Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier: uaRhHZAwmtfBL1IaXXB7RiGOJLn32ASBVLRg2s6KMb4=
Subject key identifier: 40:AC:D2:68:0E:C1:33:CF:52:09:07:57:68:44:04:F6:D0:A0:7A:D0
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial: 019E1D59D0C3910E880D5F527F75838F6219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number: 17F5
Signing time: Tue 12 May 2026 18:01:25 +0000
Manifest this update: Tue 12 May 2026 18:01:25 +0000
Manifest next update: Wed 13 May 2026 18:01:25 +0000
Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: vXnNIjF2XbiDYoRN85qX7htAaCxPstybzLlYzTcW0eE=)
2: aitD5UH29rGUG8_oXWsc-YfKHvk.roa (hash: fXAcocJ6AW36LCgsDsOqq0Ar/nfeKZ+crNQ7BTk4Lec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:d0:c3:91:0e:88:0d:5f:52:7f:75:83:8f:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
Validity
Not Before: May 12 18:01:25 2026 GMT
Not After : May 13 18:01:25 2026 GMT
Subject: CN=40acd2680ec133cf52090757684404f6d0a07ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:28:f5:95:3f:1a:68:bc:ee:a1:3a:03:51:
91:64:9e:7b:c8:ce:ca:4c:81:fc:f0:bc:cd:68:fa:
30:d0:be:e0:c0:b5:20:49:97:26:f8:34:22:3a:0f:
d8:92:74:af:01:14:6d:b9:ee:71:b3:c6:be:7e:d6:
dd:73:ee:e2:ef:86:21:24:f9:58:4c:a3:ae:82:74:
fa:96:9f:55:c5:de:c6:7a:25:d8:3d:9c:e5:cb:79:
4b:1f:95:99:38:4f:be:aa:24:d8:7f:b0:66:e8:37:
d5:9d:e6:4e:02:92:57:67:bc:35:aa:a2:77:fa:54:
b4:4a:a2:ce:81:7a:9c:9e:38:c5:02:40:4d:56:59:
f1:c6:1a:f6:a1:c8:f3:ed:86:a4:e5:51:b0:9a:66:
63:b8:44:d9:9e:3e:2e:d7:32:d6:0e:f2:40:25:8f:
5c:02:2d:a8:01:0b:bf:2a:4b:93:9f:f2:ff:e8:9c:
78:b8:3a:02:ed:66:3a:12:78:e9:16:dd:70:ce:bc:
0c:1e:56:26:d4:3b:a4:40:36:16:d8:2f:db:aa:19:
0b:82:d6:6c:27:9a:d8:ee:7b:f1:5a:21:50:75:56:
14:57:91:e9:a1:3d:2c:9a:51:aa:a0:ae:e8:b4:55:
1c:88:97:f8:49:e7:5e:5e:78:cb:4d:77:d8:ab:ec:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AC:D2:68:0E:C1:33:CF:52:09:07:57:68:44:04:F6:D0:A0:7A:D0
X509v3 Authority Key Identifier:
keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e2:40:7b:59:72:9b:7a:a4:63:2e:e0:08:56:42:0d:4c:9d:
b1:63:84:6d:5c:50:92:ef:60:f0:4a:d2:8e:1f:28:3e:17:1e:
fb:b9:01:8d:7b:7b:70:80:3e:05:27:c1:8f:c8:c8:5f:ad:61:
5a:28:44:26:35:61:8c:0e:e0:ed:47:e2:d1:03:d5:f0:d3:4b:
d4:22:5c:35:f5:68:90:c4:2e:90:74:d7:86:ff:bc:dd:1c:f6:
11:7c:b9:48:b5:1a:a0:30:2c:7a:43:db:2e:13:29:ed:95:ad:
ec:31:d9:58:45:92:5f:6c:2a:1b:b6:be:93:b9:bd:b1:e4:1c:
86:30:d5:1e:5c:34:76:04:5c:15:26:77:1f:fd:ea:14:dc:b0:
c1:8d:1b:9f:55:85:e9:3f:3d:07:cd:05:9d:b0:5e:af:e8:02:
fe:05:88:dd:02:57:93:85:79:c3:28:44:42:ec:51:9b:aa:c5:
40:fd:3b:c7:b1:94:03:7c:9a:73:b1:44:d9:76:0b:02:73:d3:
96:0e:73:ca:2a:d1:11:b7:3f:1b:64:83:8c:66:bd:3a:51:9d:
55:55:f8:f0:9d:a5:2d:02:e6:13:aa:4b:e5:2f:77:d6:79:99:
39:a3:70:80:3b:c0:52:d8:17:f2:f5:88:f8:0c:c4:6c:64:6c:
48:65:c0:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWdDDkQ6IDV9Sf3WDj2IZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj
MjAzNzcwHhcNMjYwNTEyMTgwMTI1WhcNMjYwNTEzMTgwMTI1WjAzMTEwLwYDVQQD
Eyg0MGFjZDI2ODBlYzEzM2NmNTIwOTA3NTc2ODQ0MDRmNmQwYTA3YWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUko9ZU/Gmi87qE6A1GRZJ57yM7K
TIH88LzNaPow0L7gwLUgSZcm+DQiOg/YknSvARRtue5xs8a+ftbdc+7i74YhJPlY
TKOugnT6lp9Vxd7GeiXYPZzly3lLH5WZOE++qiTYf7Bm6DfVneZOApJXZ7w1qqJ3
+lS0SqLOgXqcnjjFAkBNVlnxxhr2ocjz7Yak5VGwmmZjuETZnj4u1zLWDvJAJY9c
Ai2oAQu/KkuTn/L/6Jx4uDoC7WY6EnjpFt1wzrwMHlYm1DukQDYW2C/bqhkLgtZs
J5rY7nvxWiFQdVYUV5HpoT0smlGqoK7otFUciJf4SedeXnjLTXfYq+wj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECs0mgOwTPPUgkHV2hEBPbQoHrQMB8GA1UdIwQY
MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt
YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw
LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOJAe1ly
m3qkYy7gCFZCDUydsWOEbVxQku9g8ErSjh8oPhce+7kBjXt7cIA+BSfBj8jIX61h
WihEJjVhjA7g7Ufi0QPV8NNL1CJcNfVokMQukHTXhv+83Rz2EXy5SLUaoDAsekPb
LhMp7ZWt7DHZWEWSX2wqG7a+k7m9seQchjDVHlw0dgRcFSZ3H/3qFNywwY0bn1WF
6T89B80FnbBer+gC/gWI3QJXk4V5wyhEQuxRm6rFQP07x7GUA3yac7FE2XYLAnPT
lg5zyirREbc/G2SDjGa9OlGdVVX48J2lLQLmE6pL5S931nmZOaNwgDvAUtgX8vWI
+AzEbGRsSGXAeQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:13 2026 by rpki-client