Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: uBXGtB8VuhqyanFAR00lzlFc1epjyxHnL9hJTVYpYl8=
Subject key identifier: 43:8B:E4:A1:EC:8B:A5:F5:6B:1B:81:84:77:1C:F1:C9:C3:34:83:B1
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019E1EA3F6F184B936066A47745D0587C761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 0685
Signing time: Wed 13 May 2026 00:02:02 +0000
Manifest this update: Wed 13 May 2026 00:02:02 +0000
Manifest next update: Thu 14 May 2026 00:02:02 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: 5zKd+CLg3PBKx+VHMwIwXIsNNuaSH1iO/HQWHSS2RT0=)
2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:f6:f1:84:b9:36:06:6a:47:74:5d:05:87:c7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: May 13 00:02:02 2026 GMT
Not After : May 14 00:02:02 2026 GMT
Subject: CN=438be4a1ec8ba5f56b1b8184771cf1c9c33483b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:70:d5:52:52:c2:26:b8:42:22:01:39:3c:
8e:8b:f0:0e:4a:3a:ae:23:a6:9f:c7:6b:40:5f:6f:
03:42:4d:ac:89:f2:80:59:89:62:2e:91:52:63:ca:
cd:a1:e3:99:c4:b7:94:04:80:80:2b:97:1d:b9:7e:
b8:83:31:b2:82:6b:b0:50:03:1e:9a:0e:ec:08:29:
1d:04:f6:5d:26:29:e8:51:91:e7:ba:e5:f5:bf:d7:
e2:6b:0c:63:86:3d:57:1c:60:b1:ac:33:60:6c:62:
71:e8:73:86:7a:d5:b5:bf:6d:f5:71:ab:4f:d9:1b:
9d:24:f5:8d:3e:2f:50:19:dc:f9:1e:99:d3:7c:63:
36:3e:2e:52:db:a9:ed:a9:f6:8d:24:9a:23:35:a6:
2c:1d:83:c8:c5:88:88:bb:a2:14:db:0e:36:92:a8:
f9:3a:32:d5:6c:df:3e:ff:71:3e:ca:9b:21:64:ca:
f4:e7:ec:93:7d:c2:43:72:83:48:ef:04:cf:d7:fc:
de:b5:07:a7:b1:8c:a1:bb:0f:de:3e:40:47:55:d4:
91:3c:f9:60:72:d1:1a:d9:fd:70:02:5e:38:40:5d:
56:b5:c6:ac:ae:38:2a:88:49:e8:2e:9d:0b:31:6e:
50:d5:c2:36:33:f1:2d:83:1b:c1:dc:d5:6d:63:6a:
bb:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:E4:A1:EC:8B:A5:F5:6B:1B:81:84:77:1C:F1:C9:C3:34:83:B1
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3d:8a:27:18:f5:87:64:50:de:bc:72:86:73:f6:98:2e:b8:
73:4a:44:a9:53:a7:bf:b9:56:bd:fd:39:e7:70:a9:1e:a0:fa:
f1:4d:f5:1e:a5:16:67:42:58:a1:c9:c1:e3:e5:9a:38:83:d1:
49:44:d9:3d:41:67:dc:b1:fd:75:79:67:e5:37:d7:6e:56:2c:
ea:ce:13:71:8e:8f:11:a7:6f:1c:7b:f7:46:96:c9:a0:a8:84:
2e:3e:4e:e0:b7:54:24:01:c4:e7:d1:c8:55:1d:7c:95:fa:2a:
50:00:da:63:3c:d1:05:82:72:05:e6:56:16:72:fc:4e:a8:39:
54:9a:40:e3:dc:ec:58:27:ef:5d:a8:68:69:6e:a2:72:d5:19:
ff:d1:e8:cb:64:34:4d:ff:df:38:66:73:35:e1:7a:d9:29:03:
e5:e3:c9:c4:05:7b:e2:7c:bc:d0:0c:fd:e3:61:f4:9b:eb:77:
f5:73:2a:a5:79:59:18:1f:e3:9d:5d:89:df:c9:42:cd:1f:9a:
5f:23:79:e0:93:fe:f2:d2:ac:74:3b:6c:8e:60:ec:c3:5f:68:
a9:6d:b0:60:70:45:cf:f6:5a:1d:17:95:21:77:b9:66:9c:61:
68:e6:4e:21:78:ee:de:27:b3:d3:0d:33:07:f3:e3:84:65:b4:
a2:b8:42:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo/bxhLk2BmpHdF0Fh8dhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi
OWQzYWIwHhcNMjYwNTEzMDAwMjAyWhcNMjYwNTE0MDAwMjAyWjAzMTEwLwYDVQQD
Eyg0MzhiZTRhMWVjOGJhNWY1NmIxYjgxODQ3NzFjZjFjOWMzMzQ4M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO1w1VJSwia4QiIBOTyOi/AOSjqu
I6afx2tAX28DQk2sifKAWYliLpFSY8rNoeOZxLeUBICAK5cduX64gzGygmuwUAMe
mg7sCCkdBPZdJinoUZHnuuX1v9fiawxjhj1XHGCxrDNgbGJx6HOGetW1v231catP
2RudJPWNPi9QGdz5HpnTfGM2Pi5S26ntqfaNJJojNaYsHYPIxYiIu6IU2w42kqj5
OjLVbN8+/3E+ypshZMr05+yTfcJDcoNI7wTP1/zetQensYyhuw/ePkBHVdSRPPlg
ctEa2f1wAl44QF1WtcasrjgqiEnoLp0LMW5Q1cI2M/EtgxvB3NVtY2q7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOL5KHsi6X1axuBhHcc8cnDNIOxMB8GA1UdIwQY
MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt
MmMyMTgwNzE0ZTcxLzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx
LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZj2KJxj1
h2RQ3rxyhnP2mC64c0pEqVOnv7lWvf0553CpHqD68U31HqUWZ0JYocnB4+WaOIPR
SUTZPUFn3LH9dXln5TfXblYs6s4TcY6PEadvHHv3RpbJoKiELj5O4LdUJAHE59HI
VR18lfoqUADaYzzRBYJyBeZWFnL8Tqg5VJpA49zsWCfvXahoaW6ictUZ/9Hoy2Q0
Tf/fOGZzNeF62SkD5ePJxAV74ny80Az942H0m+t39XMqpXlZGB/jnV2J38lCzR+a
XyN54JP+8tKsdDtsjmDsw19oqW2wYHBFz/ZaHReVIXe5ZpxhaOZOIXju3iez0w0z
B/PjhGW0orhCpg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:25 2026 by rpki-client