Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier: +HGRs/NiGfW+EnSq5G+nzYrIHHcHRCy73dRrgtbzM7Y=
Subject key identifier: 9B:8F:40:30:B7:90:25:19:05:90:01:DA:C2:2E:B4:5D:75:62:47:44
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 019E30058FF1F9EE4EC4994BA720BD45F362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number: 0991
Signing time: Sat 16 May 2026 09:02:11 +0000
Manifest this update: Sat 16 May 2026 09:02:11 +0000
Manifest next update: Sun 17 May 2026 09:02:11 +0000
Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: cbqWIoUd3nsjNd9bY8LryP+hikn9gd22RuWDZY6EPZk=)
2: dhPvX_i1mFOzhmyQ6cgEC3zR_ns.roa (hash: 9n9s5loPBcCb7Ueh7CcxWNEVFKz5nZ6rOXbrQKMlyU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:8f:f1:f9:ee:4e:c4:99:4b:a7:20:bd:45:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: May 16 09:02:11 2026 GMT
Not After : May 17 09:02:11 2026 GMT
Subject: CN=9b8f4030b7902519059001dac22eb45d75624744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b9:1f:fd:4c:1a:e8:ee:a2:f7:ee:9f:43:e9:
78:55:15:52:3c:2c:1c:c9:e6:86:3e:7a:f2:45:10:
49:f6:ee:95:09:96:ca:67:3b:9b:19:5f:9a:5f:7f:
2c:e5:0d:4d:51:3e:67:e9:20:ce:93:bc:a8:15:fa:
c8:61:b1:c8:3e:a3:1f:36:1d:25:c6:b9:42:23:e7:
72:9f:03:31:4f:46:ca:0c:f9:41:04:5c:ee:9a:77:
c3:15:e3:98:c1:54:72:dd:56:f1:37:c9:65:84:60:
2e:34:a5:ee:34:fc:79:29:a4:ed:a9:32:ab:b2:fc:
3d:4d:82:83:cf:32:af:6b:60:15:9c:60:00:41:28:
7a:db:f0:d0:9a:87:12:b7:07:da:e5:3b:f1:d3:c7:
ed:c1:0d:84:b0:f0:69:5b:a3:5f:c1:5d:fe:53:e3:
a0:0f:01:70:4e:2b:34:f4:a7:93:f5:c5:ed:05:61:
43:59:0e:85:75:0d:20:2b:c8:56:67:bf:6a:4b:f6:
6d:9d:a3:90:6a:b5:01:84:13:3c:b7:c1:03:e1:4c:
e9:9f:3b:7f:57:81:33:28:04:94:05:50:a4:47:21:
5f:97:51:54:0c:0b:fa:94:46:d0:cc:03:95:95:c1:
26:85:72:da:0a:09:a9:2e:f4:2f:4a:85:38:84:91:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8F:40:30:B7:90:25:19:05:90:01:DA:C2:2E:B4:5D:75:62:47:44
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cb:b7:81:c6:6e:f5:b9:40:cc:ed:a2:f7:8e:e5:89:43:11:
5b:c2:8d:25:41:92:ab:84:f8:6e:5e:66:3f:fd:2a:42:41:4d:
f8:62:e0:07:11:0b:6a:37:e2:b8:23:b3:f7:9d:2d:fb:2c:8d:
82:c0:94:36:22:3b:dc:2a:ba:a8:76:b3:93:d7:30:2b:28:eb:
80:69:0d:98:94:0f:a0:31:63:b1:cb:f2:d5:eb:a4:c2:33:df:
63:76:bb:f4:92:0e:d3:62:a9:74:66:1f:5a:08:6e:c4:48:6a:
a3:c0:39:db:48:24:49:87:65:d5:62:39:48:26:e6:bb:f5:06:
86:09:0a:0d:24:b4:72:55:5b:80:a0:ac:cd:e1:52:00:b3:80:
4d:39:8c:61:10:7b:9d:f4:3d:5c:4b:18:0b:2e:19:58:de:a8:
50:0b:81:22:69:83:db:d5:02:7b:db:50:b2:0e:34:f1:0f:21:
35:20:6d:17:46:a0:1b:f9:d9:7b:2e:5c:e2:66:56:a7:00:7b:
a7:b4:7d:cb:18:94:4d:80:90:dd:87:b0:54:9c:d5:10:c4:30:
73:31:dd:d0:15:30:8e:7c:e3:a8:f4:d3:85:6b:0f:99:6e:f8:
1d:f9:e8:5d:df:06:52:b6:df:cd:ea:f6:74:70:be:0e:69:bb:
67:ab:75:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBY/x+e5OxJlLpyC9RfNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMDEyYmNiOWU2ZTc0NzIzNzcyNDc4MWE0YzkxOWZjNWM5
NDE5NjUwHhcNMjYwNTE2MDkwMjExWhcNMjYwNTE3MDkwMjExWjAzMTEwLwYDVQQD
Eyg5YjhmNDAzMGI3OTAyNTE5MDU5MDAxZGFjMjJlYjQ1ZDc1NjI0NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+bkf/Uwa6O6i9+6fQ+l4VRVSPCwc
yeaGPnryRRBJ9u6VCZbKZzubGV+aX38s5Q1NUT5n6SDOk7yoFfrIYbHIPqMfNh0l
xrlCI+dynwMxT0bKDPlBBFzumnfDFeOYwVRy3VbxN8llhGAuNKXuNPx5KaTtqTKr
svw9TYKDzzKva2AVnGAAQSh62/DQmocStwfa5Tvx08ftwQ2EsPBpW6NfwV3+U+Og
DwFwTis09KeT9cXtBWFDWQ6FdQ0gK8hWZ79qS/ZtnaOQarUBhBM8t8ED4Uzpnzt/
V4EzKASUBVCkRyFfl1FUDAv6lEbQzAOVlcEmhXLaCgmpLvQvSoU4hJHvOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuPQDC3kCUZBZAB2sIutF11YkdEMB8GA1UdIwQY
MBaAFOABK8uebnRyN3JHgaTJGfxclBllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMt
MGRiODhlYzczNDJjLzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wMmNlNmYtMTQyOS00MGFkLWI3NTMtMGRiODhlYzczNDJj
LzEvNEFFcnk1NXVkSEkzY2tlQnBNa1pfRnlVR1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcu3gcZu
9blAzO2i947liUMRW8KNJUGSq4T4bl5mP/0qQkFN+GLgBxELajfiuCOz950t+yyN
gsCUNiI73Cq6qHazk9cwKyjrgGkNmJQPoDFjscvy1eukwjPfY3a79JIO02KpdGYf
WghuxEhqo8A520gkSYdl1WI5SCbmu/UGhgkKDSS0clVbgKCszeFSALOATTmMYRB7
nfQ9XEsYCy4ZWN6oUAuBImmD29UCe9tQsg408Q8hNSBtF0agG/nZey5c4mZWpwB7
p7R9yxiUTYCQ3YewVJzVEMQwczHd0BUwjnzjqPTThWsPmW74HfnoXd8GUrbfzer2
dHC+Dmm7Z6t1/Q==
-----END CERTIFICATE-----
Generated at Sat May 16 15:40:07 2026 by rpki-client