Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: YBHi8qGgvGos/n9/Fala96h/WJRuQS9psF70cYzpEsk=
Subject key identifier: BB:B4:D3:42:90:22:78:D3:C2:10:B2:0B:97:71:E7:4E:A1:64:50:F9
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 019E7AE788F21CB7DBFD60CA7062882D045D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 01CA
Signing time: Sat 30 May 2026 22:00:54 +0000
Manifest this update: Sat 30 May 2026 22:00:54 +0000
Manifest next update: Sun 31 May 2026 22:00:54 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: ojeXTVU81f27qq2M0NravwbQ+xDk5/9zcTizTNqie+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 31 May 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7a:e7:88:f2:1c:b7:db:fd:60:ca:70:62:88:2d:04:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: May 30 22:00:54 2026 GMT
Not After : May 31 22:00:54 2026 GMT
Subject: CN=bbb4d342902278d3c210b20b9771e74ea16450f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:14:e3:dc:f4:14:4a:e2:0c:b0:81:9a:03:
32:6f:99:04:26:e4:32:c9:14:c9:06:63:a3:72:eb:
32:9f:7e:b7:43:dd:5c:ef:bc:22:22:1e:d8:aa:eb:
19:12:f2:bf:c1:16:e9:a3:10:9c:dc:08:17:89:26:
41:33:92:54:51:b7:5a:9f:b7:cd:e1:ab:c6:87:8d:
95:61:b2:dc:2f:4b:4c:aa:c6:06:bc:f4:6a:d9:f8:
dc:7c:03:38:b7:aa:ef:f0:9b:3c:62:29:81:dd:ea:
0d:43:fd:a2:d8:5a:d4:da:38:98:49:b3:19:09:d1:
4f:a6:f1:d0:44:2b:a0:0a:e2:b1:5e:38:68:33:76:
b4:c4:e9:9c:85:eb:e8:ff:e6:a5:c1:9a:ac:7d:30:
be:96:f8:6c:1d:54:4d:89:5c:25:fa:3b:cf:4d:da:
07:82:05:ea:86:29:4c:21:0f:66:86:cd:36:68:fd:
db:7f:8c:58:ae:03:a0:d4:c2:43:85:43:7e:30:79:
3f:cd:7f:ff:ca:6f:56:12:cd:d1:91:87:ba:66:cc:
1e:89:ed:ef:44:5a:e7:3c:4a:92:23:e3:36:10:a8:
21:11:9c:fd:77:8a:90:12:d9:25:08:c0:ff:1b:45:
f9:d2:f1:ae:5a:74:09:84:df:b2:49:0a:ed:82:0d:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:D3:42:90:22:78:D3:C2:10:B2:0B:97:71:E7:4E:A1:64:50:F9
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:14:05:d3:bb:4f:3a:d3:05:24:6b:ae:27:d6:fb:73:7c:42:
03:56:2c:10:d8:1a:df:7a:da:41:50:e5:6c:48:3f:67:9a:10:
11:e1:8b:ce:68:1c:72:b0:f3:fa:f8:20:66:28:61:f0:c7:0f:
b7:c5:e4:b1:df:e9:d6:b5:6b:0f:32:ba:56:cd:6a:c6:04:0f:
01:b2:74:8f:3f:3a:6c:27:2a:ba:b3:ff:d6:5c:81:8d:f2:54:
5b:e0:10:36:4a:fc:f7:53:a1:2f:a9:df:96:cc:b9:17:9e:42:
fc:49:36:a5:ca:48:a4:82:ca:75:65:2a:6c:25:1d:fe:49:5c:
c0:58:a1:f4:b7:7b:f5:a9:cf:50:65:c2:a8:60:a0:0a:28:1e:
3f:c0:e0:f5:0f:32:a2:89:38:95:36:2f:98:21:34:a5:58:7b:
6a:e1:55:d5:06:c8:76:58:ab:04:4f:b5:56:03:1d:99:43:5b:
31:ef:94:56:88:3a:31:d2:57:a9:d8:f6:9c:62:b2:1a:b0:e0:
2f:93:0b:d6:0f:73:ab:04:4a:db:ec:2f:1d:9e:a1:d5:eb:89:
29:06:27:db:d0:b0:cc:2b:2a:a9:0c:9e:95:b5:83:91:28:0e:
e0:ca:fc:da:f4:6d:59:b3:e7:3c:f9:58:5a:77:be:e4:a8:ce:
09:5f:f1:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5654jyHLfb/WDKcGKILQRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1
YWQwMTgwHhcNMjYwNTMwMjIwMDU0WhcNMjYwNTMxMjIwMDU0WjAzMTEwLwYDVQQD
EyhiYmI0ZDM0MjkwMjI3OGQzYzIxMGIyMGI5NzcxZTc0ZWExNjQ1MGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeYU49z0FEriDLCBmgMyb5kEJuQy
yRTJBmOjcusyn363Q91c77wiIh7YqusZEvK/wRbpoxCc3AgXiSZBM5JUUbdan7fN
4avGh42VYbLcL0tMqsYGvPRq2fjcfAM4t6rv8Js8YimB3eoNQ/2i2FrU2jiYSbMZ
CdFPpvHQRCugCuKxXjhoM3a0xOmchevo/+alwZqsfTC+lvhsHVRNiVwl+jvPTdoH
ggXqhilMIQ9mhs02aP3bf4xYrgOg1MJDhUN+MHk/zX//ym9WEs3RkYe6Zsweie3v
RFrnPEqSI+M2EKghEZz9d4qQEtklCMD/G0X50vGuWnQJhN+ySQrtgg3avwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu000KQInjTwhCyC5dx506hZFD5MB8GA1UdIwQY
MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt
NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz
LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxQF07tP
OtMFJGuuJ9b7c3xCA1YsENga33raQVDlbEg/Z5oQEeGLzmgccrDz+vggZihh8McP
t8Xksd/p1rVrDzK6Vs1qxgQPAbJ0jz86bCcqurP/1lyBjfJUW+AQNkr891OhL6nf
lsy5F55C/Ek2pcpIpILKdWUqbCUd/klcwFih9Ld79anPUGXCqGCgCigeP8Dg9Q8y
ook4lTYvmCE0pVh7auFV1QbIdlirBE+1VgMdmUNbMe+UVog6MdJXqdj2nGKyGrDg
L5ML1g9zqwRK2+wvHZ6h1euJKQYn29CwzCsqqQyelbWDkSgO4Mr82vRtWbPnPPlY
Wne+5KjOCV/xUQ==
-----END CERTIFICATE-----
Generated at Sun May 31 06:57:28 2026 by rpki-client