Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: hIinT3hEJ2hECjinmkmB9LMI2MJ2YCmgI4eoAqVQL7o=
Subject key identifier: DD:28:15:00:5B:65:8A:B6:A8:7E:64:30:73:4E:04:DD:80:9C:3E:F0
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 019E1D5930A0D9EF156DE940FB74D0CB86C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:00:44 +0000
Manifest this update: Tue 12 May 2026 18:00:44 +0000
Manifest next update: Wed 13 May 2026 18:00:44 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: u5iMC7QX3SgqWLgxnpdRMcuCZ6Dc5IXT7UngaHs/iZE=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:30:a0:d9:ef:15:6d:e9:40:fb:74:d0:cb:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: May 12 18:00:44 2026 GMT
Not After : May 13 18:00:44 2026 GMT
Subject: CN=dd2815005b658ab6a87e6430734e04dd809c3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:e1:c0:00:f0:5e:af:e1:a8:b7:14:e4:7e:
3b:d6:8d:a7:a8:d4:79:1b:2c:88:a5:c1:20:42:29:
28:c8:ed:ec:7f:96:ce:4a:ab:a1:38:39:da:b0:35:
f6:18:5f:13:49:42:f4:83:60:83:70:77:07:87:7a:
1f:2e:06:59:5e:fe:93:ec:aa:2b:c6:a2:78:b9:de:
6f:ce:97:c2:96:ac:02:81:64:b8:cd:b1:f1:e7:34:
81:dc:76:3e:f2:10:45:5e:1e:62:c9:68:07:6f:f4:
34:43:0d:13:df:80:1e:b7:81:0f:6d:bd:89:0d:18:
dd:6b:e9:98:6f:04:30:7d:24:2d:2a:13:bb:ba:77:
00:f0:f7:1c:62:9f:b8:03:ee:83:3e:9e:d3:6b:a2:
ed:14:b2:91:8f:31:5d:d9:a3:9d:3f:47:86:3b:08:
e3:be:69:a2:f1:ff:9d:9a:d5:ac:7b:a4:18:a0:d0:
16:80:65:28:1f:09:e8:3d:f9:c3:99:c8:9e:2b:40:
6a:6d:a8:10:70:b1:44:08:1c:5a:8e:4f:81:c3:a9:
de:9f:3b:4c:46:f6:1e:d0:a8:5e:76:1b:64:ae:23:
b1:b2:66:31:cc:02:82:90:c0:48:be:33:c6:88:de:
5a:c0:b6:98:19:e5:84:a3:a8:4b:ac:b6:45:65:d1:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:28:15:00:5B:65:8A:B6:A8:7E:64:30:73:4E:04:DD:80:9C:3E:F0
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:55:43:b3:b0:f7:66:56:81:e6:25:ff:14:ec:aa:af:7b:5d:
b0:3f:ae:81:15:6e:99:0d:1c:74:52:56:e8:5d:94:5d:38:94:
1b:fd:b6:57:d5:14:9f:a0:ee:78:c5:45:5c:ab:7b:3e:be:1c:
c0:5d:c8:05:62:de:3f:56:1f:5c:24:59:b6:0c:41:6f:3e:21:
8d:c4:62:42:1f:0a:06:18:ee:e0:95:7c:65:10:ae:28:6b:13:
8a:44:3b:21:3f:5e:7a:69:2d:0f:ed:dc:36:73:a6:8f:1f:01:
ad:6e:a3:93:40:72:b9:89:37:59:c4:61:1a:05:10:94:8d:a8:
9a:e5:c6:6c:5a:80:85:03:63:08:60:8a:56:d1:27:89:00:d2:
23:b0:d4:37:99:a5:f7:b9:64:e1:50:44:b1:c1:b2:01:89:36:
1e:2b:45:58:94:d2:6f:5a:84:a6:32:ad:97:b8:a1:53:a1:b2:
3b:89:ac:b4:f5:7b:d2:78:d9:a5:0f:4b:13:41:70:26:92:ef:
51:e9:a7:2c:18:d4:07:1a:82:7d:c8:07:28:90:b1:b5:7a:2c:
23:24:19:36:c8:24:e6:38:44:9a:b4:bd:7f:fd:04:e6:c2:eb:
9a:dc:1f:f3:bc:ff:91:7d:a8:6a:bf:dc:dc:a3:7e:ae:50:59:
09:1d:90:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTCg2e8VbelA+3TQy4bGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw
MWU3MzYwHhcNMjYwNTEyMTgwMDQ0WhcNMjYwNTEzMTgwMDQ0WjAzMTEwLwYDVQQD
EyhkZDI4MTUwMDViNjU4YWI2YTg3ZTY0MzA3MzRlMDRkZDgwOWMzZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn3hwADwXq/hqLcU5H471o2nqNR5
GyyIpcEgQikoyO3sf5bOSquhODnasDX2GF8TSUL0g2CDcHcHh3ofLgZZXv6T7Kor
xqJ4ud5vzpfClqwCgWS4zbHx5zSB3HY+8hBFXh5iyWgHb/Q0Qw0T34Aet4EPbb2J
DRjda+mYbwQwfSQtKhO7uncA8PccYp+4A+6DPp7Ta6LtFLKRjzFd2aOdP0eGOwjj
vmmi8f+dmtWse6QYoNAWgGUoHwnoPfnDmcieK0BqbagQcLFECBxajk+Bw6nenztM
RvYe0KhedhtkriOxsmYxzAKCkMBIvjPGiN5awLaYGeWEo6hLrLZFZdHR1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0oFQBbZYq2qH5kMHNOBN2AnD7wMB8GA1UdIwQY
MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt
NWQzYTg2NDk0Nzc1LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1
LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFVDs7D3
ZlaB5iX/FOyqr3tdsD+ugRVumQ0cdFJW6F2UXTiUG/22V9UUn6DueMVFXKt7Pr4c
wF3IBWLeP1YfXCRZtgxBbz4hjcRiQh8KBhju4JV8ZRCuKGsTikQ7IT9eemktD+3c
NnOmjx8BrW6jk0ByuYk3WcRhGgUQlI2omuXGbFqAhQNjCGCKVtEniQDSI7DUN5ml
97lk4VBEscGyAYk2HitFWJTSb1qEpjKtl7ihU6GyO4mstPV70njZpQ9LE0FwJpLv
UemnLBjUBxqCfcgHKJCxtXosIyQZNsgk5jhEmrS9f/0E5sLrmtwf87z/kX2oar/c
3KN+rlBZCR2Qng==
-----END CERTIFICATE-----
Generated at Wed May 13 04:15:10 2026 by rpki-client