Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: /GbbwzDUcg/fIQOui82VWjdEG3tfhZGP2I4nZap6Xl4=
Subject key identifier: 10:0B:35:94:BC:AC:7A:B6:2B:EB:07:B6:E6:6B:AB:9E:5C:34:60:6C
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 019E1C7DEBA8AF853925889A28CFE35F71C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 13E7
Signing time: Tue 12 May 2026 14:01:14 +0000
Manifest this update: Tue 12 May 2026 14:01:14 +0000
Manifest next update: Wed 13 May 2026 14:01:14 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: NglHmKKI6BUNx6tKaRRCl9lOaMh4RvHW53n8oA0RsGQ=)
2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
3: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:eb:a8:af:85:39:25:88:9a:28:cf:e3:5f:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: May 12 14:01:14 2026 GMT
Not After : May 13 14:01:14 2026 GMT
Subject: CN=100b3594bcac7ab62beb07b6e66bab9e5c34606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:e9:1c:86:94:c6:d8:77:c9:22:75:27:53:
09:c3:cc:e9:e3:70:cb:af:49:22:8f:a6:02:e2:46:
53:01:03:46:d5:e1:af:21:fb:23:fb:7f:82:d0:f0:
fd:0a:cf:f7:52:bc:76:15:d6:95:ca:28:8b:20:d9:
47:cc:fe:84:84:e2:79:d5:f1:0a:8a:b1:e5:d7:6a:
18:51:78:ce:83:3e:1f:a3:10:da:01:90:c4:e5:2f:
53:1d:0f:e2:87:65:ca:7f:05:c7:8a:08:b6:42:5e:
a0:68:96:d6:51:4b:82:cc:32:81:d9:70:fb:93:86:
f5:d2:9a:d2:40:f4:46:bf:20:42:b6:8e:3f:20:7e:
43:4c:df:04:4e:77:f1:f8:6a:09:80:40:ab:55:82:
f6:9c:4b:d5:84:3b:01:1c:22:25:ae:db:08:2c:5c:
8c:d1:5f:48:0d:40:5e:e5:06:2f:ac:1b:58:c8:77:
ed:a9:39:05:59:c6:2c:ff:8a:30:98:b6:08:f1:66:
ba:7a:4f:48:74:52:11:c9:cd:97:22:28:21:aa:e0:
23:3d:4d:8c:37:99:7d:38:40:da:6b:eb:82:5a:99:
d3:0d:b2:c6:7e:a2:4a:0d:8a:0d:56:a9:46:e7:41:
fe:d0:62:df:c9:c9:da:eb:81:02:49:82:e0:ab:ff:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0B:35:94:BC:AC:7A:B6:2B:EB:07:B6:E6:6B:AB:9E:5C:34:60:6C
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:3c:92:ed:8e:e9:50:f2:3a:5d:f0:4e:c0:2f:25:5f:3d:
bc:58:1b:85:ba:32:11:13:e0:b8:f3:df:31:82:79:9a:56:62:
1d:1a:1f:2f:34:c5:23:80:5a:0e:a4:cd:59:71:a0:8d:d7:1b:
57:11:cd:0c:a1:9f:18:8c:8b:f2:f0:2c:c5:52:90:a1:59:bc:
1b:fd:f1:26:f4:a7:17:51:2b:98:42:3e:7c:26:35:fd:18:d7:
d9:16:27:d2:fb:48:50:d5:db:61:2e:ac:c8:c8:08:cd:cb:ac:
56:f4:27:27:aa:7a:03:76:da:5b:d0:44:d7:7b:3b:bb:7e:20:
2c:12:af:e2:f1:a9:82:11:32:26:19:c7:2e:46:05:3b:93:eb:
13:58:f0:6a:cd:88:be:48:5f:1e:51:e1:79:c5:b5:cf:e9:62:
ed:5b:2c:1d:72:c3:84:ba:b3:dd:6f:a7:20:cb:94:9a:ac:2d:
a0:eb:b0:bb:a2:42:8e:5e:3a:c6:82:86:9e:0c:94:9d:6a:47:
dc:79:98:b8:42:76:03:50:c1:fc:76:dd:ec:31:0d:94:ea:60:
c0:82:69:f5:d2:ea:31:34:7c:4f:4a:a1:b0:b0:17:61:d1:e7:
08:ed:5b:19:7a:79:4c:ec:3b:11:27:51:64:f9:7a:b1:27:3f:
f7:99:3a:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cfeuor4U5JYiaKM/jX3HIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDIxNGExYmYxZDNhZmQyZGQ2NmIyM2E5OTczMTA2YjVk
MzE2Y2EwHhcNMjYwNTEyMTQwMTE0WhcNMjYwNTEzMTQwMTE0WjAzMTEwLwYDVQQD
EygxMDBiMzU5NGJjYWM3YWI2MmJlYjA3YjZlNjZiYWI5ZTVjMzQ2MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSXpHIaUxth3ySJ1J1MJw8zp43DL
r0kij6YC4kZTAQNG1eGvIfsj+3+C0PD9Cs/3Urx2FdaVyiiLINlHzP6EhOJ51fEK
irHl12oYUXjOgz4foxDaAZDE5S9THQ/ih2XKfwXHigi2Ql6gaJbWUUuCzDKB2XD7
k4b10prSQPRGvyBCto4/IH5DTN8ETnfx+GoJgECrVYL2nEvVhDsBHCIlrtsILFyM
0V9IDUBe5QYvrBtYyHftqTkFWcYs/4owmLYI8Wa6ek9IdFIRyc2XIighquAjPU2M
N5l9OEDaa+uCWpnTDbLGfqJKDYoNVqlG50H+0GLfycna64ECSYLgq/8q+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBALNZS8rHq2K+sHtuZrq55cNGBsMB8GA1UdIwQY
MBaAFAoCFKG/HTr9LdZrI6mXMQa10xbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQt
MzMyZWU1NDI1YzdhLzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNGVjYzAtNjYzYy00NjBlLTkyMGQtMzMyZWU1NDI1Yzdh
LzEvQ2dJVW9iOGRPdjB0MW1zanFaY3hCclhURnNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcw8ku2O
6VDyOl3wTsAvJV89vFgbhboyERPguPPfMYJ5mlZiHRofLzTFI4BaDqTNWXGgjdcb
VxHNDKGfGIyL8vAsxVKQoVm8G/3xJvSnF1ErmEI+fCY1/RjX2RYn0vtIUNXbYS6s
yMgIzcusVvQnJ6p6A3baW9BE13s7u34gLBKv4vGpghEyJhnHLkYFO5PrE1jwas2I
vkhfHlHhecW1z+li7VssHXLDhLqz3W+nIMuUmqwtoOuwu6JCjl46xoKGngyUnWpH
3HmYuEJ2A1DB/Hbd7DENlOpgwIJp9dLqMTR8T0qhsLAXYdHnCO1bGXp5TOw7ESdR
ZPl6sSc/95k6rQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:44 2026 by rpki-client