Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
File: D1PmC9pkZYSIzqajMPBcd0nVucY.mft (raw, json)
Hash identifier: /2fmy1RUvI6jxgohjTC/NnMtOXt1KqfjAe/1HkDyYnE=
Subject key identifier: 5A:92:C3:B1:88:29:2F:0D:4E:BF:A9:59:84:B5:B5:F0:33:AC:A5:7D
Authority key identifier: 0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
Certificate issuer: /CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Certificate serial: 019E1D90D97C324B8399F5FF748466C9BA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
Manifest number: 2B
Signing time: Tue 12 May 2026 19:01:32 +0000
Manifest this update: Tue 12 May 2026 19:01:32 +0000
Manifest next update: Wed 13 May 2026 19:01:32 +0000
Files and hashes: 1: D1PmC9pkZYSIzqajMPBcd0nVucY.crl (hash: UwoUJABI1bVO5d8gMwZH/71jH+VGQK5u7L/K5AoJUCo=)
2: _tT1XC7nkQRWgQdxKibbMXrzVoc.roa (hash: zg0b/n4wXZx1538KhR67xdLnhn+vJRWK90TV+fz8uiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d9:7c:32:4b:83:99:f5:ff:74:84:66:c9:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f53e60bda64658488cea6a330f05c7749d5b9c6
Validity
Not Before: May 12 19:01:32 2026 GMT
Not After : May 13 19:01:32 2026 GMT
Subject: CN=5a92c3b188292f0d4ebfa95984b5b5f033aca57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:58:f6:4c:6d:a8:2b:66:c5:ae:e6:75:ce:
1c:67:d0:9b:b7:7a:47:99:08:55:c0:01:1d:3d:da:
c8:0e:83:2a:42:5b:77:ef:e2:79:da:a7:83:34:51:
4d:15:9b:78:c0:3b:e0:ee:a9:b3:84:c0:cf:46:48:
ac:a0:11:63:cf:3d:66:0f:18:71:91:ef:4a:5b:23:
c9:da:82:91:44:b9:de:3a:fe:c0:30:14:b0:23:c1:
fa:56:95:80:28:ad:57:ba:1a:c4:04:52:14:0a:25:
37:f8:0a:37:46:ec:f9:bc:71:f7:dd:24:ea:db:66:
27:0e:ea:20:25:82:19:26:ff:34:80:91:9d:93:12:
ed:ac:c9:48:08:af:13:39:d3:94:3f:b6:0e:11:98:
c8:63:ff:7d:ad:23:b1:fb:a4:82:99:23:30:79:67:
47:ad:34:4b:30:f5:f3:4d:19:45:04:1f:51:30:35:
c1:3f:db:db:32:a3:0d:59:9b:c4:0e:71:2a:12:66:
90:aa:2d:8b:1d:79:35:b2:37:36:f0:76:99:fb:1c:
9c:7c:fa:08:11:5e:52:d0:e5:0e:66:64:86:6a:46:
13:25:94:25:31:08:17:b1:36:f8:0e:64:af:66:d1:
22:22:be:29:74:47:09:e8:49:a5:4e:c6:8b:f4:f7:
89:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:C3:B1:88:29:2F:0D:4E:BF:A9:59:84:B5:B5:F0:33:AC:A5:7D
X509v3 Authority Key Identifier:
keyid:0F:53:E6:0B:DA:64:65:84:88:CE:A6:A3:30:F0:5C:77:49:D5:B9:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1PmC9pkZYSIzqajMPBcd0nVucY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3be6e6-6e9d-410b-a2ed-d74637005b2c/1/D1PmC9pkZYSIzqajMPBcd0nVucY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:4f:59:f8:c1:22:b8:81:b9:c2:70:c5:23:63:f3:a7:d1:
07:30:3e:be:3b:27:cb:c8:a3:a5:e3:a3:07:77:52:e6:a2:59:
1a:31:fd:10:2b:96:3c:e3:0e:76:b0:c0:f4:16:5c:cf:d3:24:
93:f5:df:3b:1c:32:32:a0:de:92:2e:ce:04:42:ab:ce:b6:f6:
69:d6:f5:39:e0:92:d8:ed:2d:35:fd:e8:b2:a2:7b:15:66:03:
cb:d9:a0:84:60:f2:fc:a8:51:ec:ce:26:5d:3e:c0:85:f1:f0:
de:0f:70:2e:40:ba:bb:56:d9:2f:f9:28:4f:7c:a9:38:33:03:
13:86:f1:bd:42:33:0b:cf:71:98:6a:b5:ec:ec:b0:f5:5d:81:
7b:10:98:79:a0:cd:fe:41:98:32:78:dc:63:ce:27:69:cb:3d:
ed:6c:79:6d:7b:d0:f0:f5:1c:ec:9e:94:b5:09:c7:98:01:67:
d2:e0:f2:ac:5d:a8:2e:2b:1d:67:52:e8:f3:1d:03:cb:e0:38:
6a:d6:ea:58:9f:40:81:6a:0b:1b:34:fc:bb:6d:60:e2:c8:f0:
6a:16:ef:97:f0:59:9a:11:a4:b6:42:af:df:ec:33:fb:c8:03:
a8:4b:3b:4d:c7:8b:05:89:bb:93:83:12:50:0c:9b:86:56:40:
e4:78:57:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkNl8MkuDmfX/dIRmybo7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTNlNjBiZGE2NDY1ODQ4OGNlYTZhMzMwZjA1Yzc3NDlk
NWI5YzYwHhcNMjYwNTEyMTkwMTMyWhcNMjYwNTEzMTkwMTMyWjAzMTEwLwYDVQQD
Eyg1YTkyYzNiMTg4MjkyZjBkNGViZmE5NTk4NGI1YjVmMDMzYWNhNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EhY9kxtqCtmxa7mdc4cZ9Cbt3pH
mQhVwAEdPdrIDoMqQlt37+J52qeDNFFNFZt4wDvg7qmzhMDPRkisoBFjzz1mDxhx
ke9KWyPJ2oKRRLneOv7AMBSwI8H6VpWAKK1XuhrEBFIUCiU3+Ao3Ruz5vHH33STq
22YnDuogJYIZJv80gJGdkxLtrMlICK8TOdOUP7YOEZjIY/99rSOx+6SCmSMweWdH
rTRLMPXzTRlFBB9RMDXBP9vbMqMNWZvEDnEqEmaQqi2LHXk1sjc28HaZ+xycfPoI
EV5S0OUOZmSGakYTJZQlMQgXsTb4DmSvZtEiIr4pdEcJ6EmlTsaL9PeJpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqSw7GIKS8NTr+pWYS1tfAzrKV9MB8GA1UdIwQY
MBaAFA9T5gvaZGWEiM6mozDwXHdJ1bnGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQt
ZDc0NjM3MDA1YjJjLzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYmU2ZTYtNmU5ZC00MTBiLWEyZWQtZDc0NjM3MDA1YjJj
LzEvRDFQbUM5cGtaWVNJenFhak1QQmNkMG5WdWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgQNPWfjB
IriBucJwxSNj86fRBzA+vjsny8ijpeOjB3dS5qJZGjH9ECuWPOMOdrDA9BZcz9Mk
k/XfOxwyMqDeki7OBEKrzrb2adb1OeCS2O0tNf3osqJ7FWYDy9mghGDy/KhR7M4m
XT7AhfHw3g9wLkC6u1bZL/koT3ypODMDE4bxvUIzC89xmGq17Oyw9V2BexCYeaDN
/kGYMnjcY84nacs97Wx5bXvQ8PUc7J6UtQnHmAFn0uDyrF2oLisdZ1Lo8x0Dy+A4
atbqWJ9AgWoLGzT8u21g4sjwahbvl/BZmhGktkKv3+wz+8gDqEs7TceLBYm7k4MS
UAybhlZA5HhXQQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:11 2026 by rpki-client