Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: +jT92VBVoI/UfkpGO6TybPQb3yxH5GjpxdQCbFWKBH8=
Subject key identifier: 52:BB:91:62:D6:F1:5E:73:46:BA:1D:55:CB:7C:C8:94:91:FE:20:DE
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 019E20C88B7855E0846E7E2BDEF76C7B0CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 10:01:14 +0000
Manifest this update: Wed 13 May 2026 10:01:14 +0000
Manifest next update: Thu 14 May 2026 10:01:14 +0000
Files and hashes: 1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: K/EYxqByDmsuO8Pj7mvqsW1rAERro54t0I9uRvfHIm8=)
2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:8b:78:55:e0:84:6e:7e:2b:de:f7:6c:7b:0c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: May 13 10:01:14 2026 GMT
Not After : May 14 10:01:14 2026 GMT
Subject: CN=52bb9162d6f15e7346ba1d55cb7cc89491fe20de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:87:72:41:b3:cd:1f:07:29:25:b6:ac:41:
24:95:30:54:f2:bd:37:56:8a:46:e3:d9:b7:f8:58:
d1:b7:bf:37:50:38:d3:c8:e6:91:3e:a6:89:df:d2:
56:ee:a1:8f:0f:0f:f4:cc:86:97:d2:cd:d1:72:2b:
53:ab:b2:25:87:91:92:7d:4e:d3:48:28:1d:7f:38:
e6:fd:29:a1:7f:6e:56:73:0b:21:d5:e7:48:dd:2e:
07:93:65:82:5b:87:7f:e6:6e:6d:4e:fa:6c:54:76:
ea:e1:24:85:45:cc:97:33:a2:e5:b6:f1:b9:4a:51:
ab:0b:66:ab:9f:3c:98:cd:ac:8b:55:f1:ef:89:d1:
f2:2d:7a:be:3c:ad:41:b1:e4:ff:67:57:65:94:5c:
d4:a8:a4:7f:e6:30:4e:22:5f:32:13:c3:66:b8:08:
ee:e6:01:73:bb:7c:c1:f6:1a:48:5f:af:16:47:65:
16:68:22:8c:5a:e6:79:4c:45:19:68:11:ba:6e:a8:
91:b0:c2:1a:d3:76:e5:6e:a8:10:5d:0b:bd:30:7e:
8d:97:18:ee:0a:f3:62:b9:b7:f7:34:b5:f1:fc:50:
61:e9:f9:3b:76:80:82:30:af:48:c4:7a:11:45:23:
eb:39:5b:89:a8:c6:6c:dc:38:a2:d3:e8:e0:0f:9e:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:91:62:D6:F1:5E:73:46:BA:1D:55:CB:7C:C8:94:91:FE:20:DE
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:97:ec:91:5f:24:71:0c:58:fc:f3:52:bf:f2:6f:f9:c8:cf:
91:2d:6a:1e:d4:59:de:79:b3:40:e2:4a:98:cb:50:b7:9a:a6:
23:d1:27:a7:99:bb:32:6a:eb:a4:65:c1:4e:98:70:b9:4d:12:
93:34:47:f6:22:da:0d:bb:27:e2:f7:da:24:e6:72:40:86:af:
d4:4e:e1:db:c0:68:5b:fa:77:09:87:3d:4a:45:e3:ed:17:91:
0f:ec:b0:80:96:d9:2d:d8:f9:02:4a:d4:b5:ba:59:46:ca:ad:
9d:80:d3:42:4c:40:58:90:c8:cf:e6:20:87:fb:e2:c4:1f:9a:
e5:68:b4:77:bb:e4:24:37:69:06:bf:c3:85:55:e6:34:06:ce:
e6:19:0b:fe:af:c3:64:fd:1f:dc:81:01:bf:51:cb:81:a5:6f:
a6:06:f0:79:02:42:c6:c6:42:92:79:1d:50:bc:b2:7d:96:17:
85:8a:cc:dc:23:8f:dd:3f:9f:1e:c8:4c:cd:9b:b9:c7:1b:e5:
99:e3:01:77:ae:d4:01:a7:76:6e:c1:00:b9:fa:5b:2b:23:be:
32:21:b4:01:ec:68:1d:af:67:2a:91:af:98:10:4a:69:71:05:
d7:cf:68:d3:bd:45:ff:ec:0b:c7:33:db:85:83:5a:93:3a:3c:
94:c1:42:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gyIt4VeCEbn4r3vdsewzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl
NzA5NzkwHhcNMjYwNTEzMTAwMTE0WhcNMjYwNTE0MTAwMTE0WjAzMTEwLwYDVQQD
Eyg1MmJiOTE2MmQ2ZjE1ZTczNDZiYTFkNTVjYjdjYzg5NDkxZmUyMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpaHckGzzR8HKSW2rEEklTBU8r03
VopG49m3+FjRt783UDjTyOaRPqaJ39JW7qGPDw/0zIaX0s3RcitTq7Ilh5GSfU7T
SCgdfzjm/Smhf25Wcwsh1edI3S4Hk2WCW4d/5m5tTvpsVHbq4SSFRcyXM6LltvG5
SlGrC2arnzyYzayLVfHvidHyLXq+PK1BseT/Z1dllFzUqKR/5jBOIl8yE8NmuAju
5gFzu3zB9hpIX68WR2UWaCKMWuZ5TEUZaBG6bqiRsMIa03blbqgQXQu9MH6Nlxju
CvNiubf3NLXx/FBh6fk7doCCMK9IxHoRRSPrOVuJqMZs3Dii0+jgD5469QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFK7kWLW8V5zRrodVct8yJSR/iDeMB8GA1UdIwQY
MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt
MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw
LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpfskV8k
cQxY/PNSv/Jv+cjPkS1qHtRZ3nmzQOJKmMtQt5qmI9Enp5m7MmrrpGXBTphwuU0S
kzRH9iLaDbsn4vfaJOZyQIav1E7h28BoW/p3CYc9SkXj7ReRD+ywgJbZLdj5AkrU
tbpZRsqtnYDTQkxAWJDIz+Ygh/vixB+a5Wi0d7vkJDdpBr/DhVXmNAbO5hkL/q/D
ZP0f3IEBv1HLgaVvpgbweQJCxsZCknkdULyyfZYXhYrM3COP3T+fHshMzZu5xxvl
meMBd67UAad2bsEAufpbKyO+MiG0AexoHa9nKpGvmBBKaXEF189o071F/+wLxzPb
hYNakzo8lMFCfA==
-----END CERTIFICATE-----
Generated at Wed May 13 13:52:17 2026 by rpki-client