Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: OF4OKCx0ygsCQLlwY6o16TQV08JWLrWu4iUphfKhA4U=
Subject key identifier: CE:E2:17:3B:41:61:19:66:E3:4D:9D:7B:01:C0:3B:78:67:36:BF:7E
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019E303B934632A6F6B6B9D9211FD91F45FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 15D7
Signing time: Sat 16 May 2026 10:01:11 +0000
Manifest this update: Sat 16 May 2026 10:01:11 +0000
Manifest next update: Sun 17 May 2026 10:01:11 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: WV8wRrB2IoSjT+LS6WH6fGhTLYSt3ZDFaxWjx/je/G8=)
2: KtMqQnXaTgjktxdZ9isOcMNd_ow.roa (hash: EvEd1Dr3LRZFLdIp6Wy0JVab3CsirxaKCwus40x7MwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:93:46:32:a6:f6:b6:b9:d9:21:1f:d9:1f:45:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: May 16 10:01:11 2026 GMT
Not After : May 17 10:01:11 2026 GMT
Subject: CN=cee2173b41611966e34d9d7b01c03b786736bf7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:93:66:dd:04:be:69:c7:81:28:cc:25:cd:
82:63:dc:ca:a4:3d:c8:61:00:8a:0e:53:64:53:81:
d2:ad:8b:a4:b5:09:b0:dd:b3:1a:fc:90:c3:a1:c9:
ec:4b:20:b1:8e:6f:c5:00:bc:ed:1f:72:51:5e:e7:
58:59:10:5e:b8:14:75:49:77:2f:f6:f4:bc:09:e8:
d8:d9:90:f1:d0:f1:92:ca:2e:b2:3a:b4:25:6b:db:
c2:a8:21:48:0d:96:95:63:5c:3d:2d:f1:5b:6c:14:
43:2e:86:41:cd:85:b8:f0:c1:da:e5:9f:29:85:b0:
ad:a2:2c:3b:94:83:ee:25:ea:04:55:1b:c9:0b:ed:
e7:cd:c9:4d:f1:71:ef:78:82:bf:26:25:b6:c8:92:
be:99:30:35:1f:c0:c7:4a:28:09:04:f5:35:22:80:
26:8b:0b:10:5a:0e:f9:bd:c0:df:7a:fc:9e:80:b2:
16:ff:69:a4:f0:16:53:21:ed:1b:be:6d:38:b0:f7:
b7:27:9b:0d:57:7c:c4:0c:68:f7:6b:21:5f:af:90:
7c:76:12:bb:73:c5:33:ee:eb:37:22:56:48:34:62:
52:db:b6:45:fa:90:7a:ed:c0:72:b6:89:2d:b4:e9:
38:0b:e1:0b:19:1c:1d:d4:cf:17:e4:61:36:50:7e:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:17:3B:41:61:19:66:E3:4D:9D:7B:01:C0:3B:78:67:36:BF:7E
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5f:56:b7:1e:a3:19:37:27:e7:bf:b6:ba:d5:09:94:55:41:
74:c4:dc:11:fb:bb:b3:45:d4:8e:2a:8e:71:29:2c:7d:0d:77:
39:d0:33:84:08:8a:df:af:3d:a0:c1:83:7f:a6:60:67:0c:8d:
2d:dc:7f:77:d9:04:16:3b:01:7c:47:b1:d1:72:06:e2:c8:e0:
07:d2:ce:35:bc:3e:a1:5f:83:d0:94:f5:5f:63:2a:37:cb:b8:
6e:41:75:1c:84:25:c9:71:43:aa:76:44:68:99:d9:32:56:20:
b1:ec:fb:b2:c6:e1:17:4b:43:32:97:8a:a2:cb:ae:dc:a1:2e:
e1:8d:10:65:1d:7c:8f:70:8f:2a:3d:45:d1:fb:b3:53:78:33:
41:73:1a:53:2f:53:99:9e:0d:b3:ba:eb:f4:7e:d5:f5:df:ce:
1e:4a:10:04:66:8b:b2:e4:0c:3a:fa:8c:ea:33:51:03:66:e3:
8b:40:37:f1:ff:92:78:e0:0b:03:55:0e:5d:25:15:a5:e2:bb:
c2:3e:fb:fc:da:f1:f4:ff:cc:61:2c:3d:2a:17:54:71:27:9f:
3c:3e:2b:86:ea:b8:5e:23:df:ad:52:d0:c8:f6:9f:5a:97:b5:
ab:d4:21:f9:4d:93:88:5e:d2:83:ef:67:45:8c:38:9d:80:6d:
31:85:74:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO5NGMqb2trnZIR/ZH0X8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OGUwMzIxMjcxMzMyYWZjNzdlNGM4NTc5ZjBlNTU1OWNj
MDljNTAwHhcNMjYwNTE2MTAwMTExWhcNMjYwNTE3MTAwMTExWjAzMTEwLwYDVQQD
EyhjZWUyMTczYjQxNjExOTY2ZTM0ZDlkN2IwMWMwM2I3ODY3MzZiZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKTZt0EvmnHgSjMJc2CY9zKpD3I
YQCKDlNkU4HSrYuktQmw3bMa/JDDocnsSyCxjm/FALztH3JRXudYWRBeuBR1SXcv
9vS8CejY2ZDx0PGSyi6yOrQla9vCqCFIDZaVY1w9LfFbbBRDLoZBzYW48MHa5Z8p
hbCtoiw7lIPuJeoEVRvJC+3nzclN8XHveIK/JiW2yJK+mTA1H8DHSigJBPU1IoAm
iwsQWg75vcDfevyegLIW/2mk8BZTIe0bvm04sPe3J5sNV3zEDGj3ayFfr5B8dhK7
c8Uz7us3IlZINGJS27ZF+pB67cBytokttOk4C+ELGRwd1M8X5GE2UH4QvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7iFztBYRlm402dewHAO3hnNr9+MB8GA1UdIwQY
MBaAFAiOAyEnEzKvx35MhXnw5VWcwJxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2Mt
ZjZkOTY2Y2E0ZjA3LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9hMmE1MmMtMTM2YS00M2E4LTk2N2MtZjZkOTY2Y2E0ZjA3
LzEvQ0k0RElTY1RNcV9IZmt5RmVmRGxWWnpBbkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACl9Wtx6j
GTcn57+2utUJlFVBdMTcEfu7s0XUjiqOcSksfQ13OdAzhAiK3689oMGDf6ZgZwyN
Ldx/d9kEFjsBfEex0XIG4sjgB9LONbw+oV+D0JT1X2MqN8u4bkF1HIQlyXFDqnZE
aJnZMlYgsez7ssbhF0tDMpeKosuu3KEu4Y0QZR18j3CPKj1F0fuzU3gzQXMaUy9T
mZ4Ns7rr9H7V9d/OHkoQBGaLsuQMOvqM6jNRA2bji0A38f+SeOALA1UOXSUVpeK7
wj77/Nrx9P/MYSw9KhdUcSefPD4rhuq4XiPfrVLQyPafWpe1q9Qh+U2TiF7Sg+9n
RYw4nYBtMYV0mg==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:10 2026 by rpki-client