Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File: lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier: wKe0rhdB+0/Bg8ww3AgZCX3dsRrxeLMYjoSFhJhIgxA=
Subject key identifier: 35:D2:10:54:DC:3A:94:60:D4:10:93:BC:09:9D:60:20:78:EB:84:2F
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer: /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial: 019E1F7E9A8A173D62537E6EB94226A8642F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number: 132E
Signing time: Wed 13 May 2026 04:00:51 +0000
Manifest this update: Wed 13 May 2026 04:00:51 +0000
Manifest next update: Thu 14 May 2026 04:00:51 +0000
Files and hashes: 1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: r7BuhOOKFzJMK5fSjUqKiE4P8hAEUfHtVHNdsVOdloo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:9a:8a:17:3d:62:53:7e:6e:b9:42:26:a8:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Validity
Not Before: May 13 04:00:51 2026 GMT
Not After : May 14 04:00:51 2026 GMT
Subject: CN=35d21054dc3a9460d41093bc099d602078eb842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:54:47:4c:bf:15:16:7d:86:c0:3f:69:d1:
4f:3f:66:f3:b9:ba:72:a1:dc:36:eb:74:d2:25:27:
9c:53:6d:60:d2:53:5e:e8:cc:73:84:e3:2a:f2:d2:
79:3c:33:c9:b9:e9:be:5c:72:e4:a0:1b:84:9b:e7:
29:7d:c6:39:a5:dd:76:02:12:0e:50:30:51:57:49:
5c:53:3b:ac:b8:d5:3c:8b:65:83:33:05:f4:3d:53:
7c:84:ab:8f:03:5f:ea:48:fd:c1:fd:62:ad:c5:33:
9c:ee:fd:76:66:48:00:ee:2c:5f:42:89:7d:38:ce:
08:63:73:12:04:88:80:14:5a:7e:e3:cc:b1:a3:6b:
49:b1:b4:18:48:ad:c6:86:36:86:5d:51:e5:a6:56:
80:7b:fd:6e:64:2e:67:45:32:80:1c:70:61:8a:0a:
ba:b8:d3:d8:3d:a3:dc:69:9f:ab:49:1e:b6:9b:b2:
bb:b6:99:05:e7:66:ca:30:aa:74:4a:e1:6a:f2:28:
a1:c3:cd:78:6e:b2:f6:b9:7b:49:b0:33:b7:8c:d1:
a5:b4:54:9d:f9:8e:7f:19:f6:10:ca:14:ea:45:f7:
31:66:97:51:e7:fa:b4:cc:1c:f8:65:8d:03:33:31:
e8:ad:59:94:c4:d8:8e:71:72:6e:3d:95:2c:aa:49:
ec:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D2:10:54:DC:3A:94:60:D4:10:93:BC:09:9D:60:20:78:EB:84:2F
X509v3 Authority Key Identifier:
keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f1:7c:27:92:be:e1:f0:2c:5c:38:25:ef:60:06:46:ca:24:
1b:5c:cc:5a:0d:1e:3a:5f:71:97:9d:b9:1e:55:79:02:d3:bc:
cd:96:e0:0e:e6:74:9f:7a:98:e5:1a:50:65:06:d5:83:8d:b3:
2e:68:f1:a5:04:7f:1c:b9:2a:e4:1c:84:11:f6:27:20:21:a0:
44:e7:c8:e6:06:5f:44:6c:52:03:31:54:4e:00:a9:8d:ae:80:
3a:57:20:e4:c2:bd:56:ab:c8:3b:b9:65:53:61:a4:61:56:3d:
38:2e:ee:e2:80:12:7e:18:69:e4:9a:6b:a2:0a:91:36:79:2e:
3b:83:ae:a0:f5:79:82:a5:18:4f:f0:23:b6:8d:52:ab:92:9c:
24:35:17:06:99:67:5e:2a:4a:32:74:72:c6:e8:fe:6a:30:19:
4a:f8:a2:d6:26:24:91:b3:5b:0e:2c:95:2f:bd:e2:26:9f:90:
16:c4:ea:16:be:88:7b:b1:97:07:b2:cb:d2:7f:6e:ad:24:a0:
93:74:3f:82:9d:83:fc:a2:5a:e4:b9:ff:83:ec:98:3e:c2:18:
36:85:60:50:63:20:1a:fb:71:a6:f2:71:7b:d7:64:4b:51:63:
36:3a:04:84:b9:56:d5:39:2e:49:35:8c:0c:f7:48:01:c5:b4:
67:19:4a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffpqKFz1iU35uuUImqGQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2JjNTc2NzMyMzc0ZThkODlkNzAxM2FiMzYzMGI2ZTBh
OWYxOWEwHhcNMjYwNTEzMDQwMDUxWhcNMjYwNTE0MDQwMDUxWjAzMTEwLwYDVQQD
EygzNWQyMTA1NGRjM2E5NDYwZDQxMDkzYmMwOTlkNjAyMDc4ZWI4NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP9UR0y/FRZ9hsA/adFPP2bzubpy
odw263TSJSecU21g0lNe6MxzhOMq8tJ5PDPJuem+XHLkoBuEm+cpfcY5pd12AhIO
UDBRV0lcUzusuNU8i2WDMwX0PVN8hKuPA1/qSP3B/WKtxTOc7v12ZkgA7ixfQol9
OM4IY3MSBIiAFFp+48yxo2tJsbQYSK3GhjaGXVHlplaAe/1uZC5nRTKAHHBhigq6
uNPYPaPcaZ+rSR62m7K7tpkF52bKMKp0SuFq8iihw814brL2uXtJsDO3jNGltFSd
+Y5/GfYQyhTqRfcxZpdR5/q0zBz4ZY0DMzHorVmUxNiOcXJuPZUsqknsoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXSEFTcOpRg1BCTvAmdYCB464QvMB8GA1UdIwQY
MBaAFJQ7xXZzI3To2J1wE6s2MLbgqfGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEt
NzZhYjNmY2ExZjMyLzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iOGQwNjUtZWQ4MS00MDllLWIxZjEtNzZhYjNmY2ExZjMy
LzEvbER2RmRuTWpkT2pZblhBVHF6WXd0dUNwOFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/F8J5K+
4fAsXDgl72AGRsokG1zMWg0eOl9xl525HlV5AtO8zZbgDuZ0n3qY5RpQZQbVg42z
LmjxpQR/HLkq5ByEEfYnICGgROfI5gZfRGxSAzFUTgCpja6AOlcg5MK9VqvIO7ll
U2GkYVY9OC7u4oASfhhp5JprogqRNnkuO4OuoPV5gqUYT/Ajto1Sq5KcJDUXBpln
XipKMnRyxuj+ajAZSvii1iYkkbNbDiyVL73iJp+QFsTqFr6Ie7GXB7LL0n9urSSg
k3Q/gp2D/KJa5Ln/g+yYPsIYNoVgUGMgGvtxpvJxe9dkS1FjNjoEhLlW1TkuSTWM
DPdIAcW0ZxlKqw==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:32 2026 by rpki-client