Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: M1JX8+ZM7TK9AQ2vtn5E+GJUFTGZCCfRulnSue9v7UA=
Subject key identifier: EC:75:29:BF:E8:80:DE:80:EF:2B:55:8F:AA:F5:A0:8A:6F:DF:B7:28
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019E28B8DDA21763596630DDC1D6BE99BADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 12FB
Signing time: Thu 14 May 2026 23:01:04 +0000
Manifest this update: Thu 14 May 2026 23:01:04 +0000
Manifest next update: Fri 15 May 2026 23:01:04 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: RgrfS9BTTzTd/GECwkoOyO1uq9CmGiD6T80syaHC0b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b8:dd:a2:17:63:59:66:30:dd:c1:d6:be:99:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: May 14 23:01:04 2026 GMT
Not After : May 15 23:01:04 2026 GMT
Subject: CN=ec7529bfe880de80ef2b558faaf5a08a6fdfb728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:28:0d:b6:28:23:2f:d8:3a:ea:fb:7a:94:
64:65:e4:13:c8:43:b8:0d:d9:4a:2d:26:23:a0:2c:
09:20:9d:64:ab:2e:20:d2:d6:d3:02:56:76:de:22:
73:8c:46:fe:d9:97:ac:f0:cc:6e:0c:73:76:e9:f7:
46:46:ca:d1:03:56:d1:53:24:6c:e9:8d:be:b6:04:
17:b5:17:8a:71:7a:26:3f:f1:5e:7b:c0:8a:56:8c:
ea:69:74:f4:86:9e:af:95:78:a7:84:ea:d7:77:f7:
4e:af:88:ef:44:51:c1:ab:39:b7:58:80:f9:f1:96:
99:34:c1:04:7b:2d:8a:a7:96:34:c2:c9:5e:bd:8c:
fd:b9:00:76:37:59:81:3d:56:95:58:53:ba:cd:f9:
27:ed:8c:08:4c:5c:ad:fd:e9:a6:a7:99:90:fc:b5:
11:9c:44:a4:35:20:45:19:08:18:de:7f:51:20:a9:
8a:5a:d1:89:62:37:c5:64:40:03:5c:6d:0f:18:a0:
e8:84:ec:93:35:ff:23:8f:b4:44:9a:f6:0a:0d:ed:
ca:fe:b5:f9:c7:ce:3b:24:a6:3f:39:f7:e0:04:4d:
7c:b6:b4:bf:ee:e1:45:e4:19:a6:7c:59:57:30:2c:
a3:cd:df:00:e3:54:74:bb:d4:e2:fa:ec:a7:27:d1:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:75:29:BF:E8:80:DE:80:EF:2B:55:8F:AA:F5:A0:8A:6F:DF:B7:28
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d6:bc:90:86:f8:04:89:43:11:5e:30:d2:bf:85:c2:11:ac:
6e:5f:d0:ae:da:95:c1:77:8f:7e:ac:64:91:e7:20:ca:41:b6:
01:47:d8:93:34:a1:15:f2:cc:cf:f0:a1:ab:41:33:63:68:91:
22:ca:e4:0a:3a:20:34:24:f6:4a:70:4c:1a:95:6c:c0:85:f8:
2e:c7:c4:52:f9:cc:dd:ea:ff:e8:89:5c:6c:d0:26:39:1b:e5:
d3:2e:65:9b:29:d6:a2:b8:51:78:43:6d:2b:dd:c1:72:c3:a1:
66:a0:5a:87:28:a3:24:4c:42:a3:d6:e0:1f:a8:fa:27:90:62:
8f:86:26:06:cc:1e:74:34:97:6e:06:83:17:8e:1e:0f:1b:a4:
64:3d:bc:3b:b0:a3:9d:95:10:d4:c3:b5:41:5c:bd:22:c0:96:
c8:0e:81:e5:b6:09:98:ce:1b:4f:70:e5:82:c9:3b:83:8c:72:
0e:99:ed:a4:3f:cc:26:94:a4:4b:ca:f9:3a:3b:44:ee:13:05:
b8:48:6e:b2:e1:71:35:00:28:47:08:9b:4f:2d:46:87:31:2e:
c0:72:4d:31:39:5f:29:e3:63:ff:af:05:47:fc:5d:bf:9d:48:
2d:ea:e9:1a:af:6b:19:b9:74:2b:09:b1:f5:c8:0d:a3:99:89:
88:2b:2e:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ouN2iF2NZZjDdwda+mbraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjYwNTE0MjMwMTA0WhcNMjYwNTE1MjMwMTA0WjAzMTEwLwYDVQQD
EyhlYzc1MjliZmU4ODBkZTgwZWYyYjU1OGZhYWY1YTA4YTZmZGZiNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoMoDbYoIy/YOur7epRkZeQTyEO4
DdlKLSYjoCwJIJ1kqy4g0tbTAlZ23iJzjEb+2Zes8MxuDHN26fdGRsrRA1bRUyRs
6Y2+tgQXtReKcXomP/Fee8CKVozqaXT0hp6vlXinhOrXd/dOr4jvRFHBqzm3WID5
8ZaZNMEEey2Kp5Y0wslevYz9uQB2N1mBPVaVWFO6zfkn7YwITFyt/emmp5mQ/LUR
nESkNSBFGQgY3n9RIKmKWtGJYjfFZEADXG0PGKDohOyTNf8jj7REmvYKDe3K/rX5
x847JKY/OffgBE18trS/7uFF5BmmfFlXMCyjzd8A41R0u9Ti+uynJ9GFEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx1Kb/ogN6A7ytVj6r1oIpv37coMB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADda8kIb4
BIlDEV4w0r+FwhGsbl/QrtqVwXePfqxkkecgykG2AUfYkzShFfLMz/Chq0EzY2iR
IsrkCjogNCT2SnBMGpVswIX4LsfEUvnM3er/6IlcbNAmORvl0y5lmynWorhReENt
K93BcsOhZqBahyijJExCo9bgH6j6J5Bij4YmBswedDSXbgaDF44eDxukZD28O7Cj
nZUQ1MO1QVy9IsCWyA6B5bYJmM4bT3Dlgsk7g4xyDpntpD/MJpSkS8r5OjtE7hMF
uEhusuFxNQAoRwibTy1GhzEuwHJNMTlfKeNj/68FR/xdv51ILerpGq9rGbl0Kwmx
9cgNo5mJiCsuhg==
-----END CERTIFICATE-----
Generated at Fri May 15 09:07:05 2026 by rpki-client