Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier: iYAuEXQs+jjGRo6sk+Vtm/SDHR8+oPIkd+1WneHqCYQ=
Subject key identifier: 97:6F:83:2A:2A:F0:01:5B:76:82:2E:BA:D8:D1:A2:43:E5:08:C1:07
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 019E30728FE865B1CE8B0B4E39353DCEA006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number: 121E
Signing time: Sat 16 May 2026 11:01:14 +0000
Manifest this update: Sat 16 May 2026 11:01:14 +0000
Manifest next update: Sun 17 May 2026 11:01:14 +0000
Files and hashes: 1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: B4/Rt8EZIhHBHuY3AhCItoV9VnJqrSYD1UAkZBB/YRQ=)
2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:8f:e8:65:b1:ce:8b:0b:4e:39:35:3d:ce:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: May 16 11:01:14 2026 GMT
Not After : May 17 11:01:14 2026 GMT
Subject: CN=976f832a2af0015b76822ebad8d1a243e508c107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:63:df:aa:a8:ce:9c:f1:59:2d:e5:f6:df:
19:4b:a0:d3:07:6c:9a:79:81:25:06:1d:df:a8:a2:
64:50:35:8f:23:23:bc:7c:a2:d9:2b:57:90:40:dc:
af:0e:64:68:0f:25:83:c0:54:54:48:69:67:59:2a:
49:a2:85:8f:5a:c9:b5:6d:82:84:01:25:5d:2f:68:
07:79:1f:c5:fc:41:f8:af:48:83:da:9a:a3:6d:d2:
4e:65:28:f1:41:06:7e:dc:39:b0:f0:ba:be:84:0b:
71:eb:8b:93:7b:8c:e7:68:d7:f9:70:d8:56:f9:33:
33:74:85:c7:4d:54:fe:14:57:13:fb:32:82:9b:52:
d4:71:7d:ae:ae:28:b4:bc:10:7e:c6:15:35:85:3f:
d7:16:36:36:96:30:9c:7b:97:6c:b4:ba:28:c6:8a:
f9:6e:d7:9b:81:a3:9c:a5:a9:13:d3:04:46:73:6a:
36:a6:4c:c4:7a:d4:b0:e1:97:d5:50:f0:71:2e:cb:
53:fd:05:cf:f2:16:ba:a6:00:59:4b:98:75:87:5b:
c0:6b:51:9a:ca:5b:63:66:c1:c3:79:99:f3:e3:48:
0b:e5:dc:2a:24:26:50:f2:df:cb:50:6a:54:a8:99:
20:6a:81:60:42:22:0a:fe:38:4e:b4:a5:c8:a3:45:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6F:83:2A:2A:F0:01:5B:76:82:2E:BA:D8:D1:A2:43:E5:08:C1:07
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3d:1e:6f:c3:9d:c4:d7:44:06:8c:a4:0b:82:d5:18:7d:2e:
4f:c0:af:2f:b6:e8:ab:fc:58:cd:24:47:f9:aa:24:8c:27:65:
84:09:9b:d5:c1:d3:bf:7f:b1:52:5f:6d:af:96:ae:c0:a7:a9:
37:6b:b8:82:c1:53:ee:7e:9b:44:ed:73:55:b8:3b:f7:a9:87:
cc:c4:4b:c5:52:a6:32:ee:b0:62:00:8c:c2:18:d5:55:11:80:
83:e2:ab:d0:c7:bc:f8:74:e4:1c:2f:f6:fb:6f:e1:67:79:87:
cb:31:67:ea:93:67:2d:8a:ee:78:06:c7:6e:1f:d7:72:50:0b:
e5:f0:63:e6:a4:a8:b6:fa:aa:cb:64:67:ce:7e:e0:85:fe:7f:
d4:e1:a5:aa:9b:c5:6c:a3:74:4f:67:5f:72:cf:86:33:0b:21:
7d:8c:83:b2:5f:9f:b5:1c:00:68:1b:76:cc:75:81:b4:03:13:
04:ed:fb:3c:22:43:69:aa:19:29:48:6c:da:ab:22:33:2e:0d:
8d:0f:ee:a6:60:c3:29:f0:82:34:74:d1:1d:e2:24:be:a1:73:
5d:2a:6c:93:36:d0:0c:c9:7c:fb:07:e6:91:94:c0:6d:a9:f7:
bc:bd:a6:2a:ba:bd:0c:b9:e5:c0:39:79:23:0d:aa:f7:22:b5:
70:7f:26:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wco/oZbHOiwtOOTU9zqAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz
ZTYwNDMwHhcNMjYwNTE2MTEwMTE0WhcNMjYwNTE3MTEwMTE0WjAzMTEwLwYDVQQD
Eyg5NzZmODMyYTJhZjAwMTViNzY4MjJlYmFkOGQxYTI0M2U1MDhjMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv95j36qozpzxWS3l9t8ZS6DTB2ya
eYElBh3fqKJkUDWPIyO8fKLZK1eQQNyvDmRoDyWDwFRUSGlnWSpJooWPWsm1bYKE
ASVdL2gHeR/F/EH4r0iD2pqjbdJOZSjxQQZ+3Dmw8Lq+hAtx64uTe4znaNf5cNhW
+TMzdIXHTVT+FFcT+zKCm1LUcX2urii0vBB+xhU1hT/XFjY2ljCce5dstLooxor5
btebgaOcpakT0wRGc2o2pkzEetSw4ZfVUPBxLstT/QXP8ha6pgBZS5h1h1vAa1Ga
yltjZsHDeZnz40gL5dwqJCZQ8t/LUGpUqJkgaoFgQiIK/jhOtKXIo0V36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdvgyoq8AFbdoIuutjRokPlCMEHMB8GA1UdIwQY
MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD0eb8Od
xNdEBoykC4LVGH0uT8CvL7boq/xYzSRH+aokjCdlhAmb1cHTv3+xUl9tr5auwKep
N2u4gsFT7n6bRO1zVbg796mHzMRLxVKmMu6wYgCMwhjVVRGAg+Kr0Me8+HTkHC/2
+2/hZ3mHyzFn6pNnLYrueAbHbh/XclAL5fBj5qSotvqqy2Rnzn7ghf5/1OGlqpvF
bKN0T2dfcs+GMwshfYyDsl+ftRwAaBt2zHWBtAMTBO37PCJDaaoZKUhs2qsiMy4N
jQ/upmDDKfCCNHTRHeIkvqFzXSpskzbQDMl8+wfmkZTAban3vL2mKrq9DLnlwDl5
Iw2q9yK1cH8mHg==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:51 2026 by rpki-client