Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: wENlHweODIlXc7UINp6/gbd6RyiB6D7ZhyYFe2/1A6U=
Subject key identifier: B0:64:73:4A:1D:50:9F:7C:BD:27:E0:73:C5:4C:7B:E5:05:FD:EA:81
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 019E31177E3D0CDBDACA2821C47DB8769027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1917
Signing time: Sat 16 May 2026 14:01:23 +0000
Manifest this update: Sat 16 May 2026 14:01:23 +0000
Manifest next update: Sun 17 May 2026 14:01:23 +0000
Files and hashes: 1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: BD46+ZZ+XiV4REtbfEcAKTk9VAnq3iiAOPtbyKbgOEI=)
2: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (hash: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE=)
3: q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (hash: MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=)
4: zhvANJOvIZUMm3XZ4zAx_z-cOFc.roa (hash: ra8TIJdqXnbc9kZExeXfpCuOK6FblyvfQ8K4O5SfJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:7e:3d:0c:db:da:ca:28:21:c4:7d:b8:76:90:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: May 16 14:01:23 2026 GMT
Not After : May 17 14:01:23 2026 GMT
Subject: CN=b064734a1d509f7cbd27e073c54c7be505fdea81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:20:89:93:2f:5d:dd:d0:ee:f2:f6:a4:d1:
2f:ff:5a:64:72:80:11:5c:e9:e1:8d:b4:c5:23:ab:
89:4a:ce:56:f3:2c:47:5b:c3:20:ac:4e:91:11:30:
cc:f1:31:27:46:7d:2b:1b:a5:3c:19:d9:9c:b8:bb:
83:a1:d5:77:45:c1:85:90:57:3b:5b:d3:36:b6:f4:
af:85:47:4a:41:8f:d8:fb:86:5a:cc:d9:b5:d3:ad:
df:7e:db:5a:d2:ef:8d:f3:cd:5c:b1:f8:ad:c4:d8:
e5:1c:02:00:43:7e:e7:c6:30:89:e0:c8:62:dc:00:
c5:75:05:42:b7:c6:6b:50:67:66:8b:f8:98:32:7c:
c5:de:a4:77:9f:dc:18:6a:15:ba:36:79:0d:bb:ac:
dc:b7:38:d0:c1:7f:f5:d7:6e:60:b6:07:f7:a8:af:
b2:da:a5:e6:40:63:f4:96:2c:08:7a:5b:38:98:e5:
77:1c:55:dc:e5:41:ea:21:7f:85:ff:27:b4:eb:62:
4b:51:a4:21:f8:48:48:c3:7b:66:c8:c0:24:c8:2d:
4d:bb:b7:8e:08:13:e5:0f:0c:2d:bc:1b:41:64:0c:
12:e8:a4:54:a0:4d:70:8a:46:92:da:76:20:ab:84:
3d:48:9f:09:8c:76:85:9e:aa:57:a2:4a:8f:95:64:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:73:4A:1D:50:9F:7C:BD:27:E0:73:C5:4C:7B:E5:05:FD:EA:81
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:38:a1:7f:c3:7a:82:30:93:dc:ec:29:03:35:93:96:bd:24:
9c:24:ad:2c:d0:ad:61:a2:fd:c4:1e:58:ef:b2:49:f8:c0:6d:
90:36:48:4c:94:81:e9:e7:bb:8f:39:cf:73:f0:d8:93:ce:22:
ab:34:db:a7:24:46:1b:df:2c:99:a9:2e:78:e1:81:f9:92:a9:
39:2d:dd:fe:ed:97:36:df:8e:66:47:6e:52:86:66:e1:62:fb:
89:45:d4:12:b0:4d:d1:32:89:98:1c:32:47:a8:cb:4e:ce:01:
25:cc:af:77:0a:3b:f2:45:43:96:68:9c:34:e0:22:c8:f9:f3:
e3:2f:09:00:14:c5:f9:67:b4:50:11:72:c4:6c:5e:3d:49:56:
68:a3:ef:88:98:72:37:fd:86:68:07:1a:f1:3c:c7:68:46:61:
96:b8:25:14:9e:9f:19:f3:90:a2:dd:a0:38:e1:93:3d:07:9f:
41:e2:e2:8a:2a:74:7c:3a:03:3d:03:eb:91:97:f7:f2:50:ca:
57:4f:c9:be:2a:78:b4:af:f4:9c:dc:1a:6f:57:e7:18:17:d0:
fb:7e:c2:da:b0:8f:02:5b:b3:8e:70:70:2c:1d:4e:c0:2a:88:
f9:6f:a1:a5:1c:d7:25:08:54:97:16:b7:9e:8a:fb:e4:4b:6e:
86:d9:60:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xF349DNvayighxH24dpAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjYwNTE2MTQwMTIzWhcNMjYwNTE3MTQwMTIzWjAzMTEwLwYDVQQD
EyhiMDY0NzM0YTFkNTA5ZjdjYmQyN2UwNzNjNTRjN2JlNTA1ZmRlYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkggiZMvXd3Q7vL2pNEv/1pkcoAR
XOnhjbTFI6uJSs5W8yxHW8MgrE6RETDM8TEnRn0rG6U8GdmcuLuDodV3RcGFkFc7
W9M2tvSvhUdKQY/Y+4ZazNm1063fftta0u+N881csfitxNjlHAIAQ37nxjCJ4Mhi
3ADFdQVCt8ZrUGdmi/iYMnzF3qR3n9wYahW6NnkNu6zctzjQwX/1125gtgf3qK+y
2qXmQGP0liwIels4mOV3HFXc5UHqIX+F/ye062JLUaQh+EhIw3tmyMAkyC1Nu7eO
CBPlDwwtvBtBZAwS6KRUoE1wikaS2nYgq4Q9SJ8JjHaFnqpXokqPlWTMgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBkc0odUJ98vSfgc8VMe+UF/eqBMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDihf8N6
gjCT3OwpAzWTlr0knCStLNCtYaL9xB5Y77JJ+MBtkDZITJSB6ee7jznPc/DYk84i
qzTbpyRGG98smakueOGB+ZKpOS3d/u2XNt+OZkduUoZm4WL7iUXUErBN0TKJmBwy
R6jLTs4BJcyvdwo78kVDlmicNOAiyPnz4y8JABTF+We0UBFyxGxePUlWaKPviJhy
N/2GaAca8TzHaEZhlrglFJ6fGfOQot2gOOGTPQefQeLiiip0fDoDPQPrkZf38lDK
V0/Jvip4tK/0nNwab1fnGBfQ+37C2rCPAluzjnBwLB1OwCqI+W+hpRzXJQhUlxa3
nor75EtuhtlgUQ==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:13 2026 by rpki-client