Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json)
Hash identifier: gEQ34DDBqXwR2h2iAJltP6w3+MwbvmcuvfEIYi229Xc=
Subject key identifier: 76:FC:1A:63:B6:DE:FF:40:8A:5A:D9:D2:4E:5F:68:1B:3F:85:F4:1C
Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Certificate serial: 019E1C0FE1E6D3CDD76C3B64A004F95BB9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 12:01:02 +0000
Manifest this update: Tue 12 May 2026 12:01:02 +0000
Manifest next update: Wed 13 May 2026 12:01:02 +0000
Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: /Vpn6x3gdLPpQD0SrItODP7t901+CkFlOEkWyB8VmOg=)
2: KAtyNFRu0nGkFIQ31UZVhuZVup8.roa (hash: YYWx9qqk5yZ7cfiJEDfLmx13WTy9RC2Y4Yty+5dwt2A=)
3: Mx6UIzbNO3Bm-ZPN13wn4uov6Qg.roa (hash: KtCxVhRpFwySEkS5UZDhWr1MQTEnHKhuscd/bkCMZDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:e1:e6:d3:cd:d7:6c:3b:64:a0:04:f9:5b:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3
Validity
Not Before: May 12 12:01:02 2026 GMT
Not After : May 13 12:01:02 2026 GMT
Subject: CN=76fc1a63b6deff408a5ad9d24e5f681b3f85f41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:af:ef:a4:40:12:0b:32:4a:ab:c7:6c:cf:
01:8a:56:11:d6:ed:b1:39:a5:24:d0:ff:dd:90:1b:
b7:3b:13:4d:fb:39:f7:d7:fa:d5:19:3c:44:a5:2b:
07:ce:d4:0e:dd:69:05:98:94:db:07:61:f7:f4:44:
68:0d:78:17:f4:a1:ac:39:eb:bd:dc:5b:22:d6:a2:
a5:82:fb:e3:02:c8:e5:b8:48:06:22:1f:36:23:ff:
32:47:7f:d2:76:28:34:a2:94:5f:78:c1:2b:e9:64:
fe:c1:fd:c9:d8:9f:b9:8d:9f:de:ab:cf:f1:7e:19:
0a:37:80:75:14:31:82:db:e3:6e:bc:53:8b:2c:76:
e3:e2:b9:ec:4e:ea:19:aa:0b:a5:19:13:77:d6:38:
02:bc:32:c6:e6:6f:bd:87:7b:e8:45:ff:62:95:7e:
23:15:83:bf:a3:4c:aa:ce:e7:64:33:2a:15:7d:e1:
6b:78:b9:0c:9f:4d:a4:21:b0:b4:94:22:9d:ce:88:
93:5d:20:b4:6f:e7:69:ae:d0:cf:20:d5:e7:46:a5:
06:90:9f:de:ce:2c:23:ae:25:43:c0:ef:95:13:bc:
06:a5:c2:b1:9c:e3:2f:cf:a8:96:ca:27:da:c9:14:
81:fe:52:dc:fb:8e:95:a4:ef:e7:d1:69:d8:38:60:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:1A:63:B6:DE:FF:40:8A:5A:D9:D2:4E:5F:68:1B:3F:85:F4:1C
X509v3 Authority Key Identifier:
keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:a0:8c:81:68:f0:3c:a2:94:f9:fe:3e:7c:24:20:b4:72:
2b:b5:a8:01:e0:f9:9d:cb:99:fb:29:ba:87:cd:47:ef:a2:04:
8d:c8:38:06:77:49:7c:ee:4f:ef:2f:11:80:2d:aa:9a:22:99:
c1:06:1a:9c:46:34:81:3e:cc:15:0f:c9:94:4f:9e:0c:dd:bb:
c1:c0:2d:86:95:54:fe:ec:fb:6d:20:06:6a:c8:2c:41:1f:e2:
20:3c:79:f2:97:42:76:fa:ef:ec:63:aa:0f:d5:9a:46:d4:3f:
4b:1e:35:e8:e2:49:b9:2b:65:44:92:bc:bd:6a:6a:8c:5a:fe:
c6:9b:61:76:63:75:43:c1:27:c4:e3:cb:c2:bb:0b:f9:c9:36:
4d:a4:b6:77:b1:ab:0b:52:a5:90:d2:b2:09:fa:80:e5:ac:af:
00:10:07:49:ef:e8:1a:fb:38:38:11:9f:df:ae:e6:b0:f5:75:
c4:95:c3:41:c5:78:21:04:c0:f9:21:66:f3:39:1e:e8:8f:9c:
49:14:2d:12:c3:82:dc:13:73:ce:f9:dd:7b:b9:42:be:4c:d3:
89:78:54:45:90:4c:9e:33:43:51:1c:c1:f9:28:d4:42:0f:bc:
d2:c8:3a:f0:76:d8:ef:c9:ca:28:9a:72:7e:eb:f1:f9:41:0d:
34:f3:1f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD+Hm083XbDtkoAT5W7nbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl
YzgyYjMwHhcNMjYwNTEyMTIwMTAyWhcNMjYwNTEzMTIwMTAyWjAzMTEwLwYDVQQD
Eyg3NmZjMWE2M2I2ZGVmZjQwOGE1YWQ5ZDI0ZTVmNjgxYjNmODVmNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiKv76RAEgsySqvHbM8BilYR1u2x
OaUk0P/dkBu3OxNN+zn31/rVGTxEpSsHztQO3WkFmJTbB2H39ERoDXgX9KGsOeu9
3Fsi1qKlgvvjAsjluEgGIh82I/8yR3/Sdig0opRfeMEr6WT+wf3J2J+5jZ/eq8/x
fhkKN4B1FDGC2+NuvFOLLHbj4rnsTuoZqgulGRN31jgCvDLG5m+9h3voRf9ilX4j
FYO/o0yqzudkMyoVfeFreLkMn02kIbC0lCKdzoiTXSC0b+dprtDPINXnRqUGkJ/e
ziwjriVDwO+VE7wGpcKxnOMvz6iWyifayRSB/lLc+46VpO/n0WnYOGCMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb8GmO23v9AilrZ0k5faBs/hfQcMB8GA1UdIwQY
MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt
ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj
LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/6gjIFo
8DyilPn+PnwkILRyK7WoAeD5ncuZ+ym6h81H76IEjcg4BndJfO5P7y8RgC2qmiKZ
wQYanEY0gT7MFQ/JlE+eDN27wcAthpVU/uz7bSAGasgsQR/iIDx58pdCdvrv7GOq
D9WaRtQ/Sx416OJJuStlRJK8vWpqjFr+xpthdmN1Q8EnxOPLwrsL+ck2TaS2d7Gr
C1KlkNKyCfqA5ayvABAHSe/oGvs4OBGf367msPV1xJXDQcV4IQTA+SFm8zke6I+c
SRQtEsOC3BNzzvnde7lCvkzTiXhURZBMnjNDURzB+SjUQg+80sg68HbY78nKKJpy
fuvx+UENNPMf3g==
-----END CERTIFICATE-----
Generated at Tue May 12 21:17:04 2026 by rpki-client