Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File: cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier: dQRaEI44bSqxkvFFB27+2U6CiMA/SL8COtJW7mgQCdM=
Subject key identifier: 0F:0A:E1:E0:17:0E:58:3E:FE:97:5B:57:1B:42:C0:03:D8:64:2B:A6
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial: 019E1D5935DD94F32E3395E7297BFE90B2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 18:00:46 +0000
Manifest this update: Tue 12 May 2026 18:00:46 +0000
Manifest next update: Wed 13 May 2026 18:00:46 +0000
Files and hashes: 1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: bfVPcijJ6Yt0H9YsX7s91YXAlNvXuUDZGwVEgTn7AJE=)
6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:35:dd:94:f3:2e:33:95:e7:29:7b:fe:90:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Validity
Not Before: May 12 18:00:46 2026 GMT
Not After : May 13 18:00:46 2026 GMT
Subject: CN=0f0ae1e0170e583efe975b571b42c003d8642ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:56:f1:78:a0:21:f7:e2:d4:7f:c6:e1:91:
19:e9:0c:fb:dd:23:3a:35:7c:7e:5a:5b:f2:62:12:
f9:e5:cd:25:5f:86:af:ac:be:9d:91:fa:14:fd:5e:
fb:50:55:fa:df:38:e5:3d:5a:85:dd:e0:b4:15:42:
04:68:4f:86:76:eb:db:34:75:16:37:64:50:cb:21:
1a:d1:ec:54:f1:4b:3b:47:a3:4b:d4:0f:d2:54:24:
49:ad:47:20:53:d8:c3:5f:16:7d:20:4f:38:53:b4:
82:e2:2b:b5:56:0c:98:86:c9:bc:73:53:c0:58:01:
91:37:b5:9e:c1:67:10:11:11:2f:6b:51:0c:2c:fb:
ab:ce:83:f9:00:7a:1e:79:15:af:5f:9a:77:c1:97:
64:2d:ee:13:50:8b:91:c3:ed:77:df:5f:15:62:98:
72:f3:10:69:35:f3:17:74:09:3f:ef:2b:d0:b0:71:
0a:cf:e2:1d:77:71:02:38:6c:80:9f:ee:36:3c:59:
0c:9b:5f:e0:98:88:87:ea:29:06:84:51:9f:ce:dc:
d4:a3:81:46:a9:f3:f1:f6:9e:9b:b9:b3:78:a2:7b:
b1:59:08:a8:87:63:66:b4:99:fe:70:a3:0a:ea:ba:
5a:53:34:f6:5a:7a:37:a5:80:f4:31:eb:2d:15:54:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0A:E1:E0:17:0E:58:3E:FE:97:5B:57:1B:42:C0:03:D8:64:2B:A6
X509v3 Authority Key Identifier:
keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:20:2d:81:5f:8a:f3:06:14:9e:8d:1e:ef:77:cb:59:90:7c:
94:a3:8d:2e:b4:db:2f:b7:6b:e2:5d:dd:1c:24:42:2f:46:87:
c6:9e:3b:b6:2e:e6:ef:0e:26:48:87:b1:66:cd:35:bc:64:49:
2a:65:9c:a4:c1:fc:78:12:81:5d:b6:6e:85:ae:d4:08:14:71:
0f:09:03:f7:3a:52:87:6c:75:48:44:84:00:7f:91:f0:93:79:
d6:93:59:3d:4e:c0:2f:d6:37:5d:68:83:f6:27:c0:58:7f:72:
30:56:a5:7d:39:93:47:f2:1d:42:e2:00:24:40:9a:74:d0:ff:
f9:91:c9:f2:74:3b:55:94:5a:33:80:b9:6b:cf:60:69:ad:4f:
8b:f7:b4:64:8b:14:e8:fa:da:00:6f:92:d9:8d:23:eb:0e:be:
bc:7a:97:29:31:13:04:bc:2c:b4:e4:6f:fe:ea:5f:88:62:71:
7c:36:08:fd:42:c5:f1:72:f8:91:21:98:3f:29:cb:2c:9b:9a:
4a:e3:92:5f:df:ee:f0:db:52:98:28:67:8f:69:43:b8:e1:30:
06:e0:10:a7:c1:a2:d7:11:7a:ab:2a:65:f0:50:48:4d:bd:c7:
c1:14:88:53:34:14:35:a7:98:a2:97:06:ff:e2:59:30:a2:d0:
72:b0:17:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTXdlPMuM5XnKXv+kLLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj
NDM4YWMwHhcNMjYwNTEyMTgwMDQ2WhcNMjYwNTEzMTgwMDQ2WjAzMTEwLwYDVQQD
EygwZjBhZTFlMDE3MGU1ODNlZmU5NzViNTcxYjQyYzAwM2Q4NjQyYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUpW8XigIffi1H/G4ZEZ6Qz73SM6
NXx+WlvyYhL55c0lX4avrL6dkfoU/V77UFX63zjlPVqF3eC0FUIEaE+GduvbNHUW
N2RQyyEa0exU8Us7R6NL1A/SVCRJrUcgU9jDXxZ9IE84U7SC4iu1VgyYhsm8c1PA
WAGRN7WewWcQEREva1EMLPurzoP5AHoeeRWvX5p3wZdkLe4TUIuRw+13318VYphy
8xBpNfMXdAk/7yvQsHEKz+Idd3ECOGyAn+42PFkMm1/gmIiH6ikGhFGfztzUo4FG
qfPx9p6bubN4onuxWQioh2NmtJn+cKMK6rpaUzT2Wno3pYD0MestFVQ+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8K4eAXDlg+/pdbVxtCwAPYZCumMB8GA1UdIwQY
MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt
OTg3ZGE0MzkyMDU2LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2
LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyAtgV+K
8wYUno0e73fLWZB8lKONLrTbL7dr4l3dHCRCL0aHxp47ti7m7w4mSIexZs01vGRJ
KmWcpMH8eBKBXbZuha7UCBRxDwkD9zpSh2x1SESEAH+R8JN51pNZPU7AL9Y3XWiD
9ifAWH9yMFalfTmTR/IdQuIAJECadND/+ZHJ8nQ7VZRaM4C5a89gaa1Pi/e0ZIsU
6PraAG+S2Y0j6w6+vHqXKTETBLwstORv/upfiGJxfDYI/ULF8XL4kSGYPynLLJua
SuOSX9/u8NtSmChnj2lDuOEwBuAQp8Gi1xF6qypl8FBITb3HwRSIUzQUNaeYopcG
/+JZMKLQcrAXYw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:15 2026 by rpki-client