Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: s3SXWV0z3Io0a0bOf08idw83u8pj+TjqW5DZ9O7j10k=
Subject key identifier: 8E:99:61:55:9B:98:21:8C:F3:A5:D8:29:64:C1:36:07:8A:2F:C6:38
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019E28B8DBA110F9ACC58623F52DC6994B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 190D
Signing time: Thu 14 May 2026 23:01:03 +0000
Manifest this update: Thu 14 May 2026 23:01:03 +0000
Manifest next update: Fri 15 May 2026 23:01:03 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: hm4E1FWaMu3LUj/a4vaUADeFVEY/Mz61wqGOFoyQcG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:db:a1:10:f9:ac:c5:86:23:f5:2d:c6:99:4b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: May 14 23:01:03 2026 GMT
Not After : May 15 23:01:03 2026 GMT
Subject: CN=8e9961559b98218cf3a5d82964c136078a2fc638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:d1:45:fb:4f:08:cb:47:3f:2e:55:43:bd:
ea:c9:7a:90:e1:17:92:4f:d4:cf:30:4c:93:51:a4:
67:c8:65:77:70:93:39:10:01:5e:6f:e3:9f:b8:f7:
c2:65:72:e3:1e:12:e2:13:0d:d5:e2:9e:2a:45:1c:
35:a4:7a:0c:e7:63:66:1d:66:50:9d:45:0b:1c:ae:
6c:ec:e5:99:cd:a7:0a:63:c6:b7:65:21:8c:cf:50:
7b:3d:a4:3c:36:0d:05:88:c5:17:c0:df:92:32:48:
c5:47:54:07:20:16:7b:43:c0:e1:ba:4b:b3:72:1a:
b4:7d:c2:40:ec:d3:71:c2:ec:4c:f6:ea:83:0e:c6:
ef:55:40:39:08:43:51:c3:59:62:5d:b3:45:9e:eb:
01:32:ba:84:92:f2:2f:b8:82:27:46:f0:50:8b:b7:
30:14:00:d7:8e:69:ee:dc:17:39:ee:71:fe:e3:fd:
ed:0e:7c:3b:31:61:03:ca:75:9e:79:4b:cd:ed:f5:
dc:61:23:5c:f9:d7:82:8d:a8:a1:b6:f1:38:c2:bb:
92:81:81:b0:4c:2b:64:a1:52:fe:1e:22:f5:65:94:
60:aa:d0:58:a2:37:81:ad:4b:4d:75:16:e6:a3:6a:
bd:dd:71:9e:17:00:d8:d3:02:31:0c:a8:4f:f0:cb:
04:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:61:55:9B:98:21:8C:F3:A5:D8:29:64:C1:36:07:8A:2F:C6:38
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d4:71:d3:3d:80:88:8f:66:23:a3:b8:1d:86:ab:39:bc:a5:
60:47:0d:94:94:5f:e4:60:af:4b:3b:df:d9:1e:db:9d:94:ca:
68:30:a8:cd:14:c2:0a:0e:5b:c0:b8:06:20:e9:4e:43:34:2e:
52:da:30:06:d9:1c:8b:92:75:ea:ff:ae:ea:b3:a0:b7:9b:bb:
7f:93:26:a9:7c:9f:2d:ac:25:af:8c:f1:45:60:cb:b1:96:2c:
0b:7f:44:2a:96:5d:66:e0:52:e7:66:79:d3:d5:fa:14:28:70:
d7:78:dc:ef:9b:7a:af:b2:d4:8b:3a:6a:9e:b4:03:c5:95:0b:
04:ec:4a:26:cd:94:8f:6a:c2:a0:fd:fa:20:9c:76:7a:96:0b:
a3:78:70:73:b4:97:20:8e:9a:da:08:fe:8d:38:0c:79:09:56:
91:6c:e9:88:c1:d8:ce:dd:da:80:53:cb:5e:9b:54:56:16:6e:
a7:e0:dd:e4:b3:d2:82:a3:fa:03:bf:6a:c1:0c:1a:d5:65:e2:
ee:da:0b:82:36:3d:9d:87:ba:39:d0:53:ec:54:52:95:c1:ec:
02:e8:35:97:88:52:8b:93:f7:9b:12:0f:6e:da:9f:5d:58:33:
3d:f7:1d:35:5f:77:18:6b:a6:ef:a4:2e:67:6a:25:5e:69:fc:
59:36:d7:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouNuhEPmsxYYj9S3GmUtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm
M2IyMjQwHhcNMjYwNTE0MjMwMTAzWhcNMjYwNTE1MjMwMTAzWjAzMTEwLwYDVQQD
Eyg4ZTk5NjE1NTliOTgyMThjZjNhNWQ4Mjk2NGMxMzYwNzhhMmZjNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYXRRftPCMtHPy5VQ73qyXqQ4ReS
T9TPMEyTUaRnyGV3cJM5EAFeb+OfuPfCZXLjHhLiEw3V4p4qRRw1pHoM52NmHWZQ
nUULHK5s7OWZzacKY8a3ZSGMz1B7PaQ8Ng0FiMUXwN+SMkjFR1QHIBZ7Q8Dhukuz
chq0fcJA7NNxwuxM9uqDDsbvVUA5CENRw1liXbNFnusBMrqEkvIvuIInRvBQi7cw
FADXjmnu3Bc57nH+4/3tDnw7MWEDynWeeUvN7fXcYSNc+deCjaihtvE4wruSgYGw
TCtkoVL+HiL1ZZRgqtBYojeBrUtNdRbmo2q93XGeFwDY0wIxDKhP8MsErwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6ZYVWbmCGM86XYKWTBNgeKL8Y4MB8GA1UdIwQY
MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt
ZDEzN2FkZTE2NmQxLzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx
LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9Rx0z2A
iI9mI6O4HYarObylYEcNlJRf5GCvSzvf2R7bnZTKaDCozRTCCg5bwLgGIOlOQzQu
UtowBtkci5J16v+u6rOgt5u7f5MmqXyfLawlr4zxRWDLsZYsC39EKpZdZuBS52Z5
09X6FChw13jc75t6r7LUizpqnrQDxZULBOxKJs2Uj2rCoP36IJx2epYLo3hwc7SX
II6a2gj+jTgMeQlWkWzpiMHYzt3agFPLXptUVhZup+Dd5LPSgqP6A79qwQwa1WXi
7toLgjY9nYe6OdBT7FRSlcHsAug1l4hSi5P3mxIPbtqfXVgzPfcdNV93GGum76Qu
Z2olXmn8WTbXtA==
-----END CERTIFICATE-----
Generated at Fri May 15 07:01:14 2026 by rpki-client