnVBuYsVBT_JNYPKo.roa (hash: BFMhNSaSoYAFpwahbx23UPRsDuVgHkjYqG78fOuGOzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:68:fb:66:43:f4:9e:b1:a0:fc:24:f6:77:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47491c223be6e1aaa56bfec6da0da90c4a852aaf
Validity
Not Before: May 13 10:01:05 2026 GMT
Not After : May 14 10:01:05 2026 GMT
Subject: CN=486025f2591b15c353aec18c15d0e58a8c988c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:96:26:cf:90:63:0b:20:1b:6d:ff:71:4e:
56:eb:bf:7c:c9:72:bc:44:7a:32:9f:be:5d:8d:df:
b3:90:4b:98:7d:78:33:44:28:78:fc:7d:92:fd:9d:
93:e1:39:9c:bd:34:67:ce:8c:4d:35:25:8d:44:df:
d8:3c:49:b0:7c:65:37:b1:2c:3b:e9:19:2e:4a:35:
01:03:63:bf:ee:ef:d8:98:60:d2:83:c3:76:f4:15:
46:f7:49:39:c1:e3:8d:14:c4:4c:e8:1d:6b:c0:74:
4d:03:d0:c7:69:37:4a:9c:f8:42:f8:38:75:65:a8:
ea:30:47:73:38:b5:8d:93:d8:a5:3e:23:13:7c:e0:
28:59:0d:0a:09:c2:50:9e:51:ec:7f:31:ae:c6:ff:
e0:aa:c3:2f:71:67:22:3d:85:bb:05:98:a3:17:9d:
26:bd:82:f7:b9:b2:e1:a4:0f:eb:07:b3:d2:aa:69:
9e:3b:32:40:eb:b5:e1:ea:7b:30:92:c2:15:c3:1c:
24:23:c6:c7:fe:8b:ef:f2:9d:70:63:24:bf:6e:8e:
b4:7c:06:da:12:e0:35:ea:f2:f5:75:65:8a:81:71:
f9:a2:04:ee:e5:76:bd:5e:fd:64:da:e5:dd:b5:72:
f6:d9:a8:5d:e5:5f:99:69:95:4b:ca:cc:f6:a8:00:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:25:F2:59:1B:15:C3:53:AE:C1:8C:15:D0:E5:8A:8C:98:8C:9D
X509v3 Authority Key Identifier:
keyid:47:49:1C:22:3B:E6:E1:AA:A5:6B:FE:C6:DA:0D:A9:0C:4A:85:2A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0kcIjvm4aqla_7G2g2pDEqFKq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9468b8-c7e9-430f-b168-8acdf96c98a0/1/R0kcIjvm4aqla_7G2g2pDEqFKq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cd:2f:c3:af:6d:38:7c:03:c6:dd:14:74:65:59:35:5e:da:
33:ca:9f:0d:50:7c:05:bd:b1:52:ae:f5:b9:d4:75:3d:3b:86:
ee:46:e9:81:4b:75:b3:29:80:3f:fb:8f:d1:40:7e:30:42:33:
30:30:75:fb:ac:8e:21:f0:ec:e4:05:81:0f:1b:67:a9:1b:53:
69:50:ea:ae:bd:90:cb:75:33:fb:ad:00:9c:bb:85:91:71:10:
0c:40:0c:9b:5b:88:da:6d:50:fb:c7:40:31:a0:1a:8e:67:b8:
8c:f8:00:f6:9b:ab:42:ae:14:8d:5a:47:7a:6e:43:be:b9:cb:
3c:e9:0a:50:3c:8e:32:a1:5d:7d:c3:52:32:21:a9:9b:cd:55:
dc:71:b6:8c:7a:94:d4:74:5e:c1:36:85:0f:72:9d:d0:a7:d6:
52:57:f7:6c:4d:8b:65:71:92:dd:82:9c:ad:ac:c2:ca:d5:b7:
4d:0f:75:71:3a:80:74:46:9f:4a:79:69:76:b2:a1:82:90:1c:
57:0e:3a:1f:b0:1c:10:63:a2:4c:4e:ae:8c:44:82:c6:70:e8:
8b:52:4e:01:d0:f5:9f:69:b3:76:d5:d8:0c:67:8c:3b:13:3e:
10:c4:d9:aa:50:17:95:df:ac:46:c8:05:32:05:3c:e1:46:f1:
05:e0:d8:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyGj7ZkP0nrGg/CT2d9wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NDkxYzIyM2JlNmUxYWFhNTZiZmVjNmRhMGRhOTBjNGE4
NTJhYWYwHhcNMjYwNTEzMTAwMTA1WhcNMjYwNTE0MTAwMTA1WjAzMTEwLwYDVQQD
Eyg0ODYwMjVmMjU5MWIxNWMzNTNhZWMxOGMxNWQwZTU4YThjOTg4YzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqSWJs+QYwsgG23/cU5W6798yXK8
RHoyn75djd+zkEuYfXgzRCh4/H2S/Z2T4TmcvTRnzoxNNSWNRN/YPEmwfGU3sSw7
6RkuSjUBA2O/7u/YmGDSg8N29BVG90k5weONFMRM6B1rwHRNA9DHaTdKnPhC+Dh1
ZajqMEdzOLWNk9ilPiMTfOAoWQ0KCcJQnlHsfzGuxv/gqsMvcWciPYW7BZijF50m
vYL3ubLhpA/rB7PSqmmeOzJA67Xh6nswksIVwxwkI8bH/ovv8p1wYyS/bo60fAba
EuA16vL1dWWKgXH5ogTu5Xa9Xv1k2uXdtXL22ahd5V+ZaZVLysz2qABk2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhgJfJZGxXDU67BjBXQ5YqMmIydMB8GA1UdIwQY
MBaAFEdJHCI75uGqpWv+xtoNqQxKhSqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgt
OGFjZGY5NmM5OGEwLzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85NDY4YjgtYzdlOS00MzBmLWIxNjgtOGFjZGY5NmM5OGEw
LzEvUjBrY0lqdm00YXFsYV83RzJnMnBERXFGS3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfc0vw69t
OHwDxt0UdGVZNV7aM8qfDVB8Bb2xUq71udR1PTuG7kbpgUt1symAP/uP0UB+MEIz
MDB1+6yOIfDs5AWBDxtnqRtTaVDqrr2Qy3Uz+60AnLuFkXEQDEAMm1uI2m1Q+8dA
MaAajme4jPgA9purQq4UjVpHem5DvrnLPOkKUDyOMqFdfcNSMiGpm81V3HG2jHqU
1HRewTaFD3Kd0KfWUlf3bE2LZXGS3YKcrazCytW3TQ91cTqAdEafSnlpdrKhgpAc
Vw46H7AcEGOiTE6ujESCxnDoi1JOAdD1n2mzdtXYDGeMOxM+EMTZqlAXld+sRsgF
MgU84UbxBeDYLg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:21 2026 by rpki-client