Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
File: 2671wyvqS1TRfiQbXMyvB7wKjuk.mft (raw, json)
Hash identifier: VqXnhZeu7pRCBKGr5mjKLJVn2x+MWRlAhfUUBb977tw=
Subject key identifier: 1F:C7:27:D0:DB:46:A3:76:E2:9A:42:36:54:2D:0F:91:49:0E:B0:4B
Authority key identifier: DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
Certificate issuer: /CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Certificate serial: 019E1CEBAAB683D6AE619E780072D047C41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
Manifest number: 127F
Signing time: Tue 12 May 2026 16:01:06 +0000
Manifest this update: Tue 12 May 2026 16:01:06 +0000
Manifest next update: Wed 13 May 2026 16:01:06 +0000
Files and hashes: 1: 1-95gw9KACRY59GXkCu6E44De0Qk.roa (hash: iKh5qfmB78EvSPQTYq74QtU0CuU4qb/tMvQfB/d/g9c=)
2: 2671wyvqS1TRfiQbXMyvB7wKjuk.crl (hash: UcuUxUfkxJ53LgyNfi9UrvnXNL+cU5G6RUxK310nygc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:aa:b6:83:d6:ae:61:9e:78:00:72:d0:47:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbaef5c32bea4b54d17e241b5cccaf07bc0a8ee9
Validity
Not Before: May 12 16:01:06 2026 GMT
Not After : May 13 16:01:06 2026 GMT
Subject: CN=1fc727d0db46a376e29a4236542d0f91490eb04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:61:42:26:16:a8:d1:e7:51:84:29:fa:44:
38:4a:ad:97:95:12:91:2e:b6:b9:9d:5d:22:f9:e5:
5d:c0:1d:11:28:30:97:b3:0f:70:86:a8:03:57:05:
5b:13:4b:96:71:75:38:22:52:cf:02:55:46:0d:c2:
6f:c5:cf:ce:f1:b3:05:06:ce:9d:07:78:9c:68:a5:
2d:55:4e:16:e1:5f:97:4a:bc:8b:c9:2e:13:42:3e:
6d:93:4e:d2:ea:e6:9f:75:de:50:06:f0:9d:f9:92:
66:f9:ee:a4:98:8f:b3:5b:dc:c7:ab:5e:78:64:6c:
64:7e:12:b9:63:2d:a3:6d:dc:3b:19:f4:39:e3:9e:
2f:fd:ff:67:63:ea:02:d7:f7:e9:d2:bd:01:e9:d9:
ed:8b:13:1b:de:5f:c3:cd:2a:e1:c0:b8:ae:9e:55:
fe:30:7d:4f:75:9b:b1:97:97:9f:ab:99:8f:5f:05:
2a:62:a9:6a:3e:44:71:9d:54:79:55:1f:61:53:3f:
bb:ca:4b:a1:f8:8f:3e:bf:66:db:b8:f5:88:19:14:
a7:18:fe:a9:5b:8b:9e:9e:5d:42:e5:fe:a9:be:ac:
41:de:03:30:a6:09:b5:57:43:32:3e:6d:4c:34:9d:
55:04:29:ad:c6:68:7f:7d:af:ab:58:9f:56:03:39:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:27:D0:DB:46:A3:76:E2:9A:42:36:54:2D:0F:91:49:0E:B0:4B
X509v3 Authority Key Identifier:
keyid:DB:AE:F5:C3:2B:EA:4B:54:D1:7E:24:1B:5C:CC:AF:07:BC:0A:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2671wyvqS1TRfiQbXMyvB7wKjuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dee66f-45cc-4cb4-9fbb-642ce674f974/1/2671wyvqS1TRfiQbXMyvB7wKjuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:b1:5e:4f:f6:ad:05:22:02:23:e4:9b:04:00:8c:18:cd:
a9:a9:4e:ea:95:51:f9:dc:13:02:56:4f:6a:0f:f7:7b:3f:f8:
81:84:dd:5f:9e:e8:34:02:a1:a6:54:0f:33:92:29:c4:d5:57:
e5:1c:7a:f8:86:e2:dd:10:51:59:2a:65:72:f0:5e:d2:6c:e4:
9c:5c:66:0d:8b:79:7e:74:c9:0d:35:08:ac:e8:9c:93:36:57:
fd:da:f3:9e:c4:b0:07:3e:d2:5c:b1:a7:ce:f0:f3:1f:3f:49:
8d:0b:9e:e8:a1:1a:9c:6c:48:e4:c4:a4:97:b6:d2:94:34:fb:
58:09:f1:12:82:03:f8:28:b7:ab:b7:c4:c1:65:f7:8e:6d:61:
57:41:61:40:47:e2:28:b7:d6:41:e0:d7:ef:76:4c:15:0b:88:
08:ed:d6:5e:10:b2:a4:4c:b9:11:3b:ea:58:7e:30:22:1b:4e:
ad:ff:88:be:0c:6f:63:7b:36:1a:b9:0e:ea:8f:8d:15:f4:b7:
c3:c3:8e:7e:46:fd:97:cb:8e:78:c6:0a:45:9b:2d:19:2e:67:
4c:45:4b:bd:17:7d:ca:9e:d9:7d:0f:c0:4c:c1:57:96:57:d3:
fc:96:39:34:d7:7f:e4:8f:92:89:1c:0c:70:5d:c1:f2:7f:02:
21:f7:25:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c66q2g9auYZ54AHLQR8QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYWVmNWMzMmJlYTRiNTRkMTdlMjQxYjVjY2NhZjA3YmMw
YThlZTkwHhcNMjYwNTEyMTYwMTA2WhcNMjYwNTEzMTYwMTA2WjAzMTEwLwYDVQQD
EygxZmM3MjdkMGRiNDZhMzc2ZTI5YTQyMzY1NDJkMGY5MTQ5MGViMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77ZhQiYWqNHnUYQp+kQ4Sq2XlRKR
Lra5nV0i+eVdwB0RKDCXsw9whqgDVwVbE0uWcXU4IlLPAlVGDcJvxc/O8bMFBs6d
B3icaKUtVU4W4V+XSryLyS4TQj5tk07S6uafdd5QBvCd+ZJm+e6kmI+zW9zHq154
ZGxkfhK5Yy2jbdw7GfQ5454v/f9nY+oC1/fp0r0B6dntixMb3l/DzSrhwLiunlX+
MH1PdZuxl5efq5mPXwUqYqlqPkRxnVR5VR9hUz+7ykuh+I8+v2bbuPWIGRSnGP6p
W4uenl1C5f6pvqxB3gMwpgm1V0MyPm1MNJ1VBCmtxmh/fa+rWJ9WAzkBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/HJ9DbRqN24ppCNlQtD5FJDrBLMB8GA1UdIwQY
MBaAFNuu9cMr6ktU0X4kG1zMrwe8Co7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmIt
NjQyY2U2NzRmOTc0LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kZWU2NmYtNDVjYy00Y2I0LTlmYmItNjQyY2U2NzRmOTc0
LzEvMjY3MXd5dnFTMVRSZmlRYlhNeXZCN3dLanVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrKxXk/2
rQUiAiPkmwQAjBjNqalO6pVR+dwTAlZPag/3ez/4gYTdX57oNAKhplQPM5IpxNVX
5Rx6+Ibi3RBRWSplcvBe0mzknFxmDYt5fnTJDTUIrOickzZX/drznsSwBz7SXLGn
zvDzHz9JjQue6KEanGxI5MSkl7bSlDT7WAnxEoID+Ci3q7fEwWX3jm1hV0FhQEfi
KLfWQeDX73ZMFQuICO3WXhCypEy5ETvqWH4wIhtOrf+IvgxvY3s2GrkO6o+NFfS3
w8OOfkb9l8uOeMYKRZstGS5nTEVLvRd9yp7ZfQ/ATMFXllfT/JY5NNd/5I+SiRwM
cF3B8n8CIfclQw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:37:27 2026 by rpki-client