Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 3egkZgpbeUSJIIAuunoBpKQuN/25nKCQKbA2X356JBA=
Subject key identifier: 67:15:4C:65:E9:75:EF:2F:19:1A:62:51:09:CC:40:76:D8:E1:D7:D9
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 019E202441403126C8E8C26F5400D83E60EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0F9D
Signing time: Wed 13 May 2026 07:01:47 +0000
Manifest this update: Wed 13 May 2026 07:01:47 +0000
Manifest next update: Thu 14 May 2026 07:01:47 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: GDlPLgif+PDKM30BmY6HDg91S+V2pO7pAwknu6jaSFs=)
2: jK9vJkC-9INkg3kH606wmZpM3gY.roa (hash: pPtcnLjluAlTQa5sDa1ndB+L+idIHW8vl3l2EMrfHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:41:40:31:26:c8:e8:c2:6f:54:00:d8:3e:60:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: May 13 07:01:47 2026 GMT
Not After : May 14 07:01:47 2026 GMT
Subject: CN=67154c65e975ef2f191a625109cc4076d8e1d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:39:a5:9c:13:22:5e:6c:69:ce:8d:0d:a5:
bf:0d:6f:76:14:0a:48:ce:0f:e7:09:a3:0a:f2:2f:
d1:91:48:20:31:4a:2a:75:5a:3a:36:7b:eb:27:d1:
48:6c:6a:2a:90:7f:dd:b1:f1:14:26:77:2f:1b:47:
82:35:47:f6:1b:63:74:b1:86:99:d3:47:40:97:fb:
cc:c5:31:dd:0c:9b:c3:97:af:56:15:db:66:e4:c0:
e3:ee:72:bf:a7:3c:a2:d0:da:16:7c:55:7e:bf:e0:
30:9b:fe:96:c7:dd:c2:5d:e2:20:4e:3c:34:10:ad:
f5:7d:0e:c2:84:f9:2d:18:1f:15:df:06:ba:77:ab:
f6:45:38:a6:a3:83:6b:d8:1d:ec:a2:ac:fc:82:87:
7a:6d:0b:87:e3:57:64:32:b2:22:d4:87:5c:9c:7f:
32:a5:3d:ba:83:d8:54:0a:ef:65:18:7b:89:a2:4f:
9f:4f:c8:f4:74:5a:4a:57:a0:52:88:9c:48:7f:4e:
6f:43:1f:a0:5e:78:3a:ec:fc:4d:be:98:df:30:95:
26:bb:be:0a:03:c5:60:ea:07:06:5c:d7:a8:ed:21:
e4:eb:74:d2:fc:14:88:e3:3b:eb:b9:93:f3:25:2f:
1d:db:72:f3:2a:cb:1a:c1:1f:bc:2f:3b:27:d2:bd:
85:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:4C:65:E9:75:EF:2F:19:1A:62:51:09:CC:40:76:D8:E1:D7:D9
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f3:4a:a9:bc:c5:bd:ee:8a:0d:84:69:48:2f:ae:3e:d0:d0:
9f:16:66:a4:29:88:af:92:e6:6e:6e:47:19:51:08:d7:5a:43:
2c:01:1a:da:23:31:b7:83:ae:ba:49:02:85:95:03:b1:ff:62:
73:66:b9:ea:e9:cb:a2:a8:3d:80:77:98:d7:90:1e:4a:f0:07:
a6:97:15:11:60:43:d4:c4:a2:1d:ca:7e:95:f0:30:90:70:00:
83:6d:45:81:ac:4a:49:a5:58:f8:48:8f:71:4b:b3:a0:65:02:
f5:76:90:61:c6:4d:37:17:52:e8:69:bc:90:79:f0:ed:97:29:
65:ab:b5:f0:a0:af:06:0f:bb:63:75:35:c1:a2:15:90:74:41:
4a:12:5c:0c:18:2d:78:1a:ce:0f:dc:cc:22:8d:ab:76:17:e2:
4f:74:0d:b4:9a:36:79:8b:91:5e:21:d0:a8:ec:9e:bc:81:b9:
af:63:98:84:08:9c:3a:aa:02:17:1f:72:72:e9:60:2c:16:18:
c0:d3:5e:08:a3:0a:11:99:a5:76:74:5e:ff:d1:dc:b6:ed:83:
a6:fd:9f:c1:ef:2c:4c:fa:f5:99:33:21:82:1e:4d:24:40:82:
7c:f6:df:bc:c2:bf:34:96:43:8c:d9:cc:0c:6c:85:63:ee:88:
f4:b6:45:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJEFAMSbI6MJvVADYPmDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj
OTljYTEwHhcNMjYwNTEzMDcwMTQ3WhcNMjYwNTE0MDcwMTQ3WjAzMTEwLwYDVQQD
Eyg2NzE1NGM2NWU5NzVlZjJmMTkxYTYyNTEwOWNjNDA3NmQ4ZTFkN2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdE5pZwTIl5sac6NDaW/DW92FApI
zg/nCaMK8i/RkUggMUoqdVo6NnvrJ9FIbGoqkH/dsfEUJncvG0eCNUf2G2N0sYaZ
00dAl/vMxTHdDJvDl69WFdtm5MDj7nK/pzyi0NoWfFV+v+Awm/6Wx93CXeIgTjw0
EK31fQ7ChPktGB8V3wa6d6v2RTimo4Nr2B3soqz8god6bQuH41dkMrIi1IdcnH8y
pT26g9hUCu9lGHuJok+fT8j0dFpKV6BSiJxIf05vQx+gXng67PxNvpjfMJUmu74K
A8Vg6gcGXNeo7SHk63TS/BSI4zvruZPzJS8d23LzKssawR+8Lzsn0r2F3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcVTGXpde8vGRpiUQnMQHbY4dfZMB8GA1UdIwQY
MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt
Y2M2OGUzN2QyNDVmLzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm
LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfNKqbzF
ve6KDYRpSC+uPtDQnxZmpCmIr5Lmbm5HGVEI11pDLAEa2iMxt4OuukkChZUDsf9i
c2a56unLoqg9gHeY15AeSvAHppcVEWBD1MSiHcp+lfAwkHAAg21FgaxKSaVY+EiP
cUuzoGUC9XaQYcZNNxdS6Gm8kHnw7ZcpZau18KCvBg+7Y3U1waIVkHRBShJcDBgt
eBrOD9zMIo2rdhfiT3QNtJo2eYuRXiHQqOyevIG5r2OYhAicOqoCFx9yculgLBYY
wNNeCKMKEZmldnRe/9Hctu2Dpv2fwe8sTPr1mTMhgh5NJECCfPbfvMK/NJZDjNnM
DGyFY+6I9LZFKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 10:24:31 2026 by rpki-client