Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: FHsPH3gTeFfvnycogE7Sjf/TK7PaHgGE3EE4q8NxRSk=
Subject key identifier: 8C:2D:52:10:08:ED:00:F6:80:13:05:3C:D1:37:CE:64:9F:23:87:71
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019DF9F2092C12110D8BDE65EB1A8308E60F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 18F3
Signing time: Tue 05 May 2026 21:01:21 +0000
Manifest this update: Tue 05 May 2026 21:01:21 +0000
Manifest next update: Wed 06 May 2026 21:01:21 +0000
Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=)
2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: Dfb51ZNS0P6L/QLBeV21JvyVLsQfINk+6/BupxZf6Wk=)
3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:f2:09:2c:12:11:0d:8b:de:65:eb:1a:83:08:e6:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: May 5 21:01:21 2026 GMT
Not After : May 6 21:01:21 2026 GMT
Subject: CN=8c2d521008ed00f68013053cd137ce649f238771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:d5:36:25:c0:27:1f:b3:54:e1:5b:33:ad:
2b:19:31:e3:9c:c4:c5:e9:12:29:4e:65:11:88:71:
e6:ac:9c:75:40:e3:fd:5e:c0:1d:2e:76:6b:e3:68:
3d:a0:9f:bd:cc:ba:a8:74:c9:a3:72:b9:b5:60:06:
f6:94:be:c7:df:1b:8c:42:2a:2d:ee:e7:8e:b0:36:
15:8f:11:ca:73:ed:53:8b:5c:27:e6:ab:4b:84:fe:
0c:aa:59:f7:b8:64:7d:63:2a:c1:6a:ac:7c:ab:68:
d6:84:f8:12:94:a2:d5:a5:3b:23:fe:5b:54:2b:0a:
d5:0b:98:13:af:96:35:94:09:70:d6:3f:31:1c:f2:
e9:91:7c:7b:ac:f5:87:83:75:2f:04:a5:1c:39:dc:
dd:78:e8:f9:5e:79:ae:68:63:2c:e5:70:ed:c2:97:
c6:cc:58:cb:f9:6b:02:af:c4:7f:7b:77:c7:e2:85:
1b:34:e5:d2:23:f0:2b:ec:09:c3:ba:7a:c5:b6:b9:
c9:f4:fa:7a:92:85:5c:f0:d0:98:3c:f4:1b:65:21:
67:f1:6f:3f:9d:3e:5a:b3:d2:c6:89:7a:d9:1c:b0:
c6:60:92:82:c4:d2:d0:3d:43:8f:4a:76:c2:c8:a4:
0a:f5:9b:34:3b:34:84:ab:f5:8a:33:3b:e7:0b:ca:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:52:10:08:ED:00:F6:80:13:05:3C:D1:37:CE:64:9F:23:87:71
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9e:88:77:fc:62:a8:5f:a4:2d:19:e7:7a:d4:37:93:8d:04:
89:91:46:0d:e5:9f:71:97:ac:b9:17:dd:d8:8a:63:04:e3:ef:
0c:8b:c5:e9:fe:02:60:3b:7f:16:a1:e2:b7:c0:69:5c:8d:90:
15:eb:45:01:83:49:d3:60:53:e0:18:1d:77:d0:63:df:b1:14:
f5:10:d8:51:66:42:5a:e6:12:8a:39:40:04:69:a7:49:d2:94:
35:b5:f1:b1:4d:a1:a8:29:c3:de:e9:18:bc:21:24:15:fc:59:
a3:1a:ad:9e:a8:16:3d:26:42:41:f5:b3:93:e3:fe:43:a5:d6:
e9:8c:a4:35:39:11:6a:50:e8:2a:94:2b:0e:02:7e:62:bb:85:
ee:b7:bf:35:47:7e:84:90:02:8e:6a:b7:b4:27:6f:72:d9:89:
c6:74:8f:92:3a:b8:d4:ee:89:32:d8:50:ce:f2:d2:23:ec:07:
96:44:1a:32:6d:6f:d8:6d:a6:a8:00:de:de:4d:52:aa:66:db:
67:a2:13:8e:8a:bc:84:5d:0c:e4:3b:97:c5:3e:2f:0e:2f:3a:
4c:35:05:50:b7:55:ea:c4:ce:a0:00:fc:e8:7a:90:c3:70:49:
ab:20:d5:a5:ab:48:81:6f:62:8d:57:e7:a3:7a:bf:59:8e:96:
32:67:bc:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ358gksEhENi95l6xqDCOYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDdhNzIxZWRhNDU5ZWJkZjk4ZTAyOWY4N2M5MGE5ODBl
ODFkOTQwHhcNMjYwNTA1MjEwMTIxWhcNMjYwNTA2MjEwMTIxWjAzMTEwLwYDVQQD
Eyg4YzJkNTIxMDA4ZWQwMGY2ODAxMzA1M2NkMTM3Y2U2NDlmMjM4NzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CLVNiXAJx+zVOFbM60rGTHjnMTF
6RIpTmURiHHmrJx1QOP9XsAdLnZr42g9oJ+9zLqodMmjcrm1YAb2lL7H3xuMQiot
7ueOsDYVjxHKc+1Ti1wn5qtLhP4Mqln3uGR9YyrBaqx8q2jWhPgSlKLVpTsj/ltU
KwrVC5gTr5Y1lAlw1j8xHPLpkXx7rPWHg3UvBKUcOdzdeOj5XnmuaGMs5XDtwpfG
zFjL+WsCr8R/e3fH4oUbNOXSI/Ar7AnDunrFtrnJ9Pp6koVc8NCYPPQbZSFn8W8/
nT5as9LGiXrZHLDGYJKCxNLQPUOPSnbCyKQK9Zs0OzSEq/WKMzvnC8rGdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwtUhAI7QD2gBMFPNE3zmSfI4dxMB8GA1UdIwQY
MBaAFPzXpyHtpFnr35jgKfh8kKmA6B2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYt
MTRkYzdlYzA0OTVkLzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jZjRhYjQtZTkxNC00MGUxLTgyZGYtMTRkYzdlYzA0OTVk
LzEvX05lbkllMmtXZXZmbU9BcC1IeVFxWURvSFpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZ6Id/xi
qF+kLRnnetQ3k40EiZFGDeWfcZesuRfd2IpjBOPvDIvF6f4CYDt/FqHit8BpXI2Q
FetFAYNJ02BT4Bgdd9Bj37EU9RDYUWZCWuYSijlABGmnSdKUNbXxsU2hqCnD3ukY
vCEkFfxZoxqtnqgWPSZCQfWzk+P+Q6XW6YykNTkRalDoKpQrDgJ+YruF7re/NUd+
hJACjmq3tCdvctmJxnSPkjq41O6JMthQzvLSI+wHlkQaMm1v2G2mqADe3k1Sqmbb
Z6ITjoq8hF0M5DuXxT4vDi86TDUFULdV6sTOoAD86HqQw3BJqyDVpatIgW9ijVfn
o3q/WY6WMme8yA==
-----END CERTIFICATE-----
Generated at Wed May 6 06:53:01 2026 by rpki-client