Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: ykoEzrjJ7/m2qnMdD1tvCbhn7AtCCtMpgtVYs4nw6R8=
Subject key identifier: B1:CD:B7:49:E1:74:89:97:4C:24:5B:B6:76:69:94:16:09:FD:5D:16
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019E1EA3D2289E14A7BE66892693A1534304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: 016B
Signing time: Wed 13 May 2026 00:01:53 +0000
Manifest this update: Wed 13 May 2026 00:01:53 +0000
Manifest next update: Thu 14 May 2026 00:01:53 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: N/PgNBJ29Ts3Tm4eWnq/wxXX0z88atHU2C29RIKom2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d2:28:9e:14:a7:be:66:89:26:93:a1:53:43:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: May 13 00:01:53 2026 GMT
Not After : May 14 00:01:53 2026 GMT
Subject: CN=b1cdb749e17489974c245bb67669941609fd5d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ac:8d:16:25:05:36:a5:e2:a9:5f:d7:3a:1f:
90:18:05:5d:ae:69:2d:08:a2:49:57:bd:24:ce:92:
42:d9:c7:80:0c:24:7a:9b:52:ea:16:bc:6f:30:f9:
7a:34:0e:63:92:01:9d:65:bd:fa:89:b2:63:11:df:
ac:b8:83:18:ae:67:d5:87:05:04:a7:9c:3d:f8:2e:
6f:0c:f8:21:c4:09:b1:10:46:8d:d4:4c:7c:b5:3e:
38:e1:60:e0:96:de:4e:e1:e9:0a:f4:11:45:66:e3:
fb:41:70:fd:a5:c8:97:63:ed:e8:0a:69:b0:88:09:
cf:77:4e:34:6d:ef:da:31:73:36:b3:ff:13:aa:2a:
ce:73:82:d8:e9:b9:76:15:6d:c2:43:36:58:1d:48:
38:ea:14:37:02:a9:34:47:fb:4a:98:2f:92:3c:78:
90:87:f0:84:92:73:7a:a0:c3:70:d2:51:3a:cc:c9:
f3:09:37:9a:1b:18:b1:72:db:e5:2d:c8:36:03:9b:
fb:a9:4f:aa:44:c4:cd:a0:87:b5:75:ba:5e:95:1f:
45:c9:68:90:97:54:b7:62:1a:fd:1b:d5:61:d0:1f:
fc:45:ae:00:bb:8f:a6:32:e2:bb:93:7e:aa:db:0a:
dd:91:38:4f:65:2e:64:ab:36:40:3f:df:34:80:13:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CD:B7:49:E1:74:89:97:4C:24:5B:B6:76:69:94:16:09:FD:5D:16
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2c:03:c9:c5:58:7c:7c:46:f5:ab:bf:ff:ec:a0:53:4e:5c:
71:19:21:94:62:c2:25:67:3e:27:db:93:f7:08:e1:b7:cd:0f:
b0:59:42:0b:29:57:38:79:f0:99:5a:b2:3b:d1:8e:77:74:85:
d7:1b:ef:4f:0f:a0:12:e3:e2:d8:ff:ce:aa:bf:8d:1f:42:aa:
bc:b2:12:e5:67:c5:c1:b1:5d:8a:e9:e4:ca:ce:af:86:56:15:
37:b5:0d:3a:f8:63:11:34:5e:df:eb:c7:5f:57:2b:15:d8:9c:
ac:8f:c8:46:f3:30:bf:8c:df:f5:29:50:d0:71:42:de:41:0e:
b9:3d:98:c4:7a:f5:4a:ad:7c:0c:16:ff:40:45:4f:43:77:5f:
c5:8a:f7:a4:66:ee:e3:aa:28:03:5f:5e:83:d4:f1:02:af:9a:
07:0b:5d:7f:6c:b0:e5:44:bb:23:f8:6b:e2:e5:7c:00:65:c9:
9d:3e:e2:92:68:3b:e0:ba:79:eb:a2:1e:0a:e8:c9:f6:c2:29:
6d:1d:e0:44:2a:6e:06:9a:45:28:b2:43:08:92:85:b6:c2:a0:
15:55:42:11:3c:4b:d1:93:ad:63:07:39:58:5d:d5:1a:a2:c3:
d7:07:5e:53:7b:28:9b:85:82:4e:79:7d:a1:cf:fb:95:60:86:
4b:47:ef:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo9IonhSnvmaJJpOhU0MEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTY2N2MwNTU3ZDhlNzdhODlmZDJmNjc1Mzg3ODM1Yzky
OTkwM2MwHhcNMjYwNTEzMDAwMTUzWhcNMjYwNTE0MDAwMTUzWjAzMTEwLwYDVQQD
EyhiMWNkYjc0OWUxNzQ4OTk3NGMyNDViYjY3NjY5OTQxNjA5ZmQ1ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qyNFiUFNqXiqV/XOh+QGAVdrmkt
CKJJV70kzpJC2ceADCR6m1LqFrxvMPl6NA5jkgGdZb36ibJjEd+suIMYrmfVhwUE
p5w9+C5vDPghxAmxEEaN1Ex8tT444WDglt5O4ekK9BFFZuP7QXD9pciXY+3oCmmw
iAnPd040be/aMXM2s/8TqirOc4LY6bl2FW3CQzZYHUg46hQ3Aqk0R/tKmC+SPHiQ
h/CEknN6oMNw0lE6zMnzCTeaGxixctvlLcg2A5v7qU+qRMTNoIe1dbpelR9FyWiQ
l1S3Yhr9G9Vh0B/8Ra4Au4+mMuK7k36q2wrdkThPZS5kqzZAP980gBOsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHNt0nhdImXTCRbtnZplBYJ/V0WMB8GA1UdIwQY
MBaAFLTmZ8BVfY53qJ/S9nU4eDXJKZA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYzg1YjItOWUyYi00MjA5LWJiZGMt
MTczNjg4NjhlOTRiLzEvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYzg1YjItOWUyYi00MjA5LWJiZGMtMTczNjg4NjhlOTRi
LzEvdE9abndGVjlqbmVvbjlMMmRUaDROY2twa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCwDycVY
fHxG9au//+ygU05ccRkhlGLCJWc+J9uT9wjht80PsFlCCylXOHnwmVqyO9GOd3SF
1xvvTw+gEuPi2P/Oqr+NH0KqvLIS5WfFwbFdiunkys6vhlYVN7UNOvhjETRe3+vH
X1crFdicrI/IRvMwv4zf9SlQ0HFC3kEOuT2YxHr1Sq18DBb/QEVPQ3dfxYr3pGbu
46ooA19eg9TxAq+aBwtdf2yw5US7I/hr4uV8AGXJnT7ikmg74Lp566IeCujJ9sIp
bR3gRCpuBppFKLJDCJKFtsKgFVVCETxL0ZOtYwc5WF3VGqLD1wdeU3som4WCTnl9
oc/7lWCGS0fv2A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:24:46 2026 by rpki-client