Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
File: vI6RiHZmXLWDii99KNdHYRM5bvQ.mft (raw, json)
Hash identifier: h9FRDSZq4QNMrAPNvmqOkxTGASrGi996iWMFje+JPT8=
Subject key identifier: F5:BC:C9:6A:57:B0:7C:5B:EC:2F:97:83:EB:AB:AC:2A:1C:09:5F:83
Authority key identifier: BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
Certificate issuer: /CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Certificate serial: 019E2C27BE6E1EE751B7EB1D99690AB11662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
Manifest number: E2
Signing time: Fri 15 May 2026 15:01:02 +0000
Manifest this update: Fri 15 May 2026 15:01:02 +0000
Manifest next update: Sat 16 May 2026 15:01:02 +0000
Files and hashes: 1: WvZUTqnUJrfxPwj7etIyxS5XtG0.roa (hash: tjBBu94qUSlvnCT5HDdgFpmfyKhqmKvNYxBumfbCE8U=)
2: vI6RiHZmXLWDii99KNdHYRM5bvQ.crl (hash: EfpCacYG1qpBzziGpE1haTcGyXg6eH4kbrEWofO9lk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:27:be:6e:1e:e7:51:b7:eb:1d:99:69:0a:b1:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Validity
Not Before: May 15 15:01:02 2026 GMT
Not After : May 16 15:01:02 2026 GMT
Subject: CN=f5bcc96a57b07c5bec2f9783ebabac2a1c095f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:f4:a1:88:f3:18:00:d7:7a:9a:06:68:d1:
79:7d:6b:e3:4d:08:c7:a1:03:72:d9:f7:44:73:17:
0f:bd:3c:16:37:74:e2:82:5a:45:11:17:a5:89:26:
ac:89:d4:c2:99:76:5e:0b:3d:2e:2a:1a:ec:12:4f:
de:cc:a0:44:46:98:0e:23:3a:fa:45:2a:5e:23:61:
a4:e4:73:43:60:3d:47:83:58:d2:74:27:f1:97:37:
59:42:9c:90:ae:61:a1:f8:ff:be:66:2b:81:36:0e:
29:cf:93:6b:d0:00:34:51:0c:83:ea:5f:fd:17:87:
e8:51:fa:24:59:08:da:50:af:c1:bf:25:d8:46:49:
d8:2d:c4:ed:84:95:7c:80:14:bb:e5:73:29:6e:49:
a7:9d:a4:77:7c:2d:13:30:a1:ad:ce:9d:5a:fa:ba:
f8:d4:43:e2:6a:af:6e:dc:4b:6f:08:e1:a7:a5:b0:
42:b9:6d:05:45:bf:e2:ed:11:96:c2:31:fb:97:79:
96:22:39:c4:81:ac:44:ee:44:33:ce:92:4f:96:af:
1d:c2:1c:70:b1:57:3e:b9:69:a2:fd:0b:d3:e7:04:
40:02:52:e4:78:23:1f:e9:10:e2:a2:32:18:af:e0:
3f:64:02:65:31:38:a6:d2:47:45:51:94:5b:57:a5:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:C9:6A:57:B0:7C:5B:EC:2F:97:83:EB:AB:AC:2A:1C:09:5F:83
X509v3 Authority Key Identifier:
keyid:BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:69:d8:d1:95:eb:56:11:96:f6:46:4d:81:52:12:ea:86:a3:
67:b4:28:04:c2:3b:4e:ef:57:44:7e:77:1f:08:bb:fc:b6:d4:
5a:55:16:13:80:8f:ec:52:a5:50:7d:5a:85:4e:25:33:0b:9e:
41:95:f4:65:c5:39:79:f9:ca:c7:86:b3:52:23:31:24:00:95:
67:68:17:6c:8b:b5:93:6c:ce:6a:25:10:96:43:e2:da:1e:6f:
f9:94:1c:65:36:f7:3a:8b:6c:33:b8:37:32:a1:ef:df:24:dd:
e4:19:83:2b:e1:29:3c:f7:ad:0b:cb:c1:ba:12:2b:45:56:f0:
c3:fe:73:aa:20:6c:eb:95:2a:c5:e4:0e:ca:de:ca:a6:db:67:
59:e7:fc:2f:2d:c9:0d:f1:ac:7f:65:7a:71:14:b1:57:7d:70:
7b:99:11:32:73:a2:83:9e:77:3d:01:42:8b:39:c0:cf:14:53:
57:14:ee:2b:12:02:6d:15:7a:bc:2b:06:a6:5c:c5:f5:42:f5:
78:a9:1d:a1:9d:71:f0:02:01:83:82:ce:ec:b6:2b:29:55:64:
19:12:3b:42:68:c4:e0:28:df:f8:d5:d6:cd:72:ac:63:db:5d:
60:71:31:84:fc:2b:37:77:1f:bb:41:5d:0f:e7:c7:7d:d6:e4:
73:e3:76:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4sJ75uHudRt+sdmWkKsRZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGU5MTg4NzY2NjVjYjU4MzhhMmY3ZDI4ZDc0NzYxMTMz
OTZlZjQwHhcNMjYwNTE1MTUwMTAyWhcNMjYwNTE2MTUwMTAyWjAzMTEwLwYDVQQD
EyhmNWJjYzk2YTU3YjA3YzViZWMyZjk3ODNlYmFiYWMyYTFjMDk1ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWr0oYjzGADXepoGaNF5fWvjTQjH
oQNy2fdEcxcPvTwWN3TiglpFEReliSasidTCmXZeCz0uKhrsEk/ezKBERpgOIzr6
RSpeI2Gk5HNDYD1Hg1jSdCfxlzdZQpyQrmGh+P++ZiuBNg4pz5Nr0AA0UQyD6l/9
F4foUfokWQjaUK/BvyXYRknYLcTthJV8gBS75XMpbkmnnaR3fC0TMKGtzp1a+rr4
1EPiaq9u3EtvCOGnpbBCuW0FRb/i7RGWwjH7l3mWIjnEgaxE7kQzzpJPlq8dwhxw
sVc+uWmi/QvT5wRAAlLkeCMf6RDiojIYr+A/ZAJlMTim0kdFUZRbV6XpvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW8yWpXsHxb7C+Xg+urrCocCV+DMB8GA1UdIwQY
MBaAFLyOkYh2Zly1g4ovfSjXR2ETOW70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkk2UmlIWm1YTFdEaWk5OUtOZEhZUk01YnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUt
Yzk4YTFiZGU2NDc2LzEvdkk2UmlIWm1YTFdEaWk5OUtOZEhZUk01YnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jYmIyZTQtODhjMy00Y2MwLTk2NzUtYzk4YTFiZGU2NDc2
LzEvdkk2UmlIWm1YTFdEaWk5OUtOZEhZUk01YnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmnY0ZXr
VhGW9kZNgVIS6oajZ7QoBMI7Tu9XRH53Hwi7/LbUWlUWE4CP7FKlUH1ahU4lMwue
QZX0ZcU5efnKx4azUiMxJACVZ2gXbIu1k2zOaiUQlkPi2h5v+ZQcZTb3OotsM7g3
MqHv3yTd5BmDK+EpPPetC8vBuhIrRVbww/5zqiBs65UqxeQOyt7KpttnWef8Ly3J
DfGsf2V6cRSxV31we5kRMnOig553PQFCiznAzxRTVxTuKxICbRV6vCsGplzF9UL1
eKkdoZ1x8AIBg4LO7LYrKVVkGRI7QmjE4Cjf+NXWzXKsY9tdYHExhPwrN3cfu0Fd
D+fHfdbkc+N2mw==
-----END CERTIFICATE-----
Generated at Fri May 15 21:29:43 2026 by rpki-client