
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: BcuFRKLFPJcO7AkuK0CzzDuTGuE5ClMc2T2dQWnORQg=
Subject key identifier: 22:E3:1B:73:BE:89:0B:01:3D:FD:71:44:81:D2:9A:09:84:74:EA:99
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019ED46203E77192E346177181A63A6E2454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0DCF
Signing time: Wed 17 Jun 2026 07:00:53 +0000
Manifest this update: Wed 17 Jun 2026 07:00:53 +0000
Manifest next update: Thu 18 Jun 2026 07:00:53 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: 7J53fsSCwJe4ZxhC9fdWBGtykGVWt8+XiLvIersVC4g=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:62:03:e7:71:92:e3:46:17:71:81:a6:3a:6e:24:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jun 17 07:00:53 2026 GMT
Not After : Jun 18 07:00:53 2026 GMT
Subject: CN=22e31b73be890b013dfd714481d29a098474ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:6d:14:6d:1f:b9:0e:38:19:03:c6:44:0d:
6e:df:6e:94:57:e5:23:d5:4e:8b:dd:fa:b3:a8:de:
fe:60:0b:46:9e:03:85:a4:47:65:64:46:d8:bf:ff:
60:d6:07:c4:e3:24:8a:b4:ad:8c:85:f0:35:1c:8d:
45:c2:91:0f:a9:1f:44:33:e5:ef:14:7e:83:23:c4:
15:bc:60:0c:c8:5f:95:0f:82:d7:11:34:c0:7d:97:
fc:64:af:ac:86:32:c1:84:59:c5:46:15:22:07:11:
60:7e:c6:88:a9:ce:6e:05:a1:a3:0e:74:e2:0b:14:
70:0f:07:77:5c:96:a9:4c:01:ca:3c:7a:70:20:ad:
07:b1:cc:dd:f5:e3:01:ee:21:4a:1b:ae:88:41:df:
56:4a:4e:76:3c:5e:da:42:4e:dd:4b:82:9c:ab:ce:
e9:f5:b4:05:18:d1:e7:0c:ca:82:f4:78:3d:72:64:
c3:ad:9a:45:9d:5a:63:b5:05:df:ad:68:12:00:93:
42:fb:d5:32:41:1f:f7:d7:75:58:38:09:89:64:a3:
98:c6:85:ac:6a:e9:d0:a6:f6:d1:31:c4:0e:69:d5:
92:a7:9e:b4:23:5f:d0:03:38:eb:63:51:f8:19:a1:
2e:4e:85:75:7b:30:7d:29:b9:59:7e:10:83:b8:81:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E3:1B:73:BE:89:0B:01:3D:FD:71:44:81:D2:9A:09:84:74:EA:99
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:09:df:d9:29:da:25:e0:74:55:f1:46:04:e3:cc:29:e3:26:
ee:32:b5:c1:a4:ee:72:a5:ab:fa:2e:8c:70:11:2f:4a:7d:94:
4a:8f:ae:d7:d7:f2:8c:98:e4:4a:38:f6:e0:f5:08:ec:b8:f2:
00:46:ac:fe:59:4a:0a:80:83:52:04:da:32:4c:16:a1:2d:00:
4e:1b:9b:c0:36:02:05:12:76:61:0d:fe:f0:34:10:1f:10:1d:
85:d0:a6:62:e5:4b:53:d1:58:e5:f0:93:19:e3:d5:2e:48:35:
c3:2f:ce:ed:59:16:6b:82:fd:d0:01:6c:45:4d:e4:3a:72:71:
36:6e:4a:77:ce:65:6d:d6:e6:64:8c:4a:1b:31:a8:26:f2:b7:
c5:4a:c2:b7:7d:9b:df:96:57:b7:6c:e3:ac:0d:83:37:36:08:
78:12:72:e0:65:8a:df:8a:19:3d:bf:93:39:ff:b6:c2:fd:68:
e4:c8:da:e5:87:11:80:4b:2d:79:5e:f6:a9:f3:a7:46:97:61:
eb:dd:b1:c4:52:f3:6a:c8:44:46:78:9d:c7:fe:d0:fb:9d:69:
fd:2f:de:46:db:a5:4d:3b:a4:ea:8a:c9:05:5f:8e:f3:74:4b:
5c:14:bf:aa:d7:6b:80:a4:a8:af:8d:46:ca:aa:39:0e:35:87:
66:10:69:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7UYgPncZLjRhdxgaY6biRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDM0ZmQ5OGMxMWQ4ZDcyZGYzODBjYTgzZWRmNzlmY2Mw
MDg1OWYwHhcNMjYwNjE3MDcwMDUzWhcNMjYwNjE4MDcwMDUzWjAzMTEwLwYDVQQD
EygyMmUzMWI3M2JlODkwYjAxM2RmZDcxNDQ4MWQyOWEwOTg0NzRlYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNJtFG0fuQ44GQPGRA1u326UV+Uj
1U6L3fqzqN7+YAtGngOFpEdlZEbYv/9g1gfE4ySKtK2MhfA1HI1FwpEPqR9EM+Xv
FH6DI8QVvGAMyF+VD4LXETTAfZf8ZK+shjLBhFnFRhUiBxFgfsaIqc5uBaGjDnTi
CxRwDwd3XJapTAHKPHpwIK0Hsczd9eMB7iFKG66IQd9WSk52PF7aQk7dS4Kcq87p
9bQFGNHnDMqC9Hg9cmTDrZpFnVpjtQXfrWgSAJNC+9UyQR/313VYOAmJZKOYxoWs
aunQpvbRMcQOadWSp560I1/QAzjrY1H4GaEuToV1ezB9KblZfhCDuIEG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLjG3O+iQsBPf1xRIHSmgmEdOqZMB8GA1UdIwQY
MBaAFERDT9mMEdjXLfOAyoPt95/MAIWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYt
MjM3YmIzMGQ3MzA1LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jZjUyMGMtMjg5My00MmJmLWE4MGYtMjM3YmIzMGQ3MzA1
LzEvUkVOUDJZd1IyTmN0ODRES2ctMzNuOHdBaFo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgnf2Sna
JeB0VfFGBOPMKeMm7jK1waTucqWr+i6McBEvSn2USo+u19fyjJjkSjj24PUI7Ljy
AEas/llKCoCDUgTaMkwWoS0AThubwDYCBRJ2YQ3+8DQQHxAdhdCmYuVLU9FY5fCT
GePVLkg1wy/O7VkWa4L90AFsRU3kOnJxNm5Kd85lbdbmZIxKGzGoJvK3xUrCt32b
35ZXt2zjrA2DNzYIeBJy4GWK34oZPb+TOf+2wv1o5Mja5YcRgEsteV72qfOnRpdh
692xxFLzashERnidx/7Q+51p/S/eRtulTTuk6orJBV+O83RLXBS/qtdrgKSor41G
yqo5DjWHZhBpFQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:10 2026 by rpki-client