Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File: gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier: IhJyb/KiB49kVmq32yIRWVBM15rn07x1k2YyZvj9b4Q=
Subject key identifier: 70:E9:5E:5D:39:97:20:DE:F2:89:DF:85:DF:E9:E3:51:FA:9E:CE:4F
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019E1F10DBC0AA5FE12483BC1BCB7B8CFB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number: 18C0
Signing time: Wed 13 May 2026 02:00:58 +0000
Manifest this update: Wed 13 May 2026 02:00:58 +0000
Manifest next update: Thu 14 May 2026 02:00:58 +0000
Files and hashes: 1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: IlDzC0QrxpXEFWAQ1zRMziunVVLl9rkgcwDoIZRRrYQ=)
9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:db:c0:aa:5f:e1:24:83:bc:1b:cb:7b:8c:fb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: May 13 02:00:58 2026 GMT
Not After : May 14 02:00:58 2026 GMT
Subject: CN=70e95e5d399720def289df85dfe9e351fa9ece4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:93:ea:dc:89:28:85:be:c7:7c:82:e0:21:
b0:42:76:65:86:d1:a3:dd:23:0e:eb:d6:53:5c:51:
01:de:1d:4d:67:ce:05:cd:8e:e9:9a:01:b6:47:04:
87:9f:31:4a:d2:7b:09:a0:da:a5:44:23:e2:14:e0:
13:b8:ac:d2:94:ca:62:e9:73:65:d2:00:f1:ef:a4:
fc:16:dc:da:f2:dd:37:50:cb:07:59:b0:1d:99:2a:
de:9a:a5:fd:f2:3b:a0:29:f3:7d:e2:5a:f0:e6:9c:
ba:56:73:41:b7:26:24:ac:4c:22:16:e9:49:51:06:
33:a3:ec:3c:15:68:26:ca:94:1e:23:e3:eb:5c:93:
f2:f6:ba:0f:c0:45:b4:30:24:1f:b8:85:3c:99:95:
ae:f9:78:d9:05:44:ff:29:15:3b:59:23:99:5e:3e:
6b:b0:ac:cd:13:e8:b7:3f:4d:cb:3d:0c:eb:09:1c:
60:56:5e:72:68:04:a6:05:3b:86:c5:0d:fe:ba:94:
9c:e4:ff:91:51:5a:a4:6f:9a:9a:ca:4e:6b:e7:a0:
83:ef:64:ed:f2:9a:ae:65:9c:bc:58:b6:3e:c6:aa:
ca:6b:7d:91:ac:9f:54:15:fc:eb:2f:2d:51:84:ea:
0f:f7:39:fd:96:82:cf:22:e9:08:b5:14:44:94:65:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:5E:5D:39:97:20:DE:F2:89:DF:85:DF:E9:E3:51:FA:9E:CE:4F
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d4:1c:67:84:03:a0:18:2d:09:de:88:b7:71:95:84:1f:4a:
0e:06:fc:27:ce:4a:74:0d:33:d9:1b:22:30:09:3c:1b:f5:81:
11:69:f4:f0:bf:67:d4:33:f3:08:71:89:ab:9c:52:02:06:bb:
a1:1f:40:c5:dc:03:89:ac:28:c7:79:0b:3c:60:1b:a9:a6:8c:
bf:ba:20:b4:7a:51:eb:49:56:c0:cf:13:3a:ce:51:bc:d4:eb:
e4:b6:56:8e:a0:15:a9:aa:eb:48:3d:61:59:de:c9:92:9f:ff:
ec:95:b2:ba:6c:e1:85:90:36:20:a3:4f:7c:eb:8a:68:9a:f3:
c2:f6:9d:bb:10:16:dd:f5:32:9c:e0:37:e8:fa:88:8e:92:75:
a6:23:35:d8:c1:af:4e:27:73:1f:b3:b4:51:d2:91:8f:d5:7c:
bb:a5:80:c2:b2:a0:37:48:35:bc:d3:45:75:f8:e4:9c:5f:b7:
3d:cb:57:10:6f:b8:af:14:ac:60:ca:31:35:5b:2a:03:c0:e3:
21:96:91:89:d6:36:f3:e2:9f:03:1a:34:37:d3:19:ec:b9:ed:
a2:e3:27:0f:fc:6b:9c:30:13:36:a4:fb:3e:36:9e:c4:1c:e3:
f9:20:dc:1d:f7:b3:b3:1c:50:f8:c1:e1:18:19:df:ca:d4:c1:
eb:9a:96:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fENvAql/hJIO8G8t7jPt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4
YjlkODcwHhcNMjYwNTEzMDIwMDU4WhcNMjYwNTE0MDIwMDU4WjAzMTEwLwYDVQQD
Eyg3MGU5NWU1ZDM5OTcyMGRlZjI4OWRmODVkZmU5ZTM1MWZhOWVjZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr++T6tyJKIW+x3yC4CGwQnZlhtGj
3SMO69ZTXFEB3h1NZ84FzY7pmgG2RwSHnzFK0nsJoNqlRCPiFOATuKzSlMpi6XNl
0gDx76T8Ftza8t03UMsHWbAdmSremqX98jugKfN94lrw5py6VnNBtyYkrEwiFulJ
UQYzo+w8FWgmypQeI+PrXJPy9roPwEW0MCQfuIU8mZWu+XjZBUT/KRU7WSOZXj5r
sKzNE+i3P03LPQzrCRxgVl5yaASmBTuGxQ3+upSc5P+RUVqkb5qayk5r56CD72Tt
8pquZZy8WLY+xqrKa32RrJ9UFfzrLy1RhOoP9zn9loLPIukItRRElGV6lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDpXl05lyDe8onfhd/p41H6ns5PMB8GA1UdIwQY
MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt
Y2Q5NzQwNDI2NDlmLzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm
LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9QcZ4QD
oBgtCd6It3GVhB9KDgb8J85KdA0z2RsiMAk8G/WBEWn08L9n1DPzCHGJq5xSAga7
oR9AxdwDiawox3kLPGAbqaaMv7ogtHpR60lWwM8TOs5RvNTr5LZWjqAVqarrSD1h
Wd7Jkp//7JWyumzhhZA2IKNPfOuKaJrzwvaduxAW3fUynOA36PqIjpJ1piM12MGv
TidzH7O0UdKRj9V8u6WAwrKgN0g1vNNFdfjknF+3PctXEG+4rxSsYMoxNVsqA8Dj
IZaRidY28+KfAxo0N9MZ7LntouMnD/xrnDATNqT7PjaexBzj+SDcHfezsxxQ+MHh
GBnfytTB65qWMA==
-----END CERTIFICATE-----
Generated at Wed May 13 09:02:15 2026 by rpki-client