Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: 1ocYVFb64B3eOQTEJ8yBy11CbdmizupZ4u7SyuOoVk8=
Subject key identifier: 95:68:75:02:9D:D0:AF:DB:C1:99:CC:E4:C0:21:D0:93:90:DE:07:3F
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 019E1CEB7E7A0459BC3A5FDA609EE609DE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 0CC8
Signing time: Tue 12 May 2026 16:00:55 +0000
Manifest this update: Tue 12 May 2026 16:00:55 +0000
Manifest next update: Wed 13 May 2026 16:00:55 +0000
Files and hashes: 1: lLnIh6czm0KWIQr0ccsD4cdToLc.roa (hash: kVLAgXuMBEFIQbZq7gNbnr/z2Vz4LT7MCr2JgEg80uc=)
2: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: mde5Rr+FJzVWx9qtTqwomb+zhKhV6a65c1ONlNzJnoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:7e:7a:04:59:bc:3a:5f:da:60:9e:e6:09:de:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: May 12 16:00:55 2026 GMT
Not After : May 13 16:00:55 2026 GMT
Subject: CN=956875029dd0afdbc199cce4c021d09390de073f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:ce:9e:a7:13:99:dc:7a:fe:66:80:8e:8b:
6a:16:f1:4a:a6:fc:40:f2:b3:22:d8:f6:9c:f9:57:
8a:40:c4:2d:8b:4f:1a:68:55:07:6d:46:96:94:84:
20:d2:79:77:4a:00:54:99:6c:aa:02:98:7d:95:77:
3f:0d:59:0c:4a:82:9a:39:e0:7c:19:d7:4b:a9:ed:
c1:e2:12:44:0b:2f:b4:49:80:43:52:4b:34:76:34:
e0:0d:c5:a9:a4:cd:16:af:ec:e8:bc:09:1f:8d:27:
ce:85:db:e2:d3:3a:8a:e3:46:c7:24:91:f3:2c:ff:
61:2f:b7:da:fb:51:cf:a4:85:5d:8a:38:51:5b:30:
60:a0:03:17:4e:26:54:cb:e3:7b:14:92:07:5d:ce:
db:bb:8a:25:ee:20:e5:de:50:47:9b:ad:1a:6c:4c:
a9:24:4b:57:ee:41:45:cb:16:a5:be:ba:ce:fc:26:
a5:6f:97:c2:a6:0b:4f:d6:2e:b4:07:91:85:f1:91:
06:8a:2d:66:81:29:fb:67:d8:8f:36:04:bb:38:7e:
31:24:c4:40:75:9a:56:0e:32:c6:16:78:3f:36:40:
fc:49:54:aa:ef:c6:a8:04:d3:b5:87:ae:9f:60:73:
00:cc:01:d2:e7:5c:28:76:16:5b:2b:2e:2b:29:1d:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:75:02:9D:D0:AF:DB:C1:99:CC:E4:C0:21:D0:93:90:DE:07:3F
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a9:9b:40:1c:af:57:87:78:68:b9:ba:e2:52:f2:52:c6:cd:
75:84:9b:8b:a7:67:f4:46:70:ae:b7:5f:cb:31:80:c0:11:f1:
8d:fa:3c:28:47:1d:65:47:b7:be:d7:6c:08:0d:db:67:5b:4f:
43:ea:96:2d:58:c5:07:c5:6d:29:6c:91:2d:8a:08:89:2e:68:
b4:48:65:86:fb:d3:dc:3b:ab:8d:06:65:87:9c:bc:0f:08:41:
b9:9f:2e:ec:3a:62:99:c5:62:5b:84:80:16:df:32:89:8a:3a:
47:33:50:6a:6b:9b:42:99:85:ab:3a:bc:90:e3:d3:97:f1:5c:
49:08:fb:7a:43:7e:62:f2:76:73:a8:70:d6:7f:d0:33:73:d9:
0a:e1:0b:17:73:ed:a9:b1:ad:26:fb:db:1a:56:8c:7d:7f:11:
d6:87:6d:4e:02:e5:4c:41:2c:de:3a:31:80:b2:38:c4:a4:cf:
20:50:bb:c1:20:17:ca:cd:2e:d6:74:10:75:5a:e0:78:5f:cd:
55:50:35:80:57:c7:15:47:dd:fe:59:99:9b:78:e5:0b:2c:1b:
61:18:16:b3:78:85:74:ed:08:2a:b8:90:78:fa:f8:7d:e1:3e:
76:22:15:ba:45:aa:9c:b5:01:9f:be:71:6f:cb:04:40:62:3a:
ce:bd:9e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6356BFm8Ol/aYJ7mCd46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWVlZTIyYzUwMTUzNjMxMThhNzFkMjZhOTQ2M2RjOTM3
NGJhMjgwHhcNMjYwNTEyMTYwMDU1WhcNMjYwNTEzMTYwMDU1WjAzMTEwLwYDVQQD
Eyg5NTY4NzUwMjlkZDBhZmRiYzE5OWNjZTRjMDIxZDA5MzkwZGUwNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HjOnqcTmdx6/maAjotqFvFKpvxA
8rMi2Pac+VeKQMQti08aaFUHbUaWlIQg0nl3SgBUmWyqAph9lXc/DVkMSoKaOeB8
GddLqe3B4hJECy+0SYBDUks0djTgDcWppM0Wr+zovAkfjSfOhdvi0zqK40bHJJHz
LP9hL7fa+1HPpIVdijhRWzBgoAMXTiZUy+N7FJIHXc7bu4ol7iDl3lBHm60abEyp
JEtX7kFFyxalvrrO/Calb5fCpgtP1i60B5GF8ZEGii1mgSn7Z9iPNgS7OH4xJMRA
dZpWDjLGFng/NkD8SVSq78aoBNO1h66fYHMAzAHS51wodhZbKy4rKR0c6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVodQKd0K/bwZnM5MAh0JOQ3gc/MB8GA1UdIwQY
MBaAFK8e7iLFAVNjEYpx0mqUY9yTdLooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUt
YjIxNzhlZjJmODJmLzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9mZGMyZjQtMjIyMi00ZjFiLWE1ZTUtYjIxNzhlZjJmODJm
LzEvcng3dUlzVUJVMk1SaW5IU2FwUmozSk4wdWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKmbQByv
V4d4aLm64lLyUsbNdYSbi6dn9EZwrrdfyzGAwBHxjfo8KEcdZUe3vtdsCA3bZ1tP
Q+qWLVjFB8VtKWyRLYoIiS5otEhlhvvT3DurjQZlh5y8DwhBuZ8u7DpimcViW4SA
Ft8yiYo6RzNQamubQpmFqzq8kOPTl/FcSQj7ekN+YvJ2c6hw1n/QM3PZCuELF3Pt
qbGtJvvbGlaMfX8R1odtTgLlTEEs3joxgLI4xKTPIFC7wSAXys0u1nQQdVrgeF/N
VVA1gFfHFUfd/lmZm3jlCywbYRgWs3iFdO0IKriQePr4feE+diIVukWqnLUBn75x
b8sEQGI6zr2eOw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:10:39 2026 by rpki-client