Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: ul4NJwID/yxKDqTpsfFEkXvPaw/nQxiG31mcdCy0I1o=
Subject key identifier: 39:4B:00:F6:D2:04:E0:49:3B:90:39:38:C6:D5:95:73:63:8A:23:F9
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019E1E35C6138314765B23CFDD5149244A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0E4E
Signing time: Tue 12 May 2026 22:01:40 +0000
Manifest this update: Tue 12 May 2026 22:01:40 +0000
Manifest next update: Wed 13 May 2026 22:01:40 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: /Tj4yorYP7bDZBeh3MfZRB/jpa1a9Yu/AQ9Mx9CNQfg=)
2: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (hash: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:c6:13:83:14:76:5b:23:cf:dd:51:49:24:4a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: May 12 22:01:40 2026 GMT
Not After : May 13 22:01:40 2026 GMT
Subject: CN=394b00f6d204e0493b903938c6d59573638a23f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:d9:04:88:93:b2:60:d2:41:33:58:38:f0:
17:33:83:f8:29:71:01:91:90:f3:2d:88:f9:21:36:
a0:af:09:18:03:70:da:f8:16:9c:1c:86:30:29:5e:
43:89:44:3b:ce:86:c7:9a:bc:56:f3:7d:06:a7:b0:
61:6c:38:00:43:c7:b1:a3:1a:93:25:ed:c4:e3:cf:
f9:35:27:d4:51:1e:4e:c4:79:47:c4:72:50:8b:11:
a7:2c:85:d2:a1:86:e0:47:dc:d8:94:62:db:44:e0:
e7:a6:0b:e7:67:d7:d7:b5:26:ba:0e:bf:b2:a3:f0:
07:96:5f:b2:17:1b:51:6b:c8:c4:2f:4f:3c:36:42:
6b:55:41:5e:e9:2b:a7:6e:3f:78:ed:1f:d8:16:f9:
62:33:6a:96:b1:31:d5:c2:6b:06:eb:21:d3:fe:76:
76:30:e3:a1:51:1e:bf:c4:d9:7c:63:26:bd:c0:27:
12:be:37:a1:03:ae:ce:3c:0a:77:c6:e4:ef:15:7b:
d5:b3:12:b0:d2:b1:0d:b0:68:ab:9d:bf:d3:d8:4b:
12:b8:21:e4:ae:cf:f9:de:3e:bb:a4:8a:ef:c2:f3:
90:2b:ae:60:91:f1:75:b5:8c:aa:0e:09:4a:e0:b0:
a8:9a:96:13:dc:89:81:ca:fa:98:19:7a:c5:00:41:
38:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:00:F6:D2:04:E0:49:3B:90:39:38:C6:D5:95:73:63:8A:23:F9
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c6:68:5f:25:09:89:8c:c8:e1:cb:3c:01:91:ff:81:c6:19:
c9:f7:74:b6:7c:24:88:f3:d0:d5:e5:b8:fc:91:67:3b:f3:f9:
64:ed:a9:f6:38:0d:21:a7:04:5f:fb:19:a6:51:93:63:21:e9:
99:99:92:71:08:15:f6:16:bf:85:d7:2b:54:6f:2c:f3:74:56:
64:69:f0:ad:de:82:9a:e1:24:6f:97:b6:c3:69:83:62:f7:16:
98:b3:67:3d:f7:93:ea:ed:ef:05:c7:0a:6a:3a:9f:c5:0f:78:
a2:bb:cd:da:80:a0:a5:b8:98:2d:59:c3:84:4c:7c:37:c4:2f:
e4:af:17:48:5c:28:89:4d:1a:28:53:74:64:e6:a1:31:af:66:
4d:a2:05:8e:34:55:c5:5d:dc:f4:27:d8:8b:e9:3a:1a:ed:ef:
0f:7e:04:35:64:02:68:f5:27:40:67:a0:d6:d4:17:e6:73:bd:
36:a3:c1:e1:40:4c:ee:9b:99:32:8d:42:b4:e5:eb:ff:fb:a1:
e8:f3:7a:3b:bc:6b:99:25:b6:0d:9a:00:50:ca:02:db:89:68:
6c:1f:15:db:42:34:81:18:0f:17:c3:3a:ea:c0:ca:3c:0a:6d:
87:b9:fd:83:4b:09:a1:23:de:82:3d:fc:96:8f:b2:8b:7d:98:
14:eb:87:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNcYTgxR2WyPP3VFJJEqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzBkNjk0ZDU5ZDdkMzZiYTQyMWEzMDUwZjRlYzdkZDM3
ODFlZmQwHhcNMjYwNTEyMjIwMTQwWhcNMjYwNTEzMjIwMTQwWjAzMTEwLwYDVQQD
EygzOTRiMDBmNmQyMDRlMDQ5M2I5MDM5MzhjNmQ1OTU3MzYzOGEyM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhzZBIiTsmDSQTNYOPAXM4P4KXEB
kZDzLYj5ITagrwkYA3Da+BacHIYwKV5DiUQ7zobHmrxW830Gp7BhbDgAQ8exoxqT
Je3E48/5NSfUUR5OxHlHxHJQixGnLIXSoYbgR9zYlGLbRODnpgvnZ9fXtSa6Dr+y
o/AHll+yFxtRa8jEL088NkJrVUFe6Sunbj947R/YFvliM2qWsTHVwmsG6yHT/nZ2
MOOhUR6/xNl8Yya9wCcSvjehA67OPAp3xuTvFXvVsxKw0rENsGirnb/T2EsSuCHk
rs/53j67pIrvwvOQK65gkfF1tYyqDglK4LCompYT3ImByvqYGXrFAEE47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlLAPbSBOBJO5A5OMbVlXNjiiP5MB8GA1UdIwQY
MBaAFNTA1pTVnX02ukIaMFD07H3TeB79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgt
YTc5NTEwZTYxM2U4LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgtYTc5NTEwZTYxM2U4
LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsZoXyUJ
iYzI4cs8AZH/gcYZyfd0tnwkiPPQ1eW4/JFnO/P5ZO2p9jgNIacEX/sZplGTYyHp
mZmScQgV9ha/hdcrVG8s83RWZGnwrd6CmuEkb5e2w2mDYvcWmLNnPfeT6u3vBccK
ajqfxQ94orvN2oCgpbiYLVnDhEx8N8Qv5K8XSFwoiU0aKFN0ZOahMa9mTaIFjjRV
xV3c9CfYi+k6Gu3vD34ENWQCaPUnQGeg1tQX5nO9NqPB4UBM7puZMo1CtOXr//uh
6PN6O7xrmSW2DZoAUMoC24lobB8V20I0gRgPF8M66sDKPApth7n9g0sJoSPegj38
lo+yi32YFOuHnQ==
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:22 2026 by rpki-client