Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: g7AADokKk+YAPcflhkfGK5qu5FMfl0FHVbVqq2vlFk0=
Subject key identifier: 5C:D9:FF:EF:51:BA:BD:26:3A:25:CC:19:3B:8A:F1:B6:09:63:6D:8D
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 019E1DFE76BF0006B7822D261EB8D118F600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 1838
Signing time: Tue 12 May 2026 21:01:16 +0000
Manifest this update: Tue 12 May 2026 21:01:16 +0000
Manifest next update: Wed 13 May 2026 21:01:16 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: iP20iarUu5J9PI1aUSpGJXZJbxS07U3xm/L70ErP/Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:76:bf:00:06:b7:82:2d:26:1e:b8:d1:18:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: May 12 21:01:16 2026 GMT
Not After : May 13 21:01:16 2026 GMT
Subject: CN=5cd9ffef51babd263a25cc193b8af1b609636d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:58:b9:4b:20:4c:35:10:86:69:94:37:7e:
61:94:1d:91:16:30:45:26:f4:bb:36:67:30:84:da:
87:2c:a7:76:b3:84:d2:13:bd:ea:64:46:e1:fb:f5:
7b:87:a9:ee:02:55:92:13:2c:91:c4:8b:6b:52:78:
be:1f:4b:fa:87:02:7d:19:45:b7:67:29:39:1d:af:
a0:80:77:fd:ec:12:23:3b:64:a1:81:bb:52:15:8f:
e6:69:78:d4:e4:17:44:5a:7e:58:19:be:0a:0d:6e:
30:fd:73:56:18:2e:05:20:32:49:9e:ea:e3:ba:65:
cf:ad:9b:e6:ae:79:37:bc:f7:2d:79:da:95:eb:b6:
b2:ac:bb:08:eb:e4:d1:56:13:27:ad:2a:31:27:ce:
91:ec:80:01:b4:d9:2a:aa:88:05:93:c8:ba:e0:ea:
e5:eb:ab:06:6b:25:a8:38:8a:9f:06:0f:75:1b:a2:
f6:93:e8:8a:4b:74:c1:af:fa:c4:35:4b:b4:db:dc:
ec:18:23:b9:64:98:f4:c1:70:da:e2:2a:2c:25:be:
45:44:cd:59:52:e3:94:72:15:00:f9:47:ea:09:ec:
51:8a:da:ca:bd:a7:fb:16:63:8c:e7:79:45:ce:43:
b0:a4:a7:c0:f1:b5:f0:06:ec:24:69:9d:68:17:7b:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D9:FF:EF:51:BA:BD:26:3A:25:CC:19:3B:8A:F1:B6:09:63:6D:8D
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ce:97:3e:67:9e:51:c6:9b:39:9f:6d:34:24:c9:22:45:5b:
d9:59:46:b6:16:3e:31:e6:fb:cd:49:21:20:64:a9:46:bf:a0:
80:52:11:38:a6:9c:ff:df:cd:0b:71:85:5c:ab:fe:bb:25:5e:
41:99:54:cc:ed:3d:56:b6:c7:98:a9:35:c7:5f:a2:8e:af:76:
96:c2:84:60:d4:1c:ff:ea:51:6f:04:59:49:8d:38:28:7a:d5:
13:eb:8b:32:81:fa:aa:70:ad:64:a4:73:7c:6c:5d:ba:06:76:
de:ae:58:bc:9e:73:cd:bf:6d:19:04:23:0d:9c:b8:ec:43:23:
03:08:42:1a:95:df:9c:92:99:bc:58:78:5c:e1:19:29:ed:57:
31:91:bd:b6:a4:df:69:cd:c2:06:f6:19:e5:f7:59:2a:c4:9d:
da:d3:3e:48:63:37:58:21:4d:1a:f9:d5:ad:ed:50:3f:b6:3d:
9d:81:5c:94:46:12:d8:34:8e:10:1d:88:3b:d3:43:94:60:ec:
ff:7b:2e:1c:a6:40:bf:7b:59:bb:68:73:3a:a2:08:b2:f1:eb:
42:ac:48:b2:16:e0:4c:65:54:da:6a:44:86:95:9e:02:00:b1:
fb:da:2a:f6:1d:ce:ca:dd:2e:0b:40:8c:c3:d7:db:a3:e3:7b:
1b:ab:93:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/na/AAa3gi0mHrjRGPYAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzODllNzAzNWIwOGUxODFhMzQxZjM3ZWRhNzM0M2QyM2Yx
Y2FmYTQwHhcNMjYwNTEyMjEwMTE2WhcNMjYwNTEzMjEwMTE2WjAzMTEwLwYDVQQD
Eyg1Y2Q5ZmZlZjUxYmFiZDI2M2EyNWNjMTkzYjhhZjFiNjA5NjM2ZDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0tYuUsgTDUQhmmUN35hlB2RFjBF
JvS7NmcwhNqHLKd2s4TSE73qZEbh+/V7h6nuAlWSEyyRxItrUni+H0v6hwJ9GUW3
Zyk5Ha+ggHf97BIjO2ShgbtSFY/maXjU5BdEWn5YGb4KDW4w/XNWGC4FIDJJnurj
umXPrZvmrnk3vPctedqV67ayrLsI6+TRVhMnrSoxJ86R7IABtNkqqogFk8i64Orl
66sGayWoOIqfBg91G6L2k+iKS3TBr/rENUu029zsGCO5ZJj0wXDa4iosJb5FRM1Z
UuOUchUA+UfqCexRitrKvaf7FmOM53lFzkOwpKfA8bXwBuwkaZ1oF3uWlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzZ/+9Rur0mOiXMGTuK8bYJY22NMB8GA1UdIwQY
MBaAFKOJ5wNbCOGBo0HzftpzQ9I/HK+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWIt
MGU3MjQxNmI0ZGM3LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mMDUzY2QtMWQ3OS00M2ExLTlhYWItMGU3MjQxNmI0ZGM3
LzEvbzRubkExc0k0WUdqUWZOLTJuTkQwajhjcjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe86XPmee
UcabOZ9tNCTJIkVb2VlGthY+Meb7zUkhIGSpRr+ggFIROKac/9/NC3GFXKv+uyVe
QZlUzO09VrbHmKk1x1+ijq92lsKEYNQc/+pRbwRZSY04KHrVE+uLMoH6qnCtZKRz
fGxdugZ23q5YvJ5zzb9tGQQjDZy47EMjAwhCGpXfnJKZvFh4XOEZKe1XMZG9tqTf
ac3CBvYZ5fdZKsSd2tM+SGM3WCFNGvnVre1QP7Y9nYFclEYS2DSOEB2IO9NDlGDs
/3suHKZAv3tZu2hzOqIIsvHrQqxIshbgTGVU2mpEhpWeAgCx+9oq9h3Oyt0uC0CM
w9fbo+N7G6uTUg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:25:43 2026 by rpki-client