Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File: cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier: FGRcRX+/1VHbk5irNNCZqcHQZtDUJTvnpWDJNss/S64=
Subject key identifier: A4:C5:37:EF:0F:E8:5F:30:70:42:A7:D4:82:41:D8:84:87:7D:20:77
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer: /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial: 019E1E6C8364675DC2FB0B51AE3460C47B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number: 0D9B
Signing time: Tue 12 May 2026 23:01:28 +0000
Manifest this update: Tue 12 May 2026 23:01:28 +0000
Manifest next update: Wed 13 May 2026 23:01:28 +0000
Files and hashes: 1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: HwrIgTdtz8O1OJQsmRS8EtUNgOgiPzZM8S+R0hxfQNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:83:64:67:5d:c2:fb:0b:51:ae:34:60:c4:7b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Validity
Not Before: May 12 23:01:28 2026 GMT
Not After : May 13 23:01:28 2026 GMT
Subject: CN=a4c537ef0fe85f307042a7d48241d884877d2077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:27:7d:10:08:60:61:db:b4:e5:d9:a4:ca:
78:d7:e7:61:14:bc:99:77:57:b9:ec:a2:a1:62:14:
2f:9f:45:34:bb:37:99:9c:83:b3:68:b7:57:70:dd:
50:45:ff:da:51:ac:a8:cc:26:68:ad:13:66:8b:92:
6a:72:63:83:2f:33:ed:ca:7f:03:6c:cf:35:73:fd:
0e:39:95:d6:dc:0c:5a:b0:3f:0a:39:f4:51:06:4c:
4f:74:df:31:4c:87:cd:47:0d:89:bf:29:f9:ce:b2:
ba:56:19:6b:cb:f8:5b:87:51:6e:c9:03:94:05:16:
7a:cc:11:a4:7d:e8:24:8e:7e:27:fc:f3:a6:7e:c6:
b2:48:33:ca:25:37:aa:9d:36:6c:ee:28:30:db:cc:
14:58:f8:84:8a:9b:d7:96:53:b9:45:7a:92:79:3f:
a3:e9:86:0c:3c:c7:cf:67:85:b2:ce:e7:d2:af:9e:
95:e9:39:fd:1f:85:fb:2c:0a:b3:d8:5d:8a:c1:64:
b3:2e:44:f6:a6:e0:39:ac:49:02:f7:7b:5e:44:ca:
d4:bf:c7:e5:ed:9d:91:d8:16:ca:8e:0b:84:22:b2:
ae:57:21:16:d7:14:47:3f:05:e8:1b:43:ce:9a:c1:
3e:8e:2a:10:2f:b2:cd:cc:b2:c0:7b:91:4c:d2:14:
28:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C5:37:EF:0F:E8:5F:30:70:42:A7:D4:82:41:D8:84:87:7D:20:77
X509v3 Authority Key Identifier:
keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a6:f9:d3:36:68:d7:36:f6:29:11:ac:99:49:85:71:6a:96:
9d:49:c3:bc:cb:8e:1b:3e:d4:5f:39:e3:d1:25:a2:c3:41:f4:
09:ad:98:78:6e:57:0d:5c:bd:f9:31:1e:61:ee:21:d9:8d:77:
22:a5:65:30:74:50:d1:eb:5f:58:af:02:0a:e5:0c:e1:4f:00:
6e:c2:ac:d3:1b:45:2d:17:6a:11:96:e5:3e:a3:5d:3a:41:7b:
ca:9c:d0:3f:b3:a0:f7:c2:9e:3d:03:68:e3:c8:8d:f6:0e:d6:
8e:e7:67:a3:f2:73:3d:e8:8e:ff:c5:96:32:16:2d:a8:65:36:
8d:e6:86:7e:53:d6:c8:16:bd:8f:1d:2c:ee:58:0a:11:16:52:
7e:17:85:cb:45:44:07:e3:9d:38:28:92:97:b5:3e:0a:46:ba:
ab:f8:fa:5c:b3:6a:d1:23:7f:0f:1c:36:16:f4:5a:31:64:5d:
00:19:0a:6d:5b:87:a2:7d:50:e0:86:ae:cc:36:1b:1d:b3:9c:
15:68:b6:be:86:5a:b4:48:f3:4b:51:89:e4:84:e1:a6:de:d0:
85:ab:8f:f3:59:22:5f:6d:7a:46:f2:a5:fe:38:6f:67:b1:30:
00:82:8c:73:cc:18:73:18:13:d1:d5:24:47:d2:a2:ad:46:3d:
d5:37:16:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebINkZ13C+wtRrjRgxHsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2I5NjU0M2Y3ZTE5NTcyM2U2ZDEyMmMyOTQ3OGJmZGRh
MDNlY2MwHhcNMjYwNTEyMjMwMTI4WhcNMjYwNTEzMjMwMTI4WjAzMTEwLwYDVQQD
EyhhNGM1MzdlZjBmZTg1ZjMwNzA0MmE3ZDQ4MjQxZDg4NDg3N2QyMDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSAnfRAIYGHbtOXZpMp41+dhFLyZ
d1e57KKhYhQvn0U0uzeZnIOzaLdXcN1QRf/aUayozCZorRNmi5JqcmODLzPtyn8D
bM81c/0OOZXW3AxasD8KOfRRBkxPdN8xTIfNRw2Jvyn5zrK6Vhlry/hbh1FuyQOU
BRZ6zBGkfegkjn4n/POmfsaySDPKJTeqnTZs7igw28wUWPiEipvXllO5RXqSeT+j
6YYMPMfPZ4WyzufSr56V6Tn9H4X7LAqz2F2KwWSzLkT2puA5rEkC93teRMrUv8fl
7Z2R2BbKjguEIrKuVyEW1xRHPwXoG0POmsE+jioQL7LNzLLAe5FM0hQopwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTFN+8P6F8wcEKn1IJB2ISHfSB3MB8GA1UdIwQY
MBaAFHDLllQ/fhlXI+bRIsKUeL/doD7MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMt
Mjc0Y2Q2Y2FhM2YzLzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iN2U0YWMtODUwOC00ZDZiLWEyYmMtMjc0Y2Q2Y2FhM2Yz
LzEvY011V1ZEOS1HVmNqNXRFaXdwUjR2OTJnUHN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqb50zZo
1zb2KRGsmUmFcWqWnUnDvMuOGz7UXznj0SWiw0H0Ca2YeG5XDVy9+TEeYe4h2Y13
IqVlMHRQ0etfWK8CCuUM4U8AbsKs0xtFLRdqEZblPqNdOkF7ypzQP7Og98KePQNo
48iN9g7Wjudno/JzPeiO/8WWMhYtqGU2jeaGflPWyBa9jx0s7lgKERZSfheFy0VE
B+OdOCiSl7U+Cka6q/j6XLNq0SN/Dxw2FvRaMWRdABkKbVuHon1Q4IauzDYbHbOc
FWi2voZatEjzS1GJ5IThpt7QhauP81kiX216RvKl/jhvZ7EwAIKMc8wYcxgT0dUk
R9KirUY91TcWCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:01 2026 by rpki-client