Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
File: m1GT2EOvGT4kh1aGZzyViW6uNJc.mft (raw, json)
Hash identifier: jhh2AeUpQfkYQDX5IDHyclhuU7zvP0RE+/BvcgkS3uQ=
Subject key identifier: 82:0C:09:4A:12:88:53:C8:41:79:DB:E2:E3:23:77:EF:0C:61:AD:2A
Authority key identifier: 9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
Certificate issuer: /CN=9b5193d843af193e24875686673c95896eae3497
Certificate serial: 019D992BB241B5A9201ACBE9C8A2AFF7C338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
Manifest number: 0CCF
Signing time: Fri 17 Apr 2026 02:01:10 +0000
Manifest this update: Fri 17 Apr 2026 02:01:10 +0000
Manifest next update: Sat 18 Apr 2026 02:01:10 +0000
Files and hashes: 1: m1GT2EOvGT4kh1aGZzyViW6uNJc.crl (hash: fHJ6L/QeFj1AZDiqiQRyCJl9lTkYMq5Cfrmlw5zATNk=)
2: yf4fsCLIG2l9cGmJeTOIIc51YeU.roa (hash: UF4YxdCOV/UBjXOSABiqqWZqo/WkePyMELF0t7EktlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:b2:41:b5:a9:20:1a:cb:e9:c8:a2:af:f7:c3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5193d843af193e24875686673c95896eae3497
Validity
Not Before: Apr 17 02:01:10 2026 GMT
Not After : Apr 18 02:01:10 2026 GMT
Subject: CN=820c094a128853c84179dbe2e32377ef0c61ad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:76:05:60:13:b2:fa:84:01:6f:c8:a0:19:
24:4c:23:05:90:8c:fe:7f:dd:2a:00:8d:8d:f9:98:
df:77:ad:bf:9c:e4:b6:93:0b:b4:35:71:ec:ba:f3:
97:99:85:b5:e3:75:6b:e6:21:d8:89:a0:77:fc:d8:
85:e9:3a:f4:7c:8e:50:a2:31:a7:99:e7:8b:71:25:
7a:5d:e9:a0:cf:48:05:ca:f4:c2:de:8d:5b:57:c7:
6b:36:d1:2a:91:21:ff:c8:99:ed:bd:e7:24:07:89:
2d:74:e1:80:31:6e:4c:99:c2:58:c5:3d:28:f8:38:
11:29:cd:4b:3e:e3:c3:de:cf:3c:09:43:43:ad:35:
dd:63:89:c3:55:d9:19:fe:c8:e6:03:ca:3e:3d:77:
42:44:22:ed:8c:76:f6:62:db:f9:06:6b:ec:d9:7a:
c2:82:0b:be:fc:1e:a3:46:79:4a:66:a5:a4:c1:b4:
25:fb:0c:df:96:a6:4d:b0:64:f0:9f:83:03:ba:2b:
30:15:77:43:7b:23:b9:eb:c6:2a:37:4e:d9:e4:4c:
e0:f5:14:5e:1a:44:26:2b:44:35:fd:ab:6c:f9:7f:
43:fa:11:4d:4c:74:ca:8d:87:0b:7b:73:c7:00:15:
77:a6:4a:38:63:10:e6:0f:c9:d3:5c:12:4c:35:9a:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0C:09:4A:12:88:53:C8:41:79:DB:E2:E3:23:77:EF:0C:61:AD:2A
X509v3 Authority Key Identifier:
keyid:9B:51:93:D8:43:AF:19:3E:24:87:56:86:67:3C:95:89:6E:AE:34:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1GT2EOvGT4kh1aGZzyViW6uNJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b5e940-6511-4805-8d0c-000ead39765a/1/m1GT2EOvGT4kh1aGZzyViW6uNJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:f5:15:a3:f3:58:27:22:16:f3:f3:75:27:14:6d:a0:49:d0:
8c:58:aa:82:13:61:28:87:ca:32:f0:15:98:33:3f:d4:8b:a8:
e0:31:4d:3b:26:3a:86:ea:23:51:a8:ee:e9:f2:30:08:f3:54:
df:d3:1e:9c:1e:99:23:16:45:7f:a9:30:38:97:82:f1:c3:15:
47:69:47:a6:89:16:5b:ff:c2:cd:fe:00:42:a2:c3:3a:74:d6:
1f:3c:4e:91:19:f7:1e:5a:f3:92:1e:1a:ab:af:b1:85:23:90:
c9:63:3c:01:a0:1a:f7:6e:4e:b1:55:40:24:eb:e9:2a:7c:33:
90:43:f6:2b:53:0f:d3:a2:d3:4d:26:3e:c4:df:70:4f:1f:0b:
8f:71:05:97:14:d9:e3:b4:60:50:84:d0:3c:9a:a7:e9:61:05:
e2:43:b3:93:55:2e:54:06:2a:89:c4:e4:d7:71:06:e3:d0:c7:
e8:36:ff:c7:8e:a0:5b:e4:b3:73:6e:77:61:db:01:1d:23:4a:
17:75:a9:af:90:ad:ff:2c:c6:7d:8d:cf:65:2a:f1:63:29:b1:
2e:8c:51:5a:7d:2e:d2:02:9e:e3:52:e1:a5:94:6d:94:dd:56:
37:ad:62:6a:e1:c3:2f:26:88:8b:06:41:57:b6:a9:39:78:11:
e9:e9:09:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK7JBtakgGsvpyKKv98M4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTE5M2Q4NDNhZjE5M2UyNDg3NTY4NjY3M2M5NTg5NmVh
ZTM0OTcwHhcNMjYwNDE3MDIwMTEwWhcNMjYwNDE4MDIwMTEwWjAzMTEwLwYDVQQD
Eyg4MjBjMDk0YTEyODg1M2M4NDE3OWRiZTJlMzIzNzdlZjBjNjFhZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn52BWATsvqEAW/IoBkkTCMFkIz+
f90qAI2N+Zjfd62/nOS2kwu0NXHsuvOXmYW143Vr5iHYiaB3/NiF6Tr0fI5QojGn
meeLcSV6Xemgz0gFyvTC3o1bV8drNtEqkSH/yJntveckB4ktdOGAMW5MmcJYxT0o
+DgRKc1LPuPD3s88CUNDrTXdY4nDVdkZ/sjmA8o+PXdCRCLtjHb2Ytv5Bmvs2XrC
ggu+/B6jRnlKZqWkwbQl+wzflqZNsGTwn4MDuiswFXdDeyO568YqN07Z5Ezg9RRe
GkQmK0Q1/ats+X9D+hFNTHTKjYcLe3PHABV3pko4YxDmD8nTXBJMNZoNawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIMCUoSiFPIQXnb4uMjd+8MYa0qMB8GA1UdIwQY
MBaAFJtRk9hDrxk+JIdWhmc8lYlurjSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMt
MDAwZWFkMzk3NjVhLzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNWU5NDAtNjUxMS00ODA1LThkMGMtMDAwZWFkMzk3NjVh
LzEvbTFHVDJFT3ZHVDRraDFhR1p6eVZpVzZ1TkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPUVo/NY
JyIW8/N1JxRtoEnQjFiqghNhKIfKMvAVmDM/1Iuo4DFNOyY6huojUaju6fIwCPNU
39MenB6ZIxZFf6kwOJeC8cMVR2lHpokWW//Czf4AQqLDOnTWHzxOkRn3Hlrzkh4a
q6+xhSOQyWM8AaAa925OsVVAJOvpKnwzkEP2K1MP06LTTSY+xN9wTx8Lj3EFlxTZ
47RgUITQPJqn6WEF4kOzk1UuVAYqicTk13EG49DH6Db/x46gW+Szc253YdsBHSNK
F3Wpr5Ct/yzGfY3PZSrxYymxLoxRWn0u0gKe41LhpZRtlN1WN61iauHDLyaIiwZB
V7apOXgR6ekJQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:01:16 2026 by rpki-client