Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: n3dQr8rbVlI+LgTXFqxpL5t/ISzSfyWDZtMuCCNdCQg=
Subject key identifier: FF:2C:B9:3D:71:C7:53:10:52:4A:94:7F:17:82:0A:A1:58:DA:FB:48
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 019E1D90448B761BCCEC9F73842C9125902A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 5_doYFv7yc7pk0TQwTiDRsnYDyk.roa (hash: roZ57WpPuuxZ3dcx0tH7+LdHwoSOY302cY6k9E5x4os=)
2: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: 3EOWuu3/eYxGzj3oWiwrDhSZq6tM4Svrn89HhcGQwkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:44:8b:76:1b:cc:ec:9f:73:84:2c:91:25:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=ff2cb93d71c75310524a947f17820aa158dafb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:22:6e:cc:ad:33:47:67:b4:c3:b8:95:f1:
79:c7:2d:a4:15:46:14:c7:43:e6:e3:ca:5f:15:81:
51:c2:58:19:49:ea:1c:28:53:eb:32:e0:97:cb:fa:
18:26:e1:25:e2:16:40:9f:a3:3d:ff:c7:de:ce:0f:
80:76:07:58:3d:af:80:df:0e:0d:a0:26:e9:33:a9:
b8:a1:e4:52:6b:21:ee:23:f8:ee:2c:1c:ef:7a:ca:
05:a8:b2:82:fc:d8:22:25:b4:3e:98:fe:70:55:54:
79:c7:7c:3b:b9:c4:53:23:38:9d:ac:94:b4:18:3e:
17:c7:ef:f2:7a:ad:00:ad:20:e8:01:43:10:7e:c2:
3f:e9:c8:a8:98:a2:17:eb:f2:d0:20:2a:4e:b4:66:
63:e2:e5:ee:03:7e:2d:52:89:70:32:e8:12:e6:7c:
b3:35:27:1c:21:d0:db:d3:c4:d7:c3:25:2c:9a:cc:
fc:6b:3d:6e:d2:7f:4b:e9:4f:f1:15:a7:25:63:40:
72:68:fb:be:25:ed:02:fa:93:c2:e1:28:5c:8c:b5:
af:2b:c3:33:a4:36:89:04:67:0c:6b:17:fb:a4:cc:
6d:78:b6:6e:19:d1:55:df:60:c7:12:86:ed:d2:91:
c8:ca:ea:1a:c1:5f:e4:7b:df:6b:94:36:3a:3e:3c:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:B9:3D:71:C7:53:10:52:4A:94:7F:17:82:0A:A1:58:DA:FB:48
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a2:39:ed:e1:e7:ff:ef:b1:79:6b:0c:1c:a7:9d:7c:ac:0e:
c0:65:4f:0b:ed:74:25:42:b0:27:a8:2d:bb:0c:6d:23:99:79:
bd:43:ac:5d:67:c5:04:48:c6:95:f9:17:23:a7:32:63:5b:3b:
ca:3a:9d:da:7a:4e:f1:78:e7:7e:c9:ab:80:99:84:f2:c0:46:
73:2f:fc:cd:c7:fd:1b:d1:37:ed:ad:3f:2c:fc:fc:6d:f7:15:
26:20:aa:7a:df:51:ed:6f:d7:c7:f5:87:f0:95:dd:38:90:7d:
56:30:79:e8:7f:98:d8:78:95:40:c9:7f:92:21:5f:5a:79:f9:
b6:53:aa:b0:c7:c5:6d:97:2e:76:e1:62:dd:35:ad:9a:f6:e5:
4a:cb:7d:e7:00:f5:6a:17:00:02:c5:aa:24:39:cc:7c:75:04:
b1:f8:27:4a:ab:17:48:f0:27:f7:ea:a1:38:93:12:e6:d4:43:
89:8a:f6:01:b7:10:15:06:34:c4:ed:79:82:1a:de:7e:16:7f:
6b:e5:b5:62:d1:86:a2:9f:0d:23:27:69:eb:b7:56:73:3c:57:
d5:71:13:bb:bc:ec:95:ab:e5:0a:b8:6e:e9:60:db:1b:8d:50:
b9:e9:c1:7e:d8:f0:26:46:5b:2c:82:dd:e8:af:a8:6e:e8:19:
93:6d:98:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkESLdhvM7J9zhCyRJZAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGVjYTNiY2NkNGU1YzJlZmIzNjA4ZWU4M2E1N2Y5YWU4
MjFiZTYwHhcNMjYwNTEyMTkwMDU0WhcNMjYwNTEzMTkwMDU0WjAzMTEwLwYDVQQD
EyhmZjJjYjkzZDcxYzc1MzEwNTI0YTk0N2YxNzgyMGFhMTU4ZGFmYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn54ibsytM0dntMO4lfF5xy2kFUYU
x0Pm48pfFYFRwlgZSeocKFPrMuCXy/oYJuEl4hZAn6M9/8fezg+AdgdYPa+A3w4N
oCbpM6m4oeRSayHuI/juLBzvesoFqLKC/NgiJbQ+mP5wVVR5x3w7ucRTIzidrJS0
GD4Xx+/yeq0ArSDoAUMQfsI/6ciomKIX6/LQICpOtGZj4uXuA34tUolwMugS5nyz
NSccIdDb08TXwyUsmsz8az1u0n9L6U/xFaclY0ByaPu+Je0C+pPC4ShcjLWvK8Mz
pDaJBGcMaxf7pMxteLZuGdFV32DHEobt0pHIyuoawV/ke99rlDY6Pjw3JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8suT1xx1MQUkqUfxeCCqFY2vtIMB8GA1UdIwQY
MBaAFIeOyjvM1OXC77Ngjug6V/mughvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYt
NTlhMGM1ZmY2NTA1LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hYjJiMTAtNWU4Ny00NjI0LTk3NzYtNTlhMGM1ZmY2NTA1
LzEvaDQ3S084elU1Y0x2czJDTzZEcFgtYTZDRy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaI57eHn
/++xeWsMHKedfKwOwGVPC+10JUKwJ6gtuwxtI5l5vUOsXWfFBEjGlfkXI6cyY1s7
yjqd2npO8XjnfsmrgJmE8sBGcy/8zcf9G9E37a0/LPz8bfcVJiCqet9R7W/Xx/WH
8JXdOJB9VjB56H+Y2HiVQMl/kiFfWnn5tlOqsMfFbZcuduFi3TWtmvblSst95wD1
ahcAAsWqJDnMfHUEsfgnSqsXSPAn9+qhOJMS5tRDiYr2AbcQFQY0xO15ghrefhZ/
a+W1YtGGop8NIydp67dWczxX1XETu7zslavlCrhu6WDbG41QuenBftjwJkZbLILd
6K+obugZk22YHQ==
-----END CERTIFICATE-----
Generated at Wed May 13 06:49:55 2026 by rpki-client