Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File: jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier: wGesMRmiXmfY+010LnhQSnI5L1Ej5ygt2FJvgz+bFKU=
Subject key identifier: A8:EC:84:8F:33:65:7E:B3:6E:FE:4A:21:E0:5E:9B:2B:93:D7:3D:D0
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer: /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial: 019E3184AF1767470C1D9076ECD08002EB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number: 056A
Signing time: Sat 16 May 2026 16:00:39 +0000
Manifest this update: Sat 16 May 2026 16:00:39 +0000
Manifest next update: Sun 17 May 2026 16:00:39 +0000
Files and hashes: 1: 05QIvJOOAUXqj808lKMxTvcjpgI.roa (hash: gKKvCOzRFiKxk9/Kqr5y87Hf373wvPBTO7rH55xDzoM=)
2: M3bGaMmzldtwIJFmKvbRE4l-_SE.roa (hash: 57TSjLTIljKW30xR2fMZ7JjWCTKCXVEEUqD5yH8z/Do=)
3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: CsfLgFkYUL0+iVVYdPHyd1+N86l20Ek5ZvV1nEgxm98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:af:17:67:47:0c:1d:90:76:ec:d0:80:02:eb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Validity
Not Before: May 16 16:00:39 2026 GMT
Not After : May 17 16:00:39 2026 GMT
Subject: CN=a8ec848f33657eb36efe4a21e05e9b2b93d73dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:3f:0f:a3:4c:42:b2:67:6f:d1:4b:6d:12:
6a:a3:48:b6:ff:da:9e:7b:29:7f:02:da:a6:d5:04:
be:9b:e9:e8:43:ad:f7:30:7e:4d:6e:bd:de:b0:8a:
f5:79:ca:e9:ec:bd:c9:02:ca:df:c4:88:ff:22:e4:
20:15:b5:e0:64:86:ce:4f:ed:39:6c:c8:af:04:e2:
b4:2a:ea:74:17:ed:bb:76:5a:a3:bc:88:6f:36:dd:
a6:c5:c4:87:31:95:dd:89:b0:fa:78:09:08:c0:50:
8c:41:c5:e8:77:b5:da:b0:78:9b:9c:09:7b:3e:a4:
4f:35:43:b9:2f:6c:18:e8:3e:da:cd:ab:48:28:b1:
fb:b9:6c:7a:52:99:38:6b:db:b7:cc:27:42:eb:47:
d5:80:bf:38:39:fa:f5:5b:56:96:20:9f:b1:01:92:
54:ec:7d:23:6f:1d:0f:a7:d2:ec:b6:ee:04:14:18:
31:b0:94:8e:3c:99:77:c0:dc:46:e1:b2:61:fa:fc:
a6:4a:6f:85:00:ec:6a:02:cd:87:13:d1:26:26:f0:
63:d6:b7:78:c1:9c:2f:5b:2a:07:9e:b6:1f:e7:01:
c3:2a:91:a2:5d:ff:7e:ff:37:b2:80:bf:3e:99:51:
06:dc:65:21:36:59:28:48:37:29:f4:d6:20:08:fc:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:84:8F:33:65:7E:B3:6E:FE:4A:21:E0:5E:9B:2B:93:D7:3D:D0
X509v3 Authority Key Identifier:
keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:96:fd:26:40:d2:c3:0f:11:dc:6f:01:b0:c0:2b:4e:1b:
62:b8:fa:62:4c:99:34:51:d9:94:6a:63:ae:9b:b6:38:7a:a4:
49:ad:e3:fe:54:f5:e1:62:22:ef:5c:86:7c:ff:2d:d0:bc:1f:
5c:7c:17:b8:4d:62:22:3b:6e:ae:2f:08:32:a8:72:02:86:e3:
ea:88:9e:b9:a8:55:01:35:28:48:17:c0:96:39:ea:c6:c9:fb:
36:65:2f:b7:3f:19:e2:96:fa:5f:36:ac:9a:b1:a0:9f:eb:40:
08:24:cb:53:5e:5b:6b:1b:ab:d0:02:3f:fe:83:06:b4:22:22:
72:5d:6f:22:e6:23:a0:b0:b2:a2:da:22:a4:9a:26:59:d8:64:
8c:3d:be:1e:9b:73:4c:f5:67:ce:af:c8:c9:ba:5d:62:ca:7b:
86:26:5f:9a:8c:07:dd:3d:04:18:d4:29:c7:fb:13:42:96:b4:
db:62:44:21:47:68:60:78:dd:ba:bd:d1:71:15:b0:55:de:f3:
79:6d:5e:52:30:71:c4:03:64:91:fe:0c:70:87:a7:f1:bc:f0:
fb:84:8f:ca:12:00:0e:82:00:a6:34:1a:e9:c8:74:9c:bd:3a:
4a:5a:bb:b6:d1:ab:c7:ca:24:ae:31:d2:c7:13:0d:55:7a:6a:
d5:75:06:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhK8XZ0cMHZB27NCAAuueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjYWQzMDNiYzcwYjEyZjgzZGJmODlmYzE0ODljYjQ2MTJj
ZjU1MjYwHhcNMjYwNTE2MTYwMDM5WhcNMjYwNTE3MTYwMDM5WjAzMTEwLwYDVQQD
EyhhOGVjODQ4ZjMzNjU3ZWIzNmVmZTRhMjFlMDVlOWIyYjkzZDczZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg4/D6NMQrJnb9FLbRJqo0i2/9qe
eyl/Atqm1QS+m+noQ633MH5Nbr3esIr1ecrp7L3JAsrfxIj/IuQgFbXgZIbOT+05
bMivBOK0Kup0F+27dlqjvIhvNt2mxcSHMZXdibD6eAkIwFCMQcXod7XasHibnAl7
PqRPNUO5L2wY6D7azatIKLH7uWx6Upk4a9u3zCdC60fVgL84Ofr1W1aWIJ+xAZJU
7H0jbx0Pp9Lstu4EFBgxsJSOPJl3wNxG4bJh+vymSm+FAOxqAs2HE9EmJvBj1rd4
wZwvWyoHnrYf5wHDKpGiXf9+/zeygL8+mVEG3GUhNlkoSDcp9NYgCPxlRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjshI8zZX6zbv5KIeBemyuT1z3QMB8GA1UdIwQY
MBaAFIytMDvHCxL4Pb+J/BSJy0YSz1UmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYt
NDgyNTU1NDUyODMxLzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xZDNmOWUtOWE2Yy00Yzg2LWEwMzYtNDgyNTU1NDUyODMx
LzEvakswd084Y0xFdmc5djRuOEZJbkxSaExQVlNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM46W/SZA
0sMPEdxvAbDAK04bYrj6YkyZNFHZlGpjrpu2OHqkSa3j/lT14WIi71yGfP8t0Lwf
XHwXuE1iIjturi8IMqhyAobj6oieuahVATUoSBfAljnqxsn7NmUvtz8Z4pb6Xzas
mrGgn+tACCTLU15baxur0AI//oMGtCIicl1vIuYjoLCyotoipJomWdhkjD2+Hptz
TPVnzq/IybpdYsp7hiZfmowH3T0EGNQpx/sTQpa022JEIUdoYHjdur3RcRWwVd7z
eW1eUjBxxANkkf4McIen8bzw+4SPyhIADoIApjQa6ch0nL06Slq7ttGrx8okrjHS
xxMNVXpq1XUGOw==
-----END CERTIFICATE-----
Generated at Sun May 17 00:27:46 2026 by rpki-client