Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: BgDtX4zYVqB3TD35pq4YVgLpyBFRyfcmTECQuh2ixyA=
Subject key identifier: FF:5B:86:B1:A5:44:9A:0D:15:DF:16:52:50:42:C8:32:B0:81:E1:8D
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 019E1E6C7472AB25E5C78DC5452AA8A838EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:24 +0000
Manifest this update: Tue 12 May 2026 23:01:24 +0000
Manifest next update: Wed 13 May 2026 23:01:24 +0000
Files and hashes: 1: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: McR2VAM5pBKkQkgHWzT4XRdGZRqH2dxd9W2YNrADlv8=)
2: g7fYHM51W9swYseMkrEDa3soWXY.roa (hash: k9K4BHL4fbJsHQSn19Joe+3Hon27U4MZ6GclcBUO56E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:74:72:ab:25:e5:c7:8d:c5:45:2a:a8:a8:38:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: May 12 23:01:24 2026 GMT
Not After : May 13 23:01:24 2026 GMT
Subject: CN=ff5b86b1a5449a0d15df16525042c832b081e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:1e:20:f7:26:65:9a:17:87:36:50:91:fa:
23:2e:77:48:59:1b:84:29:d6:e2:b3:70:c3:43:3d:
c2:33:6c:82:20:12:1b:89:fb:5b:4e:68:41:ef:20:
ec:ea:66:20:e0:99:15:56:05:a8:cd:cd:f2:9d:51:
5b:7c:3a:0c:5c:be:c5:60:0f:dc:66:30:20:e9:df:
3e:e2:38:45:da:3f:67:1e:46:e6:dc:77:34:c8:27:
d4:e4:67:34:e0:bf:12:5f:13:b2:9a:fa:8d:cf:ff:
db:42:65:d6:f4:2f:04:fb:45:6d:a1:83:68:db:b9:
84:11:06:66:6e:13:ea:38:1b:ec:bb:2e:49:5c:dd:
26:a7:94:f0:03:9e:68:d3:dd:13:c9:5f:7c:28:8f:
3d:a9:71:69:aa:24:33:38:17:bb:36:66:01:37:f6:
e4:cd:5d:aa:9f:14:7d:60:47:b4:c5:a4:35:3f:dd:
0c:6c:76:4f:6f:7a:c6:e0:20:ea:19:17:df:2d:47:
33:96:35:7b:65:56:a8:bb:b8:15:ad:63:66:07:66:
1c:54:c0:33:45:a4:d5:1c:24:b1:b3:2b:df:c3:75:
b2:5b:5e:72:15:9d:54:6f:c5:a1:e5:33:1d:7a:ca:
9b:c9:4c:a2:cb:70:9a:d5:25:a1:04:fb:66:60:8d:
53:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5B:86:B1:A5:44:9A:0D:15:DF:16:52:50:42:C8:32:B0:81:E1:8D
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:38:a8:de:12:b5:a5:67:2b:cd:f9:4d:58:53:cd:b9:ac:f9:
ce:20:59:7e:5a:9f:b3:4c:2d:60:89:92:25:7d:90:83:b5:64:
6d:97:38:19:e0:3c:18:6c:7b:26:d4:9d:e0:5b:34:cc:ae:cf:
d2:82:fe:b1:f1:24:8c:51:78:b1:b9:86:3b:fc:df:10:d9:dc:
ad:ac:d5:66:0e:ed:84:1c:bb:88:ee:f0:d8:53:8b:e3:06:0a:
b4:98:d8:16:f1:c7:f5:c7:8f:7d:ac:c5:01:da:09:63:27:1d:
ae:34:7b:77:06:75:26:3e:b8:63:42:a0:c1:bd:e2:1f:67:9a:
18:44:5f:f8:8c:66:73:07:b5:9c:10:c7:8d:00:27:b8:7f:19:
98:b6:76:73:04:b9:34:7e:b8:51:cd:95:12:47:7c:4b:36:f8:
8f:b7:af:8f:5a:9c:73:96:a1:58:93:31:27:8f:0e:ab:14:1c:
4f:f0:0c:27:16:59:de:02:85:ad:28:d0:63:08:10:d4:b5:62:
01:ad:f5:97:39:2f:de:e8:94:d6:46:3c:2f:0f:f2:c2:83:31:
f6:b2:c2:5b:b6:66:c0:fa:06:c7:09:4c:67:be:6e:4d:26:3c:
56:bd:13:4c:15:5b:4c:00:a2:0a:7c:2d:49:6c:4d:cb:ed:a9:
1a:f0:91:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebHRyqyXlx43FRSqoqDjqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZjkzNjljNmUyM2MxYmYwZGJlZDMwMWM3ZDAwYjRhM2Zk
ZjBkMDQwHhcNMjYwNTEyMjMwMTI0WhcNMjYwNTEzMjMwMTI0WjAzMTEwLwYDVQQD
EyhmZjViODZiMWE1NDQ5YTBkMTVkZjE2NTI1MDQyYzgzMmIwODFlMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMweIPcmZZoXhzZQkfojLndIWRuE
Kdbis3DDQz3CM2yCIBIbiftbTmhB7yDs6mYg4JkVVgWozc3ynVFbfDoMXL7FYA/c
ZjAg6d8+4jhF2j9nHkbm3Hc0yCfU5Gc04L8SXxOymvqNz//bQmXW9C8E+0VtoYNo
27mEEQZmbhPqOBvsuy5JXN0mp5TwA55o090TyV98KI89qXFpqiQzOBe7NmYBN/bk
zV2qnxR9YEe0xaQ1P90MbHZPb3rG4CDqGRffLUczljV7ZVaou7gVrWNmB2YcVMAz
RaTVHCSxsyvfw3WyW15yFZ1Ub8Wh5TMdesqbyUyiy3Ca1SWhBPtmYI1TNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9bhrGlRJoNFd8WUlBCyDKwgeGNMB8GA1UdIwQY
MBaAFHT5NpxuI8G/Db7TAcfQC0o/3w0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTkt
MmI1MThhY2I3OGYzLzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTktMmI1MThhY2I3OGYz
LzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjio3hK1
pWcrzflNWFPNuaz5ziBZflqfs0wtYImSJX2Qg7VkbZc4GeA8GGx7JtSd4Fs0zK7P
0oL+sfEkjFF4sbmGO/zfENncrazVZg7thBy7iO7w2FOL4wYKtJjYFvHH9cePfazF
AdoJYycdrjR7dwZ1Jj64Y0Kgwb3iH2eaGERf+Ixmcwe1nBDHjQAnuH8ZmLZ2cwS5
NH64Uc2VEkd8Szb4j7evj1qcc5ahWJMxJ48OqxQcT/AMJxZZ3gKFrSjQYwgQ1LVi
Aa31lzkv3uiU1kY8Lw/ywoMx9rLCW7ZmwPoGxwlMZ75uTSY8Vr0TTBVbTACiCnwt
SWxNy+2pGvCR+A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:59:29 2026 by rpki-client