Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: BU3+EJGy91Lh8pTOKkg905XcOlQzHW4eQAcvYE150io=
Subject key identifier: 82:F3:CF:9B:C4:E3:FC:2C:9C:A2:28:D8:D7:4D:57:7A:D7:B7:AE:EC
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019E1DFED5655B88D3FEC4A15F9BBDBBBBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0FDA
Signing time: Tue 12 May 2026 21:01:40 +0000
Manifest this update: Tue 12 May 2026 21:01:40 +0000
Manifest next update: Wed 13 May 2026 21:01:40 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: C+VpZTvg61Xq64wGlS4LsMYoEDLdEqR1eJC0tx4GzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:d5:65:5b:88:d3:fe:c4:a1:5f:9b:bd:bb:bb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: May 12 21:01:40 2026 GMT
Not After : May 13 21:01:40 2026 GMT
Subject: CN=82f3cf9bc4e3fc2c9ca228d8d74d577ad7b7aeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:7c:19:77:35:5a:97:63:d3:21:a7:15:31:
6a:26:bc:07:4f:98:db:f8:3e:0c:50:67:a2:81:d9:
d7:49:01:dd:5e:4c:74:85:8b:ec:83:8e:de:65:87:
39:24:cd:8c:d1:3e:16:38:61:d8:62:7e:68:36:cf:
aa:5a:4b:9e:0b:3a:36:b0:e1:b0:da:82:1c:e7:be:
23:d8:cb:fe:2a:79:ab:3d:fa:de:c0:ee:09:31:7b:
d1:03:52:e4:0f:5c:a2:0f:fc:fd:46:b0:39:9d:f0:
da:67:2e:20:b5:61:94:cb:58:28:54:f4:c8:de:0c:
d7:7a:bb:36:68:00:f8:59:d3:9d:cd:62:14:fd:b4:
de:c4:f7:fb:85:5a:7f:26:a8:8a:b6:8e:e6:ee:dc:
98:92:5c:b6:8e:c4:b6:65:07:f5:f6:97:f7:41:75:
70:f7:0a:de:d5:3f:e8:e8:bc:9c:06:f4:a1:e9:a9:
ce:9f:09:f5:b9:22:8c:d4:8b:ed:f1:ad:ff:5d:11:
55:fc:20:c5:4d:01:86:45:e5:c6:af:45:12:15:ab:
21:b2:94:b4:05:51:26:4a:fe:d8:f3:1b:78:88:27:
42:17:a2:f7:88:d2:f9:83:e4:e6:c8:28:1c:72:11:
81:df:f8:25:33:f3:21:9f:56:41:c3:26:4c:7e:81:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F3:CF:9B:C4:E3:FC:2C:9C:A2:28:D8:D7:4D:57:7A:D7:B7:AE:EC
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:fc:29:c5:e3:42:52:fc:1e:e3:d0:df:5d:cd:01:19:1b:
46:83:eb:2b:90:72:64:cb:02:cc:b3:de:aa:ce:4f:4e:f1:4e:
53:52:36:3d:76:a6:99:12:de:16:89:e0:3b:8d:b2:01:8a:fc:
c4:fd:18:19:c7:11:9c:e0:8f:06:aa:27:72:cd:01:a1:5c:12:
0a:35:f1:4c:59:d7:6b:9c:5e:52:51:2b:f6:83:ed:09:c8:75:
f5:19:12:67:f5:03:b5:d4:76:82:5c:bb:e5:34:d3:c3:20:85:
96:18:fc:d4:98:89:67:26:ed:40:76:b8:1d:af:91:19:9a:4e:
38:d2:42:a8:26:ae:f8:ea:91:d4:d0:d6:fb:d8:88:20:97:7c:
ce:d3:3f:bc:81:47:b0:13:ae:9a:ca:64:37:08:29:5d:f1:09:
8a:ac:4e:59:bc:fc:52:20:9e:26:c3:8d:69:a0:f7:6c:59:ee:
48:4f:ca:5f:d8:0e:6b:40:eb:36:21:45:a5:66:cc:4f:94:1b:
db:b5:c3:94:66:19:fa:fa:95:38:08:97:86:9e:94:15:53:7e:
6f:30:79:94:40:60:01:a9:95:3a:a8:f2:a7:72:78:cc:a8:da:
77:6b:e1:8f:92:c3:c0:b3:c3:64:3c:e3:73:f0:35:ee:f6:64:
8d:b9:f2:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/tVlW4jT/sShX5u9u7vYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjYwNTEyMjEwMTQwWhcNMjYwNTEzMjEwMTQwWjAzMTEwLwYDVQQD
Eyg4MmYzY2Y5YmM0ZTNmYzJjOWNhMjI4ZDhkNzRkNTc3YWQ3YjdhZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1B8GXc1Wpdj0yGnFTFqJrwHT5jb
+D4MUGeigdnXSQHdXkx0hYvsg47eZYc5JM2M0T4WOGHYYn5oNs+qWkueCzo2sOGw
2oIc574j2Mv+KnmrPfrewO4JMXvRA1LkD1yiD/z9RrA5nfDaZy4gtWGUy1goVPTI
3gzXers2aAD4WdOdzWIU/bTexPf7hVp/JqiKto7m7tyYkly2jsS2ZQf19pf3QXVw
9wre1T/o6LycBvSh6anOnwn1uSKM1Ivt8a3/XRFV/CDFTQGGReXGr0USFashspS0
BVEmSv7Y8xt4iCdCF6L3iNL5g+TmyCgcchGB3/glM/Mhn1ZBwyZMfoENLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILzz5vE4/wsnKIo2NdNV3rXt67sMB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNz8KcXj
QlL8HuPQ313NARkbRoPrK5ByZMsCzLPeqs5PTvFOU1I2PXammRLeFongO42yAYr8
xP0YGccRnOCPBqoncs0BoVwSCjXxTFnXa5xeUlEr9oPtCch19RkSZ/UDtdR2gly7
5TTTwyCFlhj81JiJZybtQHa4Ha+RGZpOONJCqCau+OqR1NDW+9iIIJd8ztM/vIFH
sBOumspkNwgpXfEJiqxOWbz8UiCeJsONaaD3bFnuSE/KX9gOa0DrNiFFpWbMT5Qb
27XDlGYZ+vqVOAiXhp6UFVN+bzB5lEBgAamVOqjyp3J4zKjad2vhj5LDwLPDZDzj
c/A17vZkjbny6g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:30:25 2026 by rpki-client