Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: xSBCUvB2jLzaBmTykKOsQPBE8+LaGY3M3hzw1OKdMmg=
Subject key identifier: 0D:4C:97:0D:4D:91:35:FD:61:F7:32:53:7A:A2:FA:C8:1D:BB:79:BE
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019E32CEB64879F744FE7EBE971E3929C325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0DE0
Signing time: Sat 16 May 2026 22:01:08 +0000
Manifest this update: Sat 16 May 2026 22:01:08 +0000
Manifest next update: Sun 17 May 2026 22:01:08 +0000
Files and hashes: 1: P5elOkBLveGl1Ib_d-hIHalet_Q.roa (hash: yhnDVPZx7UIZ7b78IbUGd3YNtEhVBShWgFfNgBkV6AE=)
2: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: OWqFmfy5epzaJiut5vAlT+8HMZFJ0ikcmvomzKsmjpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:ce:b6:48:79:f7:44:fe:7e:be:97:1e:39:29:c3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: May 16 22:01:08 2026 GMT
Not After : May 17 22:01:08 2026 GMT
Subject: CN=0d4c970d4d9135fd61f732537aa2fac81dbb79be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:76:52:49:11:ff:03:03:f5:0e:c7:db:ca:
53:6a:95:25:d6:c5:3f:b5:a9:6a:4f:bd:49:21:a2:
c7:2c:12:3e:3e:c6:45:14:15:49:be:4b:f0:e3:32:
b9:ca:2d:b7:45:e8:55:05:d3:78:3c:9f:7e:61:41:
3c:b6:ad:b2:0e:a3:17:11:e3:51:ce:f2:de:55:e1:
ad:17:28:8a:b1:3d:43:72:9e:be:71:8c:e5:b9:22:
b8:63:1a:28:fb:35:20:b8:53:13:45:37:2d:b9:1c:
84:cf:11:64:f6:c3:eb:24:94:20:da:d9:91:6d:6b:
a3:d9:2e:0d:40:d7:8e:b4:fd:08:4c:e3:c9:a2:20:
e3:ad:3d:e4:d8:1e:c7:cb:5f:54:bc:86:22:88:15:
4e:20:b9:88:d9:0d:7f:b0:89:bd:f5:fc:d0:3c:87:
3c:dd:f7:0e:f3:9b:7b:df:f2:8c:66:d8:13:5e:d3:
d4:d6:88:59:ea:94:de:7a:bc:31:8b:59:f7:3d:d4:
c2:00:fb:46:64:de:8c:2b:42:bb:47:b8:0f:3d:07:
4c:b8:10:19:1f:e7:2d:78:df:af:f0:04:d0:3b:40:
9c:d1:cf:50:b7:d9:8d:52:c9:72:55:52:d7:f9:ec:
9c:31:7b:e0:d0:b0:4c:ce:ae:7d:ba:fa:ca:f5:66:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:97:0D:4D:91:35:FD:61:F7:32:53:7A:A2:FA:C8:1D:BB:79:BE
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d0:68:ad:50:2d:e6:ba:73:c7:8e:4e:0f:1b:ef:6f:16:68:
6d:67:fc:01:e6:fa:4d:ab:01:1e:50:b3:2a:0c:33:45:b1:3c:
bf:52:41:6b:9d:9c:6a:cb:86:db:da:65:46:5b:eb:e7:f0:bb:
9d:65:cd:a6:f8:3f:75:ec:26:08:cb:af:19:58:96:e7:55:42:
d2:25:10:d8:f1:d3:85:f1:97:70:ab:41:09:65:56:c7:63:e5:
ee:a1:eb:ed:9b:ef:e7:04:fb:03:27:18:bf:e5:27:9d:6b:08:
5b:75:15:62:fd:41:38:d0:0e:56:34:1d:49:bc:4b:e9:cc:88:
e5:9a:04:84:5e:69:9e:bf:ea:a8:19:8b:50:de:0c:01:61:c8:
ea:5a:b8:4e:56:75:2c:f1:44:8c:1b:5d:07:35:20:3d:29:31:
b5:78:54:46:6d:00:be:7c:31:5e:93:a2:17:6f:47:8e:dd:f7:
c8:9a:86:11:b9:ca:8d:66:0b:98:09:c0:a8:7b:07:3f:30:26:
8c:37:be:a7:1e:28:5b:a4:b9:27:2d:fe:cf:24:3d:c1:8f:31:
3f:15:c6:f3:d5:50:f2:0f:a1:4f:17:84:35:78:ed:8f:ac:ba:
df:7e:c9:31:91:1e:e8:ed:3e:cf:6a:52:9a:d9:f1:4b:64:0a:
1d:22:e5:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4yzrZIefdE/n6+lx45KcMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTkzMDU4N2I0ZmQyZmVmNzI4ZjA1NmVjYTg2ODg0MjJj
M2I5N2MwHhcNMjYwNTE2MjIwMTA4WhcNMjYwNTE3MjIwMTA4WjAzMTEwLwYDVQQD
EygwZDRjOTcwZDRkOTEzNWZkNjFmNzMyNTM3YWEyZmFjODFkYmI3OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFp2UkkR/wMD9Q7H28pTapUl1sU/
talqT71JIaLHLBI+PsZFFBVJvkvw4zK5yi23RehVBdN4PJ9+YUE8tq2yDqMXEeNR
zvLeVeGtFyiKsT1Dcp6+cYzluSK4Yxoo+zUguFMTRTctuRyEzxFk9sPrJJQg2tmR
bWuj2S4NQNeOtP0ITOPJoiDjrT3k2B7Hy19UvIYiiBVOILmI2Q1/sIm99fzQPIc8
3fcO85t73/KMZtgTXtPU1ohZ6pTeerwxi1n3PdTCAPtGZN6MK0K7R7gPPQdMuBAZ
H+cteN+v8ATQO0Cc0c9Qt9mNUslyVVLX+eycMXvg0LBMzq59uvrK9WbztQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1Mlw1NkTX9YfcyU3qi+sgdu3m+MB8GA1UdIwQY
MBaAFK2pMFh7T9L+9yjwVuyoaIQiw7l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgt
Mzg5MWU2ZmVmZWE0LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgtMzg5MWU2ZmVmZWE0
LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9BorVAt
5rpzx45ODxvvbxZobWf8Aeb6TasBHlCzKgwzRbE8v1JBa52casuG29plRlvr5/C7
nWXNpvg/dewmCMuvGViW51VC0iUQ2PHThfGXcKtBCWVWx2Pl7qHr7Zvv5wT7AycY
v+UnnWsIW3UVYv1BONAOVjQdSbxL6cyI5ZoEhF5pnr/qqBmLUN4MAWHI6lq4TlZ1
LPFEjBtdBzUgPSkxtXhURm0AvnwxXpOiF29Hjt33yJqGEbnKjWYLmAnAqHsHPzAm
jDe+px4oW6S5Jy3+zyQ9wY8xPxXG89VQ8g+hTxeENXjtj6y6337JMZEe6O0+z2pS
mtnxS2QKHSLl5g==
-----END CERTIFICATE-----
Generated at Sun May 17 03:44:39 2026 by rpki-client