Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json)
Hash identifier: /aSFVMAqui7wMIksZCgFRleB4BqNwGpuMwpzYQJ/KqQ=
Subject key identifier: 70:31:69:B3:DA:3D:50:3A:84:81:F2:A0:98:70:7C:70:E4:D4:88:3C
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 019E1D22D50232300F4FE533948754AEFD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
Manifest number: 13CF
Signing time: Tue 12 May 2026 17:01:22 +0000
Manifest this update: Tue 12 May 2026 17:01:22 +0000
Manifest next update: Wed 13 May 2026 17:01:22 +0000
Files and hashes: 1: PeJEMtupept21vf-rfjqUX1mldY.roa (hash: L3Vq59CQQkeuB9Tb5q+mJV+IQYi3JZHbF6U8aJ9gFYU=)
2: aD0lsDcoNGKfxZpDG-OdR_bzMnU.roa (hash: bvoZBbd9QoLZ+N5I+xfKDL3PeYR6CygFLOwHX1oAOxI=)
3: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: 8iL/TO7Jcvta9t3XfDrZ/NygYzVGsSv9znj9Uf2m2wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d5:02:32:30:0f:4f:e5:33:94:87:54:ae:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: May 12 17:01:22 2026 GMT
Not After : May 13 17:01:22 2026 GMT
Subject: CN=703169b3da3d503a8481f2a098707c70e4d4883c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:e8:ee:5d:30:0c:80:f0:97:36:55:8a:48:
96:df:1e:e3:e0:0d:1d:61:bc:86:f4:d0:89:f2:ab:
65:74:87:b4:c4:12:1b:bd:2e:4f:a7:5d:ae:b0:8a:
d2:c3:c3:40:92:1c:d8:b7:47:9c:9c:5f:1e:6a:cf:
3d:51:fc:12:2d:08:b9:fb:d4:56:b2:52:a2:1c:08:
60:95:e3:dd:50:0b:2d:9b:b3:59:0d:a6:ca:e2:74:
91:ff:02:e9:64:92:97:13:58:8c:13:e4:a5:06:82:
3e:07:52:76:83:49:7e:52:9e:37:53:07:fb:a4:3b:
72:7c:64:3d:e3:bf:cd:70:09:3c:c8:4a:18:dc:20:
6c:48:11:9e:59:df:0b:3c:e2:ce:af:67:fe:f4:f1:
82:a9:36:a6:54:1f:09:f9:96:40:6f:fe:28:96:33:
d5:ac:b7:b8:72:ae:5d:a7:68:a9:5d:a9:a6:a3:60:
db:dc:57:17:5d:3b:ee:61:e8:15:bd:0b:a4:38:13:
31:67:84:3d:a4:40:4c:17:cf:bd:68:df:9a:39:9a:
fc:ff:21:67:b4:3f:0f:54:fd:8e:63:66:d6:19:db:
db:cf:bb:34:00:05:9b:e8:cb:2c:1e:e9:c3:39:e3:
93:7b:e4:6a:c9:7f:9e:08:04:ac:32:62:b2:de:d3:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:69:B3:DA:3D:50:3A:84:81:F2:A0:98:70:7C:70:E4:D4:88:3C
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:dd:e8:61:a8:cd:73:a0:a6:2e:5a:da:ef:a6:48:c1:70:7f:
7b:81:af:a8:c0:fb:ba:b2:5e:5d:e8:86:37:f1:cf:1f:d3:44:
97:a6:1e:3e:b0:45:4e:af:14:29:3a:fa:ab:b1:67:d6:ee:ee:
b2:25:b3:29:43:e4:a7:d6:6e:6a:60:dc:12:95:38:c5:1a:a7:
a3:a2:0e:f4:0c:da:90:08:30:de:b9:f0:f8:f8:15:ad:cf:3e:
06:9b:d6:da:c8:80:cc:e6:48:26:5d:a2:44:93:99:cf:2f:cc:
e2:a0:66:35:62:e9:a2:c8:e6:0f:41:fb:d9:45:41:f3:df:32:
cc:e5:9a:da:49:3d:0f:5a:01:ac:36:a7:8d:fb:cb:82:00:37:
32:f7:51:a5:46:06:12:94:39:d2:53:98:10:ca:45:8d:f6:9b:
2b:f3:15:2d:dd:8e:c2:47:43:7c:da:e6:43:76:5f:22:9a:bf:
1a:ca:3c:76:91:e2:04:69:a7:10:50:56:52:07:72:ba:75:3e:
1b:27:bc:b2:a4:c3:06:8a:e3:0f:33:6e:a0:47:be:e9:d1:7e:
83:3f:42:ae:bf:1b:c1:05:1a:77:6e:86:5f:d5:fc:aa:ed:51:
4b:00:46:6a:ef:f3:de:75:10:da:de:52:36:d5:8b:a1:68:1a:
d1:10:25:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dItUCMjAPT+UzlIdUrv0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjYwNTEyMTcwMTIyWhcNMjYwNTEzMTcwMTIyWjAzMTEwLwYDVQQD
Eyg3MDMxNjliM2RhM2Q1MDNhODQ4MWYyYTA5ODcwN2M3MGU0ZDQ4ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubLo7l0wDIDwlzZVikiW3x7j4A0d
YbyG9NCJ8qtldIe0xBIbvS5Pp12usIrSw8NAkhzYt0ecnF8eas89UfwSLQi5+9RW
slKiHAhglePdUAstm7NZDabK4nSR/wLpZJKXE1iME+SlBoI+B1J2g0l+Up43Uwf7
pDtyfGQ947/NcAk8yEoY3CBsSBGeWd8LPOLOr2f+9PGCqTamVB8J+ZZAb/4oljPV
rLe4cq5dp2ipXammo2Db3FcXXTvuYegVvQukOBMxZ4Q9pEBMF8+9aN+aOZr8/yFn
tD8PVP2OY2bWGdvbz7s0AAWb6MssHunDOeOTe+RqyX+eCASsMmKy3tN4dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAxabPaPVA6hIHyoJhwfHDk1Ig8MB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb93oYajN
c6CmLlra76ZIwXB/e4GvqMD7urJeXeiGN/HPH9NEl6YePrBFTq8UKTr6q7Fn1u7u
siWzKUPkp9ZuamDcEpU4xRqno6IO9AzakAgw3rnw+PgVrc8+BpvW2siAzOZIJl2i
RJOZzy/M4qBmNWLposjmD0H72UVB898yzOWa2kk9D1oBrDanjfvLggA3MvdRpUYG
EpQ50lOYEMpFjfabK/MVLd2OwkdDfNrmQ3ZfIpq/Gso8dpHiBGmnEFBWUgdyunU+
Gye8sqTDBorjDzNuoEe+6dF+gz9Crr8bwQUad26GX9X8qu1RSwBGau/z3nUQ2t5S
NtWLoWga0RAlug==
-----END CERTIFICATE-----
Generated at Wed May 13 02:17:32 2026 by rpki-client