Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: ZijqSHMqLh9mnGKL4rKm+XFz+4vVDD72NZsAl2Jb0rc=
Subject key identifier: 13:51:79:9C:89:41:1F:58:DA:1A:10:F6:E2:CB:C7:BF:68:3D:C2:3F
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019DCDBD8DBA64011415422474B07403D94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0D47
Signing time: Mon 27 Apr 2026 07:00:44 +0000
Manifest this update: Mon 27 Apr 2026 07:00:44 +0000
Manifest next update: Tue 28 Apr 2026 07:00:44 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: Mq9Xv+LdsNVUORyCuYNej5mRMUai6W27PWf6jI3Hv24=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:8d:ba:64:01:14:15:42:24:74:b0:74:03:d9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Apr 27 07:00:44 2026 GMT
Not After : Apr 28 07:00:44 2026 GMT
Subject: CN=1351799c89411f58da1a10f6e2cbc7bf683dc23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:9f:c4:59:9e:71:71:61:db:f1:8c:91:94:
43:46:45:6b:17:63:25:58:d6:9d:ba:a0:da:fe:c3:
4f:d0:94:9d:82:9d:8b:96:3b:e3:9f:46:74:cc:4b:
e9:cb:ce:6e:bc:5e:cf:b1:49:4c:5b:f1:c5:34:63:
60:ae:ec:14:1d:4c:b9:70:58:e3:1f:ec:49:ce:0d:
76:d5:28:da:9d:1e:f6:11:ae:b4:39:10:16:e9:9f:
87:ae:1e:4c:da:8f:cb:ba:42:6c:ff:5e:3a:72:27:
e1:8f:e9:9f:c8:13:6c:4f:ba:f8:b3:e5:ee:8f:c0:
db:8f:3b:1f:1e:2e:f9:d6:39:70:35:ca:5b:05:54:
f3:14:bf:a6:78:17:a3:ef:0d:42:4b:15:6d:8d:6d:
5c:6e:47:c5:9d:ce:57:ac:b1:09:02:36:d2:42:51:
7e:64:fd:e2:f7:8c:23:b3:09:af:2d:79:ff:2a:eb:
df:f7:84:fa:48:45:85:42:2e:d0:25:68:36:50:fe:
14:e1:60:c0:13:70:14:47:a3:39:6e:df:9f:ea:4a:
c0:67:62:81:a9:f3:3f:a1:70:8f:71:fe:49:49:a7:
8f:2c:5b:e7:6f:c6:5e:74:2b:48:f8:b3:4f:e5:6e:
52:79:56:65:49:01:d9:b0:03:5a:1c:aa:41:e0:50:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:79:9C:89:41:1F:58:DA:1A:10:F6:E2:CB:C7:BF:68:3D:C2:3F
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:9b:a6:da:c7:9a:5d:e7:32:7b:0a:b7:2d:3f:8e:9c:57:
e2:d1:33:1b:e9:dd:89:51:6f:59:b2:a8:10:69:c7:57:4f:e5:
64:e2:51:b9:4b:cd:cc:77:83:e5:d5:e9:67:cd:92:5c:c0:d2:
80:b7:a7:20:16:e5:9a:38:05:67:dd:b0:0e:24:bf:7a:ad:9b:
31:d7:c9:85:ea:f6:15:cc:96:cd:78:cd:15:38:e3:12:82:1a:
ce:d2:79:2d:ba:b3:10:1c:29:52:6c:51:ac:08:08:21:16:29:
57:fd:58:b8:1d:ee:04:e4:4c:63:ae:ac:46:b6:52:8f:43:ad:
a3:5a:44:1d:22:6a:31:8b:f2:43:d5:52:fc:ca:ed:0c:ce:1b:
97:e6:3a:d6:47:0d:03:8c:7c:d6:f6:e2:64:53:96:61:5f:8a:
8a:2c:cd:88:02:ac:03:b2:5f:78:a6:c2:60:a8:ed:2e:6c:a4:
17:be:f9:7a:d6:ae:b5:12:ec:bf:31:c8:54:5c:6e:17:02:54:
8a:54:3e:1e:73:2e:cc:05:33:be:a0:7a:18:82:61:1d:72:c2:
3a:2c:a8:ca:35:fc:13:98:f6:3d:79:70:f3:2a:25:aa:ea:fd:
c0:51:99:d9:b7:98:cd:4b:cf:db:03:90:35:3a:df:f9:b4:6a:
b9:aa:97:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvY26ZAEUFUIkdLB0A9lNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw
MDg1OWYwHhcNMjYwNDI3MDcwMDQ0WhcNMjYwNDI4MDcwMDQ0WjAzMTEwLwYDVQQD
EygxMzUxNzk5Yzg5NDExZjU4ZGExYTEwZjZlMmNiYzdiZjY4M2RjMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAWfxFmecXFh2/GMkZRDRkVrF2Ml
WNaduqDa/sNP0JSdgp2Lljvjn0Z0zEvpy85uvF7PsUlMW/HFNGNgruwUHUy5cFjj
H+xJzg121SjanR72Ea60ORAW6Z+Hrh5M2o/LukJs/146cifhj+mfyBNsT7r4s+Xu
j8DbjzsfHi751jlwNcpbBVTzFL+meBej7w1CSxVtjW1cbkfFnc5XrLEJAjbSQlF+
ZP3i94wjswmvLXn/Kuvf94T6SEWFQi7QJWg2UP4U4WDAE3AUR6M5bt+f6krAZ2KB
qfM/oXCPcf5JSaePLFvnb8ZedCtI+LNP5W5SeVZlSQHZsANaHKpB4FCRpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNReZyJQR9Y2hoQ9uLLx79oPcI/MB8GA1UdIwQY
MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt
MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1
LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFebptrH
ml3nMnsKty0/jpxX4tEzG+ndiVFvWbKoEGnHV0/lZOJRuUvNzHeD5dXpZ82SXMDS
gLenIBblmjgFZ92wDiS/eq2bMdfJher2FcyWzXjNFTjjEoIaztJ5LbqzEBwpUmxR
rAgIIRYpV/1YuB3uBORMY66sRrZSj0Oto1pEHSJqMYvyQ9VS/MrtDM4bl+Y61kcN
A4x81vbiZFOWYV+KiizNiAKsA7JfeKbCYKjtLmykF775etautRLsvzHIVFxuFwJU
ilQ+HnMuzAUzvqB6GIJhHXLCOiyoyjX8E5j2PXlw8yolqur9wFGZ2beYzUvP2wOQ
NTrf+bRquaqXKg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:29 2026 by rpki-client