Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: K7WyC47lHWwCF7T9cB+XF4CfNS0aUlbvGeBAkXozBgo=
Subject key identifier: C2:20:21:EB:47:17:46:65:42:81:3E:74:D0:1D:B7:06:20:38:03:6B
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 019DCE627ED7F0E62F091B59001D3BD275E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 09EC
Signing time: Mon 27 Apr 2026 10:00:54 +0000
Manifest this update: Mon 27 Apr 2026 10:00:54 +0000
Manifest next update: Tue 28 Apr 2026 10:00:54 +0000
Files and hashes: 1: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: gbMnw2UT2oNWeQvjuQ73j4nLLKC2n3B70IMBoWCX85I=)
2: ibsoqErDKT3266b2vH5vf8KZDA0.roa (hash: UrhNuNL7GgbO0jHlNAEUHP2GLPJjzZnieCjHTk+nkGg=)
3: pZwVWQ0lcHojahu0_rV2N3zpQcw.roa (hash: J+F2E6hLoP7AmyOiwDWr5K7X8LPnv6yqpXFURrTE1yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:7e:d7:f0:e6:2f:09:1b:59:00:1d:3b:d2:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Apr 27 10:00:54 2026 GMT
Not After : Apr 28 10:00:54 2026 GMT
Subject: CN=c22021eb4717466542813e74d01db7062038036b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:f0:d5:b3:93:44:5d:fd:dd:e6:0d:b7:71:
cf:4b:be:db:d4:14:3b:b0:d6:f9:7b:cd:44:79:5d:
3a:84:48:64:86:32:77:40:9e:c8:23:74:ad:f3:60:
ff:02:62:8b:65:b0:4e:f1:8d:d1:1d:a3:aa:7d:9d:
f4:48:71:6d:31:19:d4:92:8f:9e:6a:24:68:4f:88:
17:e1:bc:09:aa:b9:f2:cf:f8:09:b2:c8:f7:29:5c:
83:7e:9f:54:a8:26:23:88:dc:2a:a1:73:6b:47:1e:
49:18:49:88:35:eb:69:7a:54:91:0d:67:8d:fc:ff:
49:b2:93:e9:68:23:53:d2:d9:6d:bf:c1:9e:db:d1:
2c:06:93:5b:50:f7:fa:52:f2:11:43:03:f0:06:4e:
5f:00:63:19:d8:b3:d6:36:d6:31:e8:c3:1c:6e:f6:
3b:57:33:df:7c:70:fb:e8:ba:58:a3:f3:fa:8e:61:
78:15:ee:84:5e:28:53:cc:bf:5c:7b:65:5a:61:5f:
35:98:0e:55:47:e9:13:1e:bb:9e:a6:51:aa:12:ee:
1b:a9:32:d9:dc:26:24:6f:05:60:c2:24:20:24:84:
2e:b0:4b:87:38:11:d2:a1:ec:de:80:e1:0d:8c:49:
8f:48:5d:0d:49:47:30:34:4d:c2:62:13:82:d4:14:
55:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:21:EB:47:17:46:65:42:81:3E:74:D0:1D:B7:06:20:38:03:6B
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:97:9c:06:27:a9:0d:8e:b8:5b:72:34:d9:b6:87:d2:1d:b7:
ef:17:26:8c:77:9b:24:e8:04:e8:99:2e:e2:60:c3:93:df:45:
d6:a8:b1:a8:93:5f:df:c1:3f:68:0b:a3:2e:82:f4:ea:24:ee:
24:09:c6:b3:14:06:e2:e7:01:20:59:13:8b:e8:a1:bc:4d:4b:
eb:47:72:d0:12:7c:6d:06:cc:64:01:88:d8:5f:c2:64:af:75:
20:bc:6d:0d:58:c6:01:0f:2d:e5:bf:d6:82:a3:f1:90:93:8f:
d0:c4:ae:16:7f:21:65:69:23:9a:49:b8:42:7c:66:91:3c:da:
4c:22:42:70:42:1b:57:90:8d:b1:cb:78:1a:78:04:e8:a5:b3:
f0:54:d3:0b:a2:83:62:89:3d:86:8d:59:81:62:11:24:0f:c9:
26:a4:de:a2:ee:e2:a0:7f:37:5a:02:f7:8e:ee:fa:43:12:c3:
7e:3f:e3:ca:fd:a1:37:8e:13:08:2f:8c:bb:1a:67:be:e6:45:
1c:2c:30:46:12:92:fa:4c:f6:c1:a6:eb:44:f1:67:a3:8f:43:
a3:c4:e6:65:ef:29:4e:f4:73:23:53:11:4b:44:fb:ee:1c:3c:
6e:ca:5d:7d:ed:f9:e1:eb:1e:2e:c4:5b:3d:66:06:e3:3f:18:
77:55:47:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYn7X8OYvCRtZAB070nXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5
NjE4ODMwHhcNMjYwNDI3MTAwMDU0WhcNMjYwNDI4MTAwMDU0WjAzMTEwLwYDVQQD
EyhjMjIwMjFlYjQ3MTc0NjY1NDI4MTNlNzRkMDFkYjcwNjIwMzgwMzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGvw1bOTRF393eYNt3HPS77b1BQ7
sNb5e81EeV06hEhkhjJ3QJ7II3St82D/AmKLZbBO8Y3RHaOqfZ30SHFtMRnUko+e
aiRoT4gX4bwJqrnyz/gJssj3KVyDfp9UqCYjiNwqoXNrRx5JGEmINetpelSRDWeN
/P9JspPpaCNT0tltv8Ge29EsBpNbUPf6UvIRQwPwBk5fAGMZ2LPWNtYx6MMcbvY7
VzPffHD76LpYo/P6jmF4Fe6EXihTzL9ce2VaYV81mA5VR+kTHrueplGqEu4bqTLZ
3CYkbwVgwiQgJIQusEuHOBHSoezegOENjEmPSF0NSUcwNE3CYhOC1BRV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIgIetHF0ZlQoE+dNAdtwYgOANrMB8GA1UdIwQY
MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt
NDBjMGE2NTI0NTBhLzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh
LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5ecBiep
DY64W3I02baH0h237xcmjHebJOgE6Jku4mDDk99F1qixqJNf38E/aAujLoL06iTu
JAnGsxQG4ucBIFkTi+ihvE1L60dy0BJ8bQbMZAGI2F/CZK91ILxtDVjGAQ8t5b/W
gqPxkJOP0MSuFn8hZWkjmkm4QnxmkTzaTCJCcEIbV5CNsct4GngE6KWz8FTTC6KD
Yok9ho1ZgWIRJA/JJqTeou7ioH83WgL3ju76QxLDfj/jyv2hN44TCC+MuxpnvuZF
HCwwRhKS+kz2wabrRPFno49Do8TmZe8pTvRzI1MRS0T77hw8bspdfe354eseLsRb
PWYG4z8Yd1VHtw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:53:45 2026 by rpki-client