Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: 0Q4N+/tFGtWpyTKDzvZcbDXGJt/eOBdiAoe4PzxM9kU=
Subject key identifier: 1E:97:20:5B:2A:2A:BB:63:E6:EA:4E:4C:29:79:FB:2A:00:FB:99:4F
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 019E1C472620503DDAEFF2E7141C1022BA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 13:01:25 +0000
Manifest this update: Tue 12 May 2026 13:01:25 +0000
Manifest next update: Wed 13 May 2026 13:01:25 +0000
Files and hashes: 1: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: JpfIQjppELps2Msehsq+RxE676ICew/sfk4CNyYy/MU=)
2: eEPTZT6Cu9Z_P3_raMWIwWmS4XU.roa (hash: QSgLB7ALo1ZtZRISbHuHkO61FWxfLx7/83BtDc+Ihaw=)
3: vlffUXbbe03bAModfKshSSav8vw.roa (hash: ZWDKGd58/YtOBOKnYCn4Dv/eX+Na3BO0QhlUmQSZ39w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:26:20:50:3d:da:ef:f2:e7:14:1c:10:22:ba:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: May 12 13:01:25 2026 GMT
Not After : May 13 13:01:25 2026 GMT
Subject: CN=1e97205b2a2abb63e6ea4e4c2979fb2a00fb994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2e:e5:9b:bd:8e:08:5b:00:5a:de:1f:1a:68:
af:0a:0f:de:f5:49:be:9a:1c:d3:50:11:1c:3f:a3:
c5:ec:8f:c3:ef:73:7b:ff:ce:73:1c:b0:2c:2c:59:
37:c9:84:4e:0d:3f:6f:fe:e8:b7:9d:4d:cf:51:bf:
33:82:49:1f:a0:aa:d7:5a:73:c1:89:f0:71:db:62:
a2:a0:d6:1e:30:22:65:27:7f:47:64:f5:99:91:7d:
b1:4e:eb:25:f7:86:c9:00:d6:7e:05:60:75:91:81:
a9:cf:0c:14:60:e1:f9:6c:e2:bd:47:34:6f:fb:8e:
94:82:f9:5f:47:56:41:9f:b7:df:91:ce:28:8e:76:
21:bb:47:07:f4:db:1e:ac:4b:e6:30:95:c4:da:77:
ca:45:75:4d:4a:b2:a4:91:ea:dc:96:b7:89:ca:f1:
7f:46:26:52:24:92:8b:fe:4a:1b:a3:9f:d5:fa:89:
e2:73:62:13:67:f4:1e:08:ed:ec:00:db:51:9c:5d:
a4:53:d7:35:00:b4:0d:62:5b:47:87:70:2e:6a:7a:
1c:e0:dd:58:5d:46:86:4a:3a:b2:ae:f9:d8:05:d7:
15:e5:7b:bf:21:3c:aa:5a:69:33:dd:78:25:2c:da:
a8:d4:9c:96:32:34:59:e7:ed:19:ec:3c:7f:0f:09:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:97:20:5B:2A:2A:BB:63:E6:EA:4E:4C:29:79:FB:2A:00:FB:99:4F
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cc:45:2e:79:3c:16:07:3e:c7:86:87:34:a5:7c:0d:37:f2:
5e:12:47:0f:65:f9:41:52:4c:40:57:7c:cf:ee:94:c9:0d:da:
43:ea:9e:0c:31:6f:1b:08:80:7e:81:c1:a8:cb:2a:09:ec:7b:
b8:8b:b9:42:90:fa:69:58:71:7a:ff:f7:a3:06:29:30:d0:30:
74:79:66:0c:9c:1d:2b:c7:0a:f0:ca:5c:03:bc:89:da:14:cf:
0c:e6:58:48:c2:aa:dd:52:d1:f5:74:84:15:86:d0:1f:f2:65:
f3:8b:05:f9:7c:42:55:2a:7d:7c:65:c1:44:8b:ed:6e:15:a2:
be:02:fc:99:43:7c:cb:41:c6:c1:60:6a:ae:9c:52:65:c4:93:
9c:44:52:c5:57:f0:a4:72:d3:49:ae:c4:4f:b1:07:e8:72:ed:
e8:c8:ff:f5:6f:28:d9:82:ac:bc:38:f5:cc:ef:74:54:56:0f:
31:72:1e:d4:a9:97:a0:e7:ec:6d:66:b9:fe:8a:94:4d:ca:c8:
28:cb:81:38:00:77:89:5b:bc:09:72:fb:08:c1:78:ff:43:e6:
1f:6a:2f:7a:8c:0e:a8:76:ba:04:ad:c3:5b:1a:61:28:3f:cb:
b8:28:31:90:e4:8a:50:ea:a1:40:7f:a0:b3:f6:5e:23:d0:82:
0c:e9:cf:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRyYgUD3a7/LnFBwQIrpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjYwNTEyMTMwMTI1WhcNMjYwNTEzMTMwMTI1WjAzMTEwLwYDVQQD
EygxZTk3MjA1YjJhMmFiYjYzZTZlYTRlNGMyOTc5ZmIyYTAwZmI5OTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy7lm72OCFsAWt4fGmivCg/e9Um+
mhzTUBEcP6PF7I/D73N7/85zHLAsLFk3yYRODT9v/ui3nU3PUb8zgkkfoKrXWnPB
ifBx22KioNYeMCJlJ39HZPWZkX2xTusl94bJANZ+BWB1kYGpzwwUYOH5bOK9RzRv
+46UgvlfR1ZBn7ffkc4ojnYhu0cH9NserEvmMJXE2nfKRXVNSrKkkerclreJyvF/
RiZSJJKL/kobo5/V+onic2ITZ/QeCO3sANtRnF2kU9c1ALQNYltHh3Auanoc4N1Y
XUaGSjqyrvnYBdcV5Xu/ITyqWmkz3XglLNqo1JyWMjRZ5+0Z7Dx/DwkzdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6XIFsqKrtj5upOTCl5+yoA+5lPMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcxFLnk8
Fgc+x4aHNKV8DTfyXhJHD2X5QVJMQFd8z+6UyQ3aQ+qeDDFvGwiAfoHBqMsqCex7
uIu5QpD6aVhxev/3owYpMNAwdHlmDJwdK8cK8MpcA7yJ2hTPDOZYSMKq3VLR9XSE
FYbQH/Jl84sF+XxCVSp9fGXBRIvtbhWivgL8mUN8y0HGwWBqrpxSZcSTnERSxVfw
pHLTSa7ET7EH6HLt6Mj/9W8o2YKsvDj1zO90VFYPMXIe1KmXoOfsbWa5/oqUTcrI
KMuBOAB3iVu8CXL7CMF4/0PmH2oveowOqHa6BK3DWxphKD/LuCgxkOSKUOqhQH+g
s/ZeI9CCDOnPYw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:57 2026 by rpki-client