Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json)
Hash identifier: oSp3Idg56BjHvMR8wuNqxz1+/FnqrtWNcDxfn2SezcE=
Subject key identifier: B1:1F:63:1E:C6:F6:E8:B1:32:A7:2B:97:BF:E6:FD:47:1E:85:1E:4F
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019E09D27B65759A3BAE4775DDB5FFD872E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
Manifest number: 13FB
Signing time: Fri 08 May 2026 23:00:49 +0000
Manifest this update: Fri 08 May 2026 23:00:49 +0000
Manifest next update: Sat 09 May 2026 23:00:49 +0000
Files and hashes: 1: 0afuwwpSylnqyi1KRwMRDOM6r7k.roa (hash: z3MlidMuuLgNR1mdxxRmyn3fh5T6uAJcGz1Z1osDBjI=)
2: 4gGd7LcQ6qQ6avnurf3xejB1t0s.roa (hash: j3iW+b3EiZhGw5mm3ly7V+FoiiHAPGatR1ru3J1J6Vg=)
3: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: AtvF2EY5OIbvlHbo8tnUonNHcYB/iMAfMpp5I+Ah5Qg=)
4: zNm5Qj7aAnNhn0PPXpRiZPpb-Cc.roa (hash: aecWS2V1Qv9HVqql7W0x5HQGtiHaZA7TdAFG/WsALog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:09:d2:7b:65:75:9a:3b:ae:47:75:dd:b5:ff:d8:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: May 8 23:00:49 2026 GMT
Not After : May 9 23:00:49 2026 GMT
Subject: CN=b11f631ec6f6e8b132a72b97bfe6fd471e851e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:f3:a6:be:62:cf:15:9c:a8:04:67:68:30:
4f:ab:f7:f6:0a:c2:2a:5b:6c:70:0b:bc:c7:3d:82:
91:c3:14:02:73:6c:fa:2d:ac:32:79:da:6c:cf:75:
31:02:f6:ba:4c:13:84:cb:3c:7b:e3:82:c8:c9:4c:
62:ba:42:22:0b:7d:46:58:3d:a6:1e:64:30:a0:23:
4d:b2:f3:a9:f1:08:67:e9:da:7f:73:be:1c:f3:50:
72:17:76:3f:98:57:3e:ad:23:82:b9:b2:76:9b:07:
3e:6b:de:62:ae:52:41:d4:09:9f:12:d5:45:74:c1:
6e:d4:0a:a6:d0:ed:ad:c2:fa:e1:be:2c:c5:af:e3:
fc:cd:92:05:53:88:29:71:70:af:8f:0b:8b:ed:d5:
70:1b:e7:8b:e4:93:2a:d6:bb:e5:48:a8:67:e5:b8:
1d:e5:f8:a8:78:26:31:a1:bd:84:2b:63:08:c9:e6:
e0:57:a2:30:58:20:e6:ba:6b:3d:34:d6:ef:04:96:
76:64:42:64:6e:24:95:41:da:52:ba:7e:24:9c:63:
3f:0e:f9:5a:e4:08:29:0d:e3:a8:c8:e9:e4:4a:57:
78:ac:27:ec:03:d7:24:06:7b:c7:39:04:0e:35:52:
ec:a7:37:0d:59:2a:f8:3e:bb:f8:98:cc:31:56:c9:
3c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:63:1E:C6:F6:E8:B1:32:A7:2B:97:BF:E6:FD:47:1E:85:1E:4F
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:35:8b:43:e0:39:a7:70:82:dd:7b:a4:dc:e8:0c:17:db:99:
10:ec:40:71:cf:9b:81:dc:6f:62:27:49:3b:7d:01:b2:e5:8d:
79:73:2c:25:45:ad:03:a8:5e:05:ac:37:04:fa:fd:33:cb:7c:
4f:4d:b5:66:ba:66:87:3b:c8:47:49:d4:b8:f2:12:fd:36:89:
03:86:88:4b:4c:2c:4b:4d:56:43:53:2b:71:cd:6f:c9:65:d6:
49:2c:40:83:56:f1:40:5a:92:cc:81:05:3e:44:0a:94:fb:87:
7f:14:0f:98:94:ac:8f:c9:2e:7f:53:fc:b6:82:b7:ff:c0:6e:
4a:5f:63:fe:05:35:7d:53:c0:d3:c7:66:a3:00:27:bc:22:2e:
6f:31:e2:da:d6:cc:27:35:63:98:1f:44:49:ab:a5:28:69:79:
59:60:8b:a6:25:10:af:0a:33:d5:d4:83:8b:04:7a:39:ff:f4:
eb:a0:eb:62:b1:a2:b1:0c:88:a5:18:3f:c7:1a:21:c5:0b:4e:
9a:57:6a:96:73:bc:cf:db:95:f4:1a:81:df:35:88:22:25:a3:
6f:63:f4:0b:88:11:88:e0:24:77:5a:81:9e:84:2d:7c:e9:ec:
bc:a2:93:de:0a:7f:18:33:95:fa:31:e1:13:10:5e:8a:85:d4:
13:c9:ce:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4J0ntldZo7rkd13bX/2HLlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh
NTk0NTYwHhcNMjYwNTA4MjMwMDQ5WhcNMjYwNTA5MjMwMDQ5WjAzMTEwLwYDVQQD
EyhiMTFmNjMxZWM2ZjZlOGIxMzJhNzJiOTdiZmU2ZmQ0NzFlODUxZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bnzpr5izxWcqARnaDBPq/f2CsIq
W2xwC7zHPYKRwxQCc2z6Lawyedpsz3UxAva6TBOEyzx744LIyUxiukIiC31GWD2m
HmQwoCNNsvOp8Qhn6dp/c74c81ByF3Y/mFc+rSOCubJ2mwc+a95irlJB1AmfEtVF
dMFu1Aqm0O2twvrhvizFr+P8zZIFU4gpcXCvjwuL7dVwG+eL5JMq1rvlSKhn5bgd
5fioeCYxob2EK2MIyebgV6IwWCDmums9NNbvBJZ2ZEJkbiSVQdpSun4knGM/Dvla
5AgpDeOoyOnkSld4rCfsA9ckBnvHOQQONVLspzcNWSr4Prv4mMwxVsk83QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEfYx7G9uixMqcrl7/m/UcehR5PMB8GA1UdIwQY
MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt
NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl
LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjWLQ+A5
p3CC3Xuk3OgMF9uZEOxAcc+bgdxvYidJO30BsuWNeXMsJUWtA6heBaw3BPr9M8t8
T021ZrpmhzvIR0nUuPIS/TaJA4aIS0wsS01WQ1Mrcc1vyWXWSSxAg1bxQFqSzIEF
PkQKlPuHfxQPmJSsj8kuf1P8toK3/8BuSl9j/gU1fVPA08dmowAnvCIubzHi2tbM
JzVjmB9ESaulKGl5WWCLpiUQrwoz1dSDiwR6Of/066DrYrGisQyIpRg/xxohxQtO
mldqlnO8z9uV9BqB3zWIIiWjb2P0C4gRiOAkd1qBnoQtfOnsvKKT3gp/GDOV+jHh
ExBeioXUE8nOTQ==
-----END CERTIFICATE-----
Generated at Sat May 9 03:03:56 2026 by rpki-client