Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: GPxXkayND3+QUczdJ3/5OKViMf0Sii26gntJn6LZ5Gs=
Subject key identifier: 55:F1:82:BD:B2:32:27:73:6E:40:30:EE:8F:A9:92:E2:A0:20:0C:77
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019E2091C716B4A1BE71AF7D799A66EFDA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 107E
Signing time: Wed 13 May 2026 09:01:24 +0000
Manifest this update: Wed 13 May 2026 09:01:24 +0000
Manifest next update: Thu 14 May 2026 09:01:24 +0000
Files and hashes: 1: WcEXb1FwWuq7CmZIR_j833VQVLg.roa (hash: YwtVclxxnke6RUqR5TUDz5Eu+w+6DwiJjWOIUuWJONU=)
2: bfREzEwR-EXPjAe3wBGoI04LV-k.roa (hash: 769fYTMFcVF5MUU/DGKAsF33sj2AY85ZIEX4Env7vD8=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: 9ayISeJ6nYeuOfaiVeGVgi5giNpPy4sP3C17ornpM1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:c7:16:b4:a1:be:71:af:7d:79:9a:66:ef:da:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: May 13 09:01:24 2026 GMT
Not After : May 14 09:01:24 2026 GMT
Subject: CN=55f182bdb23227736e4030ee8fa992e2a0200c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:2b:ce:ff:bb:37:31:40:3b:c8:bc:32:c8:
cb:fc:2e:4c:b7:c5:b6:0a:bc:b4:63:3e:43:80:bf:
f2:a9:d4:bd:ff:2f:21:04:ef:92:08:5e:64:74:00:
5a:c3:36:6e:ac:14:f9:ea:76:ad:cd:d7:c8:a9:e5:
5e:68:f1:08:b9:9d:72:a3:35:0b:dd:1b:95:54:72:
36:c4:98:6d:d1:57:d2:0f:bb:81:c9:ef:8c:95:19:
ee:00:56:0a:8a:b4:0d:de:87:ee:c0:2f:ec:dd:4b:
12:80:d3:da:5c:c9:fe:3a:5d:13:85:b7:91:cf:94:
b6:b4:a5:ba:34:bd:2c:20:7b:c1:c7:f2:b1:b7:2e:
72:b8:2f:a8:04:60:7e:a6:99:b3:42:a9:c0:bf:c5:
a6:16:89:21:51:2c:db:94:6d:73:99:46:95:ba:5b:
93:54:47:1c:cf:fb:28:3a:2c:2b:de:b7:d7:47:d6:
38:4a:e4:65:4c:74:ef:07:fb:2f:a6:c7:6a:25:11:
7f:eb:a1:11:9e:2f:a0:4b:a2:c7:15:53:f9:3e:8f:
b2:1b:5f:28:cb:77:8a:f7:52:d2:66:9b:8c:f5:95:
04:10:1f:f5:a6:04:9f:e3:9b:a7:21:64:2e:d7:9f:
9d:65:7d:0a:55:f7:65:1f:e3:76:ca:5c:2e:12:7f:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:82:BD:B2:32:27:73:6E:40:30:EE:8F:A9:92:E2:A0:20:0C:77
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:95:b9:ad:2a:e6:b8:b9:d7:5a:32:8b:b8:3a:76:0d:0f:c5:
90:1b:04:1d:e9:d6:08:05:71:1b:8a:13:7d:29:90:87:1a:4a:
9e:31:f3:e7:f5:ea:a1:af:a9:f9:22:54:6c:6f:6c:57:28:56:
34:ed:85:46:db:5d:61:96:37:4e:9c:ad:23:fb:e9:0a:ac:c6:
0d:be:33:8f:15:73:f8:25:1d:82:54:37:be:1e:0b:ca:52:5e:
fe:b7:b1:21:00:9e:4e:e7:d9:9a:b4:9f:c1:cf:34:bd:98:da:
59:7a:ce:23:8d:83:2f:35:8b:1a:1e:a4:38:1a:cc:57:85:19:
af:d0:ac:57:c3:84:13:a4:84:66:f8:57:b0:85:8f:40:04:c9:
11:80:1f:7a:68:5b:22:a4:30:8a:d2:bd:39:16:fa:8f:03:bb:
dd:76:aa:26:18:ba:ae:59:50:70:99:46:54:f7:06:97:c7:33:
e9:56:09:51:34:5d:bd:0e:50:5f:61:68:96:cd:cb:32:d7:5f:
99:24:24:f7:f9:8c:6c:48:91:8d:7a:b9:0a:1b:ae:6e:f0:0a:
5c:36:51:ca:ee:b0:b6:fb:be:82:b3:ac:61:24:fc:08:91:07:
8a:30:ba:18:b3:9b:25:12:57:d6:9a:d6:46:4f:d2:b5:7a:4d:
ec:24:02:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gkccWtKG+ca99eZpm79otMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh
ZGVhZWMwHhcNMjYwNTEzMDkwMTI0WhcNMjYwNTE0MDkwMTI0WjAzMTEwLwYDVQQD
Eyg1NWYxODJiZGIyMzIyNzczNmU0MDMwZWU4ZmE5OTJlMmEwMjAwYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhgrzv+7NzFAO8i8MsjL/C5Mt8W2
Cry0Yz5DgL/yqdS9/y8hBO+SCF5kdABawzZurBT56natzdfIqeVeaPEIuZ1yozUL
3RuVVHI2xJht0VfSD7uBye+MlRnuAFYKirQN3ofuwC/s3UsSgNPaXMn+Ol0ThbeR
z5S2tKW6NL0sIHvBx/Kxty5yuC+oBGB+ppmzQqnAv8WmFokhUSzblG1zmUaVuluT
VEccz/soOiwr3rfXR9Y4SuRlTHTvB/svpsdqJRF/66ERni+gS6LHFVP5Po+yG18o
y3eK91LSZpuM9ZUEEB/1pgSf45unIWQu15+dZX0KVfdlH+N2ylwuEn86zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXxgr2yMidzbkAw7o+pkuKgIAx3MB8GA1UdIwQY
MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt
ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj
LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZW5rSrm
uLnXWjKLuDp2DQ/FkBsEHenWCAVxG4oTfSmQhxpKnjHz5/Xqoa+p+SJUbG9sVyhW
NO2FRttdYZY3TpytI/vpCqzGDb4zjxVz+CUdglQ3vh4LylJe/rexIQCeTufZmrSf
wc80vZjaWXrOI42DLzWLGh6kOBrMV4UZr9CsV8OEE6SEZvhXsIWPQATJEYAfemhb
IqQwitK9ORb6jwO73XaqJhi6rllQcJlGVPcGl8cz6VYJUTRdvQ5QX2Fols3LMtdf
mSQk9/mMbEiRjXq5ChuubvAKXDZRyu6wtvu+grOsYST8CJEHijC6GLObJRJX1prW
Rk/StXpN7CQC+A==
-----END CERTIFICATE-----
Generated at Wed May 13 18:26:56 2026 by rpki-client