Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: oFKJysWyXElDCMctHor6UbkHjA33Ap9vHSf1d9AHXXs=
Subject key identifier: 71:DC:0F:E9:80:C9:20:E4:64:BE:3F:83:E8:CB:05:FD:C1:DC:53:ED
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019E311722A8305F5442C8994429364D3F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0FF5
Signing time: Sat 16 May 2026 14:01:00 +0000
Manifest this update: Sat 16 May 2026 14:01:00 +0000
Manifest next update: Sun 17 May 2026 14:01:00 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: 4YrtoxKvISFX14Tt5qxmDXd/WbkZLNoim+9HxLMPeZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:22:a8:30:5f:54:42:c8:99:44:29:36:4d:3f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: May 16 14:01:00 2026 GMT
Not After : May 17 14:01:00 2026 GMT
Subject: CN=71dc0fe980c920e464be3f83e8cb05fdc1dc53ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:2f:17:c7:68:99:b8:9a:a1:b7:53:46:05:
ec:8a:fd:6f:7d:73:99:18:c1:2f:79:7f:33:11:10:
fb:b9:50:b2:4b:b0:2f:a4:85:d1:a6:f9:86:5b:60:
57:c4:66:d7:76:5f:27:2e:23:4f:4c:8a:a7:6a:96:
7d:ec:48:9a:d8:b9:7d:1e:eb:11:39:b0:c6:af:97:
0f:c9:c3:2d:a2:36:7a:39:22:5f:c5:f5:0c:35:bd:
d2:aa:1b:77:ad:78:2c:a8:c7:e5:a1:73:2d:51:5e:
67:6e:b6:77:f7:93:53:db:db:e0:56:12:d2:29:bc:
5b:01:a2:19:d6:03:3a:5d:56:70:61:66:27:e0:71:
98:e4:8a:fb:28:c5:61:12:92:a7:22:30:ab:05:d1:
87:64:0b:ff:e1:d5:7f:2c:a1:fd:de:d1:f0:55:03:
a2:fb:ba:33:7e:8a:ac:1b:ee:b4:bb:7c:a5:d1:90:
c5:36:ac:54:24:d3:60:9f:65:05:42:d7:6d:49:8f:
fa:5e:33:1e:da:31:59:41:b8:98:37:a4:47:da:e7:
1f:2c:6e:bf:76:bf:4f:d5:1d:54:65:63:56:69:9e:
7b:ac:40:64:18:93:c7:f9:0a:87:b8:5f:73:0f:32:
80:5b:cb:ec:8a:ea:a3:66:1a:22:81:e5:98:dc:7d:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DC:0F:E9:80:C9:20:E4:64:BE:3F:83:E8:CB:05:FD:C1:DC:53:ED
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:c4:93:12:79:81:e4:ec:78:62:05:51:43:19:e4:7d:b8:
8b:19:cb:9f:62:ec:66:35:c6:d2:03:52:1b:6a:f0:57:30:4c:
e9:12:40:bf:b7:52:a1:b2:43:a8:f8:e4:6f:53:d1:b9:7f:82:
b6:95:f6:3b:f7:ee:90:3c:9b:e7:9f:e3:8d:de:d9:63:35:44:
99:6b:b3:ce:c7:a9:0a:8d:34:6d:57:93:ac:d3:69:44:ef:b1:
f0:29:0c:be:df:cf:ec:33:5d:64:05:8f:2e:20:d0:21:24:26:
0d:d8:9d:4e:72:d8:df:a1:59:df:39:5d:27:64:35:b4:51:09:
e5:91:ff:f1:e6:68:bc:39:9c:c6:99:1b:eb:f1:ea:9a:8f:29:
f9:fb:1b:c2:10:e2:ac:ca:43:e6:d5:bf:d3:6a:da:96:53:d3:
ef:82:89:76:e7:f0:64:a1:f4:3b:83:0f:29:b5:ad:bd:7b:d2:
8b:6f:3c:90:1f:66:ed:dc:ba:b0:97:5b:5f:9e:d4:36:ad:bb:
bf:79:5e:25:b1:e1:c3:1b:d0:a5:3b:0f:8d:97:1e:41:a1:66:
aa:37:78:21:1b:46:e8:85:cc:34:5e:4f:d3:71:ad:f8:f6:40:
0d:f4:dd:98:18:d5:f6:f6:ee:26:63:39:1c:b1:b8:94:13:05:
4f:cf:1a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xFyKoMF9UQsiZRCk2TT9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj
MzkyZDkwHhcNMjYwNTE2MTQwMTAwWhcNMjYwNTE3MTQwMTAwWjAzMTEwLwYDVQQD
Eyg3MWRjMGZlOTgwYzkyMGU0NjRiZTNmODNlOGNiMDVmZGMxZGM1M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRUvF8dombiaobdTRgXsiv1vfXOZ
GMEveX8zERD7uVCyS7AvpIXRpvmGW2BXxGbXdl8nLiNPTIqnapZ97Eia2Ll9HusR
ObDGr5cPycMtojZ6OSJfxfUMNb3Sqht3rXgsqMfloXMtUV5nbrZ395NT29vgVhLS
KbxbAaIZ1gM6XVZwYWYn4HGY5Ir7KMVhEpKnIjCrBdGHZAv/4dV/LKH93tHwVQOi
+7ozfoqsG+60u3yl0ZDFNqxUJNNgn2UFQtdtSY/6XjMe2jFZQbiYN6RH2ucfLG6/
dr9P1R1UZWNWaZ57rEBkGJPH+QqHuF9zDzKAW8vsiuqjZhoigeWY3H30PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHcD+mAySDkZL4/g+jLBf3B3FPtMB8GA1UdIwQY
MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt
MjA0OWY2YWJmZDlkLzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk
LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecrEkxJ5
geTseGIFUUMZ5H24ixnLn2LsZjXG0gNSG2rwVzBM6RJAv7dSobJDqPjkb1PRuX+C
tpX2O/fukDyb55/jjd7ZYzVEmWuzzsepCo00bVeTrNNpRO+x8CkMvt/P7DNdZAWP
LiDQISQmDdidTnLY36FZ3zldJ2Q1tFEJ5ZH/8eZovDmcxpkb6/Hqmo8p+fsbwhDi
rMpD5tW/02rallPT74KJdufwZKH0O4MPKbWtvXvSi288kB9m7dy6sJdbX57UNq27
v3leJbHhwxvQpTsPjZceQaFmqjd4IRtG6IXMNF5P03Gt+PZADfTdmBjV9vbuJmM5
HLG4lBMFT88auA==
-----END CERTIFICATE-----
Generated at Sat May 16 22:41:47 2026 by rpki-client