Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: qEuJ8mzA8V77Kd7avKSW+jL64/yVhdrP+6zVe+unHpE=
Subject key identifier: 42:C4:25:F9:AA:99:5F:6F:0B:E1:C8:73:EF:6A:70:A8:3A:31:1F:E2
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 019E1E34EBA5A57EC5B8F8AB39BC372BA037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 1902
Signing time: Tue 12 May 2026 22:00:45 +0000
Manifest this update: Tue 12 May 2026 22:00:45 +0000
Manifest next update: Wed 13 May 2026 22:00:45 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: uwXDfDsLTjk6HycGkNEN15uiiUD5d0HakzbtjNKZqWA=)
2: SoEs2uq-Lqa7VWg8JFQCPgrt2eI.roa (hash: NiDI43uxk76Y1iaXH3S9JcI5gdDit0xy1S3yktJNiKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:eb:a5:a5:7e:c5:b8:f8:ab:39:bc:37:2b:a0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: May 12 22:00:45 2026 GMT
Not After : May 13 22:00:45 2026 GMT
Subject: CN=42c425f9aa995f6f0be1c873ef6a70a83a311fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:de:25:5f:83:11:e9:aa:fa:6f:70:2d:c4:
e1:e0:c4:49:03:2c:53:52:ff:d8:b4:70:30:4c:6d:
9e:4c:04:2b:e8:36:c4:6a:1f:2c:0b:33:62:36:4a:
b3:ce:27:3e:dc:49:52:9f:f9:26:61:3a:43:e7:6f:
41:e2:27:49:89:03:dc:93:93:07:5b:48:ed:15:82:
0a:ea:0b:aa:73:e8:ef:28:09:ff:85:00:1e:b1:40:
1a:31:72:b7:26:39:4f:a7:f0:70:55:36:00:aa:23:
8e:ae:df:62:be:d7:26:c1:6a:23:2d:8c:8f:98:ae:
fa:52:0b:aa:83:c2:d9:bd:df:9c:6c:2c:ae:b2:86:
0a:c5:01:c6:4f:93:7a:44:97:b8:54:e3:e9:4e:3c:
99:ac:9a:21:fd:10:c3:a6:49:e0:72:2d:f5:a4:34:
da:c5:88:f8:a5:b6:9c:f3:c2:c3:c1:7b:b8:25:18:
0f:1e:f9:e6:ba:89:60:79:bc:e7:d2:87:c5:e8:a8:
6b:1c:cd:65:d4:18:0b:6e:f9:fe:5c:74:eb:65:b6:
8f:ed:05:ab:a6:cd:5b:a1:2d:de:cf:e3:33:d8:3a:
7d:cc:79:f1:6b:36:d4:21:22:7d:c7:d4:ee:5f:ac:
52:fc:20:28:1f:59:40:a0:42:7b:f6:e1:9b:56:70:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:25:F9:AA:99:5F:6F:0B:E1:C8:73:EF:6A:70:A8:3A:31:1F:E2
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ba:86:5d:94:b0:dc:a0:9f:2e:74:5e:22:01:4e:fa:38:1f:
62:90:dd:48:a0:37:af:08:a8:57:88:78:9a:6e:7b:05:82:55:
ed:5e:7a:9c:46:50:14:7d:64:87:ae:76:72:d4:ae:b3:c2:9f:
af:89:12:f8:7d:9a:f5:02:9f:73:d7:8b:e0:30:9f:1e:83:96:
3b:05:58:87:2e:28:16:f0:44:de:b0:07:0b:e5:46:4a:11:1b:
80:de:88:e9:f6:e5:3b:2e:2d:c5:9b:6f:ea:3e:7f:aa:ca:4f:
b4:34:1d:dd:9e:cf:79:0d:1e:2e:36:6d:ef:56:57:68:98:b7:
77:69:90:4d:c7:d7:86:78:df:5d:84:1a:d4:f1:cf:16:b1:af:
c6:8a:76:4b:b3:b1:5a:7d:8c:59:4d:56:c1:f8:b1:7e:9f:b1:
d8:e8:c6:90:dc:1c:c7:f6:20:b6:16:f0:d6:8d:96:dd:76:ed:
d6:61:04:f5:6b:b4:e2:2a:bc:51:5c:55:48:43:ba:1c:f7:26:
80:04:10:2e:82:5f:3f:f5:e3:5c:73:da:05:5a:f2:de:bc:7d:
af:4f:59:f0:b1:95:eb:07:ff:de:b0:99:0a:1d:45:7c:ae:b7:
96:e6:53:63:3f:4f:f3:50:b1:0b:3a:a5:26:d1:47:3d:28:69:
82:c1:f7:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNOulpX7FuPirObw3K6A3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5
ZGQ1ZmYwHhcNMjYwNTEyMjIwMDQ1WhcNMjYwNTEzMjIwMDQ1WjAzMTEwLwYDVQQD
Eyg0MmM0MjVmOWFhOTk1ZjZmMGJlMWM4NzNlZjZhNzBhODNhMzExZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUveJV+DEemq+m9wLcTh4MRJAyxT
Uv/YtHAwTG2eTAQr6DbEah8sCzNiNkqzzic+3ElSn/kmYTpD529B4idJiQPck5MH
W0jtFYIK6guqc+jvKAn/hQAesUAaMXK3JjlPp/BwVTYAqiOOrt9ivtcmwWojLYyP
mK76Uguqg8LZvd+cbCyusoYKxQHGT5N6RJe4VOPpTjyZrJoh/RDDpkngci31pDTa
xYj4pbac88LDwXu4JRgPHvnmuolgebzn0ofF6KhrHM1l1BgLbvn+XHTrZbaP7QWr
ps1boS3ez+Mz2Dp9zHnxazbUISJ9x9TuX6xS/CAoH1lAoEJ79uGbVnCUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELEJfmqmV9vC+HIc+9qcKg6MR/iMB8GA1UdIwQY
MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct
NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj
LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp7qGXZSw
3KCfLnReIgFO+jgfYpDdSKA3rwioV4h4mm57BYJV7V56nEZQFH1kh652ctSus8Kf
r4kS+H2a9QKfc9eL4DCfHoOWOwVYhy4oFvBE3rAHC+VGShEbgN6I6fblOy4txZtv
6j5/qspPtDQd3Z7PeQ0eLjZt71ZXaJi3d2mQTcfXhnjfXYQa1PHPFrGvxop2S7Ox
Wn2MWU1Wwfixfp+x2OjGkNwcx/Ygthbw1o2W3Xbt1mEE9Wu04iq8UVxVSEO6HPcm
gAQQLoJfP/XjXHPaBVry3rx9r09Z8LGV6wf/3rCZCh1FfK63luZTYz9P81CxCzql
JtFHPShpgsH3Hg==
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:19 2026 by rpki-client