Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: E0E5PBEY7FugS2nXDKY5TogB6qB/L8VYZrl4Jg1ZQVw=
Subject key identifier: CC:C9:69:71:5C:38:C8:4F:A5:F5:31:50:2A:85:BF:66:DE:D5:61:71
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 019E1F47C415EF4BB49CF354AA4FF40B77C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 0238
Signing time: Wed 13 May 2026 03:00:57 +0000
Manifest this update: Wed 13 May 2026 03:00:57 +0000
Manifest next update: Thu 14 May 2026 03:00:57 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: RTRPAHMi2cAyvtVyJakcR6Hopf1XhinxhNeu79G7T0c=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:c4:15:ef:4b:b4:9c:f3:54:aa:4f:f4:0b:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: May 13 03:00:57 2026 GMT
Not After : May 14 03:00:57 2026 GMT
Subject: CN=ccc969715c38c84fa5f531502a85bf66ded56171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ff:8d:7e:67:06:82:4a:05:1d:c8:62:f4:36:
b3:e6:59:0d:64:02:e4:7c:42:fb:0e:06:f4:59:5d:
2f:d4:48:41:7e:a6:92:2a:bb:3a:5f:6e:98:6b:d9:
8e:b3:3c:e0:74:cf:ed:1a:45:d7:a5:d1:7f:36:8a:
4c:1f:55:92:21:cd:10:c0:36:d4:b8:db:1b:8a:17:
17:c3:ec:53:0a:c5:a4:7f:91:0e:6a:94:a5:a7:a5:
99:ee:c0:a3:6b:48:43:f2:3c:20:e7:c1:b4:6a:33:
e2:2e:cd:29:a0:03:f3:1b:bf:f5:36:bf:0f:a6:de:
f7:f0:c6:90:a3:f3:f7:40:22:b1:e6:ac:be:1a:aa:
4d:11:4e:7e:f9:cc:87:80:e4:cd:ca:8b:4b:5e:0a:
04:fe:a4:3b:20:68:a9:df:8b:a3:a3:db:31:41:88:
c9:00:92:c3:bd:a4:ac:5a:96:9c:d6:cf:e9:5f:91:
df:9e:d3:f6:bd:f6:32:5f:cc:4f:b7:0c:c1:8d:43:
f0:fc:ea:8e:b5:8b:16:84:b2:ec:a9:93:d8:cf:bb:
a4:38:b0:39:5d:d2:32:73:fe:d8:15:c0:36:ac:13:
7b:26:26:41:d7:1e:bd:c5:b4:3e:2c:8d:9c:ca:a0:
e6:b0:56:e5:68:00:69:2d:0d:14:84:1b:47:ca:33:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:69:71:5C:38:C8:4F:A5:F5:31:50:2A:85:BF:66:DE:D5:61:71
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:a2:c1:c5:ca:aa:8f:c8:34:51:ad:34:2d:b9:96:3b:6b:
89:08:37:98:51:1f:28:b3:32:71:bd:f1:e5:83:ea:e1:16:ec:
3f:c1:4d:7c:45:e3:38:0a:2f:b8:10:1b:dc:05:06:7b:e6:81:
55:b4:33:39:84:9b:d7:70:64:69:b4:12:2f:a6:0f:03:7f:b0:
d8:ed:df:63:20:95:a2:55:0d:1d:70:c4:12:0d:88:17:38:cd:
c6:e7:ed:f6:7f:d6:e9:76:02:53:b0:d1:09:43:f8:2c:6a:e2:
95:80:37:f9:ae:45:ed:18:11:b1:a7:96:a7:e0:71:e8:2a:33:
af:b1:38:04:8f:43:0f:e4:80:de:87:7b:7d:01:cf:ed:31:a2:
c5:10:28:85:7e:95:33:a4:ef:a5:45:30:e2:21:e6:15:1b:d1:
1f:12:98:a9:ce:fd:b5:11:fb:bf:56:c2:93:f5:e5:35:61:63:
35:e5:d4:4f:1d:fc:39:e1:67:41:35:99:c4:48:4f:d1:4c:84:
8b:19:81:7a:15:9e:68:f8:ae:02:70:5a:4c:15:44:63:9a:be:
2b:77:d0:fb:06:2f:0d:8f:cf:2d:1b:3e:1c:25:8a:ad:3d:84:
cb:bd:bb:f1:87:80:67:9b:7b:7e:37:e3:f3:24:ac:3e:92:15:
c6:7c:fd:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR8QV70u0nPNUqk/0C3fIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2
ZDlkZTEwHhcNMjYwNTEzMDMwMDU3WhcNMjYwNTE0MDMwMDU3WjAzMTEwLwYDVQQD
EyhjY2M5Njk3MTVjMzhjODRmYTVmNTMxNTAyYTg1YmY2NmRlZDU2MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5P+NfmcGgkoFHchi9Daz5lkNZALk
fEL7Dgb0WV0v1EhBfqaSKrs6X26Ya9mOszzgdM/tGkXXpdF/NopMH1WSIc0QwDbU
uNsbihcXw+xTCsWkf5EOapSlp6WZ7sCja0hD8jwg58G0ajPiLs0poAPzG7/1Nr8P
pt738MaQo/P3QCKx5qy+GqpNEU5++cyHgOTNyotLXgoE/qQ7IGip34ujo9sxQYjJ
AJLDvaSsWpac1s/pX5HfntP2vfYyX8xPtwzBjUPw/OqOtYsWhLLsqZPYz7ukOLA5
XdIyc/7YFcA2rBN7JiZB1x69xbQ+LI2cyqDmsFblaABpLQ0UhBtHyjObiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzJaXFcOMhPpfUxUCqFv2be1WFxMB8GA1UdIwQY
MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt
MDA1ODc3ZGE4MDI2LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2
LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKCiwcXK
qo/INFGtNC25ljtriQg3mFEfKLMycb3x5YPq4RbsP8FNfEXjOAovuBAb3AUGe+aB
VbQzOYSb13BkabQSL6YPA3+w2O3fYyCVolUNHXDEEg2IFzjNxuft9n/W6XYCU7DR
CUP4LGrilYA3+a5F7RgRsaeWp+Bx6Cozr7E4BI9DD+SA3od7fQHP7TGixRAohX6V
M6TvpUUw4iHmFRvRHxKYqc79tRH7v1bCk/XlNWFjNeXUTx38OeFnQTWZxEhP0UyE
ixmBehWeaPiuAnBaTBVEY5q+K3fQ+wYvDY/PLRs+HCWKrT2Ey7278YeAZ5t7fjfj
8ySsPpIVxnz9tw==
-----END CERTIFICATE-----
Generated at Wed May 13 06:16:57 2026 by rpki-client