Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
File: 04nufcekvqjSach0bP59NhmNIh4.mft (raw, json)
Hash identifier: 2Geom2C1FLXXR6aUAptHrxNUoA9bItP5LMQaVThrjSY=
Subject key identifier: F1:76:74:23:98:F2:CA:99:6B:08:A0:66:D8:2F:61:49:B8:A0:0F:8A
Authority key identifier: D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
Certificate issuer: /CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Certificate serial: 019E1D5983F78601104F92598B5E23C9A381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
Manifest number: 0131
Signing time: Tue 12 May 2026 18:01:06 +0000
Manifest this update: Tue 12 May 2026 18:01:06 +0000
Manifest next update: Wed 13 May 2026 18:01:06 +0000
Files and hashes: 1: 04nufcekvqjSach0bP59NhmNIh4.crl (hash: UoXwjZPOqF6KrNBI+ePaTkngGcxbqJDNt688pQ19btA=)
2: DMYjGVXF04RFwUn6UCWXk-mgrnQ.roa (hash: 1IKdEVdxinUDX4GEoCU9iDa0wsb9FYEO+VbnWoVZHRQ=)
3: uldmgPFlTuQeBt-ipePLSPYN-eI.asa (hash: kElPpLT8qkmreugOZZKYSI8vXfLFDf0CKmt+bqNFxbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:83:f7:86:01:10:4f:92:59:8b:5e:23:c9:a3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389ee7dc7a4bea8d269c8746cfe7d36198d221e
Validity
Not Before: May 12 18:01:06 2026 GMT
Not After : May 13 18:01:06 2026 GMT
Subject: CN=f176742398f2ca996b08a066d82f6149b8a00f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:9d:51:19:8d:27:b9:43:1b:93:69:d8:5b:
09:da:35:13:c5:38:28:92:e8:ff:da:fb:1f:54:f1:
ed:87:b2:35:95:b7:8d:17:1a:3d:59:ad:48:d8:51:
c0:e9:f4:93:8e:87:a0:9f:d4:91:02:1d:33:7a:56:
3d:d6:25:f9:1a:d9:30:f1:11:09:f7:b5:49:1d:fe:
ac:fc:3b:a1:50:19:f0:1e:55:a5:fe:cf:d2:00:9c:
35:2e:31:5a:11:0e:3c:d5:04:39:e1:fd:82:f7:06:
47:97:dd:7d:ad:86:f2:7a:ae:8f:55:3a:39:6d:c0:
5b:cd:47:93:3b:9d:06:54:83:eb:69:65:81:de:b8:
62:c7:c5:cd:97:86:24:73:13:e3:3d:10:78:cd:c8:
05:5f:74:0a:10:e2:dc:b9:1f:d5:8d:89:84:91:9b:
c9:87:fc:5d:db:67:fb:90:20:88:87:74:5f:25:ac:
77:65:26:f1:21:b6:60:87:fa:50:40:30:d4:41:c7:
e5:84:11:e6:ef:04:63:56:6d:b7:c7:8d:8b:7a:8b:
b8:f6:66:86:c0:c3:e1:04:03:12:79:d2:29:ea:6d:
6d:83:ed:76:de:db:98:99:21:cc:25:80:4e:a6:25:
a4:cb:91:7d:e2:d8:a6:c0:6a:7b:ef:90:86:3d:5d:
d4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:76:74:23:98:F2:CA:99:6B:08:A0:66:D8:2F:61:49:B8:A0:0F:8A
X509v3 Authority Key Identifier:
keyid:D3:89:EE:7D:C7:A4:BE:A8:D2:69:C8:74:6C:FE:7D:36:19:8D:22:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04nufcekvqjSach0bP59NhmNIh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/338fc0-7025-49ea-a52d-21b034c2f8dc/1/04nufcekvqjSach0bP59NhmNIh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:09:6e:76:9e:c2:16:1e:f5:a4:1c:ac:d3:ac:1b:ed:02:7b:
54:77:bd:27:e9:9f:6c:d8:3b:46:82:2e:ab:d0:42:0c:2c:b8:
fd:d0:c8:6f:b4:0e:3f:ea:6e:de:63:10:1b:c0:15:48:bc:b7:
a7:bc:f4:7b:97:33:31:91:19:d3:72:cf:f8:6d:3c:db:25:ca:
7b:01:c3:17:2f:92:f7:fd:6c:fb:be:00:3a:12:f5:dd:b8:f2:
b8:70:15:7b:55:13:08:aa:85:03:05:a5:f7:37:c5:7d:e9:be:
a4:99:c8:ec:1e:24:d9:38:73:30:64:22:7b:a6:19:af:3d:bc:
52:7f:e1:bf:54:82:00:f8:5e:ba:14:ab:d4:46:af:f5:27:63:
3f:5e:a7:be:c4:7a:57:0c:3f:00:c3:35:b0:50:e8:8a:d6:06:
7e:ce:1a:f4:71:32:1f:29:5a:4d:fb:d5:12:f4:f7:c5:a9:4f:
b4:ca:73:39:10:36:5d:be:af:da:b2:01:40:78:9a:4d:76:10:
48:cb:b0:a1:c9:6a:87:db:98:47:44:7d:7e:dd:25:6e:29:50:
3e:04:b7:fe:43:2a:63:4f:89:e8:ef:a8:4a:ce:30:8b:94:4e:
bb:a3:99:3e:0f:fb:f9:a3:4b:35:b9:52:00:97:9e:5b:a7:53:
41:27:f9:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWYP3hgEQT5JZi14jyaOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzODllZTdkYzdhNGJlYThkMjY5Yzg3NDZjZmU3ZDM2MTk4
ZDIyMWUwHhcNMjYwNTEyMTgwMTA2WhcNMjYwNTEzMTgwMTA2WjAzMTEwLwYDVQQD
EyhmMTc2NzQyMzk4ZjJjYTk5NmIwOGEwNjZkODJmNjE0OWI4YTAwZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuydURmNJ7lDG5Np2FsJ2jUTxTgo
kuj/2vsfVPHth7I1lbeNFxo9Wa1I2FHA6fSTjoegn9SRAh0zelY91iX5Gtkw8REJ
97VJHf6s/DuhUBnwHlWl/s/SAJw1LjFaEQ481QQ54f2C9wZHl919rYbyeq6PVTo5
bcBbzUeTO50GVIPraWWB3rhix8XNl4YkcxPjPRB4zcgFX3QKEOLcuR/VjYmEkZvJ
h/xd22f7kCCIh3RfJax3ZSbxIbZgh/pQQDDUQcflhBHm7wRjVm23x42Leou49maG
wMPhBAMSedIp6m1tg+123tuYmSHMJYBOpiWky5F94timwGp775CGPV3UPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF2dCOY8sqZawigZtgvYUm4oA+KMB8GA1UdIwQY
MBaAFNOJ7n3HpL6o0mnIdGz+fTYZjSIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQt
MjFiMDM0YzJmOGRjLzEvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zMzhmYzAtNzAyNS00OWVhLWE1MmQtMjFiMDM0YzJmOGRj
LzEvMDRudWZjZWt2cWpTYWNoMGJQNTlOaG1OSWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgludp7C
Fh71pBys06wb7QJ7VHe9J+mfbNg7RoIuq9BCDCy4/dDIb7QOP+pu3mMQG8AVSLy3
p7z0e5czMZEZ03LP+G082yXKewHDFy+S9/1s+74AOhL13bjyuHAVe1UTCKqFAwWl
9zfFfem+pJnI7B4k2ThzMGQie6YZrz28Un/hv1SCAPheuhSr1Eav9SdjP16nvsR6
Vww/AMM1sFDoitYGfs4a9HEyHylaTfvVEvT3xalPtMpzORA2Xb6v2rIBQHiaTXYQ
SMuwoclqh9uYR0R9ft0lbilQPgS3/kMqY0+J6O+oSs4wi5ROu6OZPg/7+aNLNblS
AJeeW6dTQSf5Pw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:27 2026 by rpki-client