
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: xRR8WWj9UHa3adTRgaaGbIrSufMYKjkxwGyRyaJHF54=
Subject key identifier: FE:BE:4E:C5:CB:32:10:D5:7A:A4:34:0A:51:4E:C3:B9:8C:95:2C:35
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019E1C47413B44D9CA2B9FA70975A2D3B263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0C61
Signing time: Tue 12 May 2026 13:01:32 +0000
Manifest this update: Tue 12 May 2026 13:01:32 +0000
Manifest next update: Wed 13 May 2026 13:01:32 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: zqOlP0GJWNn6wR6Ivspe65H+dPlYxVGTdSNj26bldKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:41:3b:44:d9:ca:2b:9f:a7:09:75:a2:d3:b2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: May 12 13:01:32 2026 GMT
Not After : May 13 13:01:32 2026 GMT
Subject: CN=febe4ec5cb3210d57aa4340a514ec3b98c952c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:86:e5:47:69:40:79:14:b9:eb:06:1c:b5:
f3:a1:92:3a:ed:02:be:23:8e:e6:fe:9a:a2:fa:20:
51:d4:e7:bd:df:2a:3a:b5:a3:5c:78:20:f1:ba:1c:
f1:1e:39:27:5b:30:74:18:8c:d8:2e:85:af:a0:90:
d1:52:0b:ec:57:e7:27:31:ee:4d:da:1c:4d:ed:61:
1e:26:5c:38:4d:59:0f:65:da:90:34:b2:a3:9e:1f:
44:d5:c3:db:bc:da:ab:28:c4:fd:1c:86:13:13:d7:
e6:e5:8b:ba:d2:ff:55:4d:ad:64:39:e0:7c:a5:90:
79:2f:db:b9:f8:bb:36:e8:10:76:a0:12:12:15:2a:
10:55:93:9a:ec:09:22:4e:5f:d3:bc:b1:11:2d:c9:
e8:d2:b3:50:60:d5:51:18:59:fa:f9:4c:d7:03:cc:
23:0a:8a:48:53:8a:7f:c6:a7:a3:0b:5f:cc:68:98:
e9:98:95:93:cd:4c:00:da:5a:f8:b0:59:67:b5:5d:
76:ea:9a:fe:88:d5:c0:55:cf:98:f9:98:51:27:3c:
3e:9e:d6:e0:89:61:e6:5a:76:d1:44:e7:4a:10:bc:
d1:fc:1a:52:4b:66:f9:e9:2a:cb:aa:c9:90:fe:28:
eb:b0:ee:6d:94:01:a7:2c:cf:25:f3:5b:30:fb:7f:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:4E:C5:CB:32:10:D5:7A:A4:34:0A:51:4E:C3:B9:8C:95:2C:35
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:24:41:da:05:6b:78:fe:c7:fd:ec:de:f7:e5:4e:06:83:
2b:76:16:67:bf:b7:95:1f:cc:02:42:5d:6b:34:7d:b9:ec:86:
8e:c7:29:fc:53:c2:a9:1b:7e:7e:c6:26:fc:f6:78:ff:21:84:
ef:77:1d:db:7b:0a:e4:41:a2:ab:49:6f:ca:d9:99:d2:31:54:
9b:db:0e:5a:9a:aa:da:54:be:05:19:f1:b2:a7:94:28:09:d9:
b3:71:86:71:1c:56:1a:88:c4:1b:61:f9:4a:f5:7f:88:99:9f:
91:9c:8a:26:f4:c4:cc:41:18:31:b6:19:25:53:87:59:53:21:
76:fd:eb:9c:ec:f7:6f:1f:56:37:c9:87:7f:9f:a1:bc:2e:a9:
be:3f:0e:35:fc:e2:0a:c8:6e:0c:7a:7a:e9:43:8e:bd:8a:09:
1e:1e:a0:2f:29:ef:8a:be:f3:d6:7f:3b:fa:c7:38:b2:28:e4:
82:c5:cd:37:93:f8:5f:ed:09:51:5f:8f:c2:97:43:33:c4:24:
0b:fc:d5:f4:2b:56:d4:e7:39:d7:f9:10:57:5c:6e:75:15:02:
01:fb:8f:dc:89:b6:dd:b0:34:5b:c1:8c:14:e2:72:09:4a:88:
61:de:4e:30:ea:b3:76:6c:e9:40:64:4f:df:12:f7:b5:0b:45:
2b:27:e4:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR0E7RNnKK5+nCXWi07JjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjYwNTEyMTMwMTMyWhcNMjYwNTEzMTMwMTMyWjAzMTEwLwYDVQQD
EyhmZWJlNGVjNWNiMzIxMGQ1N2FhNDM0MGE1MTRlYzNiOThjOTUyYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkWG5UdpQHkUuesGHLXzoZI67QK+
I47m/pqi+iBR1Oe93yo6taNceCDxuhzxHjknWzB0GIzYLoWvoJDRUgvsV+cnMe5N
2hxN7WEeJlw4TVkPZdqQNLKjnh9E1cPbvNqrKMT9HIYTE9fm5Yu60v9VTa1kOeB8
pZB5L9u5+Ls26BB2oBISFSoQVZOa7AkiTl/TvLERLcno0rNQYNVRGFn6+UzXA8wj
CopIU4p/xqejC1/MaJjpmJWTzUwA2lr4sFlntV126pr+iNXAVc+Y+ZhRJzw+ntbg
iWHmWnbRROdKELzR/BpSS2b56SrLqsmQ/ijrsO5tlAGnLM8l81sw+3/FkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6+TsXLMhDVeqQ0ClFOw7mMlSw1MB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8okQdoF
a3j+x/3s3vflTgaDK3YWZ7+3lR/MAkJdazR9ueyGjscp/FPCqRt+fsYm/PZ4/yGE
73cd23sK5EGiq0lvytmZ0jFUm9sOWpqq2lS+BRnxsqeUKAnZs3GGcRxWGojEG2H5
SvV/iJmfkZyKJvTEzEEYMbYZJVOHWVMhdv3rnOz3bx9WN8mHf5+hvC6pvj8ONfzi
CshuDHp66UOOvYoJHh6gLynvir7z1n87+sc4sijkgsXNN5P4X+0JUV+PwpdDM8Qk
C/zV9CtW1Oc51/kQV1xudRUCAfuP3Im23bA0W8GMFOJyCUqIYd5OMOqzdmzpQGRP
3xL3tQtFKyfkwA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:49:10 2026 by rpki-client