Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
File: 0_-XSe4i8Akle4nYNAzGT7QL_JE.mft (raw, json)
Hash identifier: Rprhf+yXwf1E2K9Gu0XE5+RzzlXd/HKvh4GraFQQ/8U=
Subject key identifier: 49:95:A1:91:76:FD:CB:CA:23:38:58:30:70:04:D8:F1:23:6A:F5:AA
Authority key identifier: D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
Certificate issuer: /CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Certificate serial: 019E1D90B253FD79391A15CBA8A037AC850D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
Manifest number: 04DE
Signing time: Tue 12 May 2026 19:01:22 +0000
Manifest this update: Tue 12 May 2026 19:01:22 +0000
Manifest next update: Wed 13 May 2026 19:01:22 +0000
Files and hashes: 1: 0_-XSe4i8Akle4nYNAzGT7QL_JE.crl (hash: w8ZfHtKxskVU7bqpWzQD21v+/NjFhCQtSlkAPixd6KA=)
2: DJdhUMC3KGFFZZ5lCKkYIdqzjBM.roa (hash: X7w8hr+E7n1YVto9nQ09eEPyzlLrAcr5q43Gop780I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b2:53:fd:79:39:1a:15:cb:a8:a0:37:ac:85:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ff9749ee22f009257b89d8340cc64fb40bfc91
Validity
Not Before: May 12 19:01:22 2026 GMT
Not After : May 13 19:01:22 2026 GMT
Subject: CN=4995a19176fdcbca233858307004d8f1236af5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:b8:2f:39:41:28:67:83:6f:05:6c:90:03:
c3:fd:af:8e:2d:e2:54:26:76:6e:ba:e2:d2:a2:91:
4e:e0:8c:93:4b:20:e7:31:77:a4:72:7a:99:4f:bd:
e3:a7:ea:d3:4a:88:b5:78:58:fd:40:9d:07:23:f1:
d2:7c:89:b5:4e:3b:9a:9c:35:5e:31:c2:c3:43:ed:
64:31:0f:70:b6:ed:26:1a:01:45:6d:ba:ba:08:ae:
a3:c6:60:a4:83:28:f3:08:36:7a:d6:4b:0a:73:a6:
81:64:4e:9e:8d:cc:33:d7:aa:1f:95:90:77:05:4c:
c5:bb:30:3b:63:3e:e3:f3:ce:29:c3:d2:2f:8e:0d:
ed:6b:2c:c8:a4:ea:8f:d5:2a:9d:57:0b:d6:45:3b:
af:ba:b0:e4:7e:78:df:f7:7b:ca:1f:f4:e9:63:2b:
dc:78:f7:e2:36:a2:80:81:b4:a0:1b:bb:bb:a2:5a:
8a:b8:35:e7:e8:d3:fe:06:5e:63:18:da:7a:0d:fe:
9f:61:63:90:81:ab:43:a2:c8:fd:74:12:07:84:4d:
aa:16:1e:29:8e:cf:3d:72:59:11:6d:a8:16:16:5e:
92:a2:cd:aa:a1:72:83:77:9f:a6:fb:fe:5e:1b:d8:
23:1e:9c:ce:ae:cb:39:4e:4a:28:8b:fd:55:b6:b7:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:A1:91:76:FD:CB:CA:23:38:58:30:70:04:D8:F1:23:6A:F5:AA
X509v3 Authority Key Identifier:
keyid:D3:FF:97:49:EE:22:F0:09:25:7B:89:D8:34:0C:C6:4F:B4:0B:FC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0_-XSe4i8Akle4nYNAzGT7QL_JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/59577d-2d4d-411d-86fb-00faecac7deb/1/0_-XSe4i8Akle4nYNAzGT7QL_JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:11:0e:53:c2:62:b9:91:60:28:cb:e1:bf:77:dc:db:09:e5:
96:f3:61:46:01:f7:5c:33:02:83:5c:cc:07:cd:40:27:82:69:
db:b0:85:2c:1d:c7:c2:f6:8c:96:38:f9:a4:d2:29:6f:2d:62:
86:08:88:e5:d0:10:75:5f:62:24:4b:b3:48:13:59:bd:cc:b9:
dd:76:ed:e1:9a:c0:71:a8:33:df:75:60:3c:1a:a3:b2:e5:ce:
10:89:e4:2b:c4:16:86:41:1a:11:7a:58:79:cc:b7:64:1f:96:
a8:b4:0e:0f:15:76:80:f5:da:f5:0a:4b:2d:41:f3:b1:1b:fc:
9c:4b:6f:da:d9:05:e3:a9:65:43:01:3a:1b:78:61:0c:5c:44:
2b:00:a7:ac:40:7a:2d:81:29:1c:7d:5c:b2:67:5d:fa:9c:d7:
7f:53:7b:33:16:2c:62:62:cd:e8:bc:34:b7:0c:9c:49:25:f1:
8c:4f:08:0d:0e:a4:d5:38:a2:e2:86:93:6d:4f:06:a4:98:17:
3b:a1:93:3a:b0:77:1f:44:76:03:52:f5:07:ad:b1:df:44:b8:
55:c5:96:df:cd:e1:a2:95:44:64:b7:84:10:78:29:de:d2:01:
34:83:73:1a:fb:19:18:cb:5b:12:f6:e6:b4:51:ea:4d:b5:ae:
c3:c7:3a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkLJT/Xk5GhXLqKA3rIUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZmY5NzQ5ZWUyMmYwMDkyNTdiODlkODM0MGNjNjRmYjQw
YmZjOTEwHhcNMjYwNTEyMTkwMTIyWhcNMjYwNTEzMTkwMTIyWjAzMTEwLwYDVQQD
Eyg0OTk1YTE5MTc2ZmRjYmNhMjMzODU4MzA3MDA0ZDhmMTIzNmFmNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGy4LzlBKGeDbwVskAPD/a+OLeJU
JnZuuuLSopFO4IyTSyDnMXekcnqZT73jp+rTSoi1eFj9QJ0HI/HSfIm1TjuanDVe
McLDQ+1kMQ9wtu0mGgFFbbq6CK6jxmCkgyjzCDZ61ksKc6aBZE6ejcwz16oflZB3
BUzFuzA7Yz7j884pw9Ivjg3tayzIpOqP1SqdVwvWRTuvurDkfnjf93vKH/TpYyvc
ePfiNqKAgbSgG7u7olqKuDXn6NP+Bl5jGNp6Df6fYWOQgatDosj9dBIHhE2qFh4p
js89clkRbagWFl6Sos2qoXKDd5+m+/5eG9gjHpzOrss5Tkooi/1VtrdGNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmVoZF2/cvKIzhYMHAE2PEjavWqMB8GA1UdIwQY
MBaAFNP/l0nuIvAJJXuJ2DQMxk+0C/yRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmIt
MDBmYWVjYWM3ZGViLzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81OTU3N2QtMmQ0ZC00MTFkLTg2ZmItMDBmYWVjYWM3ZGVi
LzEvMF8tWFNlNGk4QWtsZTRuWU5BekdUN1FMX0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahEOU8Ji
uZFgKMvhv3fc2wnllvNhRgH3XDMCg1zMB81AJ4Jp27CFLB3HwvaMljj5pNIpby1i
hgiI5dAQdV9iJEuzSBNZvcy53Xbt4ZrAcagz33VgPBqjsuXOEInkK8QWhkEaEXpY
ecy3ZB+WqLQODxV2gPXa9QpLLUHzsRv8nEtv2tkF46llQwE6G3hhDFxEKwCnrEB6
LYEpHH1csmdd+pzXf1N7MxYsYmLN6Lw0twycSSXxjE8IDQ6k1Tii4oaTbU8GpJgX
O6GTOrB3H0R2A1L1B62x30S4VcWW383hopVEZLeEEHgp3tIBNINzGvsZGMtbEvbm
tFHqTbWuw8c6/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 00:36:21 2026 by rpki-client