Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: qN4TpyMocBSK1kj5VneOGc4pGIoajdhFJ2WCLwS7AEc=
Subject key identifier: 06:28:12:25:12:05:CA:CE:70:7A:26:48:31:49:70:B9:0A:2E:AC:67
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 019D99D05BC73C3499F9428EA7C0A8CA3060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 13EB
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: ojC0sB05EcDCgctQ9dDCJxZPOP0.roa (hash: 1kAvCSrjpKtG/wqX4+TjXTfOsHQ+c83C0DRspLJabKQ=)
2: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: UnYjvTB6+2oVu2tM6nkW6OB+cIRUO3iv/MLgwWM9uYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5b:c7:3c:34:99:f9:42:8e:a7:c0:a8:ca:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=062812251205cace707a2648314970b90a2eac67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:71:c9:3b:1d:c9:23:8f:30:c9:3e:32:a2:
ec:0b:c1:cb:6a:99:31:9f:3d:b4:ca:87:95:b9:4f:
e6:dc:b9:19:05:e0:e5:81:c0:6f:5e:8e:37:7e:50:
a2:66:6a:00:0e:cc:2c:63:e5:b5:9b:44:d5:3b:7b:
32:00:12:a9:1d:95:72:8b:98:ae:2d:cd:98:2f:97:
44:05:24:40:ae:fe:03:e7:9b:4c:b7:c5:07:74:68:
ab:2a:81:78:d6:eb:d0:4f:5e:5c:85:fa:fe:6a:c5:
32:4f:4c:7f:aa:92:a0:a0:d7:c9:57:d8:e2:02:33:
9f:f5:f2:0a:d6:22:ba:54:38:84:86:21:36:5c:c5:
5f:cc:38:12:91:43:e6:f1:98:52:7f:1c:fe:fa:3f:
79:09:89:92:1a:7f:3b:de:d7:91:fb:2e:34:92:8d:
e6:ee:84:30:db:f7:42:7f:8c:66:64:b1:9d:d4:79:
47:8b:68:0e:49:c2:4f:78:76:39:6a:41:89:42:ca:
3f:fa:1e:b5:00:26:af:dd:ae:66:3f:62:01:0b:3c:
95:bb:8e:1a:14:0b:17:8c:05:5b:c6:fa:a5:4d:42:
95:50:0b:ff:3d:74:d3:da:42:47:3f:8d:02:1f:f5:
d5:04:6f:d0:0d:14:45:a5:3e:6e:76:cc:ec:c8:df:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:12:25:12:05:CA:CE:70:7A:26:48:31:49:70:B9:0A:2E:AC:67
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ee:3b:ff:80:34:4f:b4:04:ad:85:4b:5c:69:c9:f1:1d:a2:
c2:0d:2d:03:a8:f2:8f:3d:47:f5:c2:d6:c8:ea:c9:6f:0d:ff:
44:bb:e3:56:44:1a:57:8a:c1:7d:e4:6c:99:ca:16:81:4b:69:
9a:31:4f:b3:42:aa:e7:4c:3c:65:51:98:c2:fd:3a:80:3d:9c:
84:aa:a9:dd:30:7b:4a:30:f2:13:09:33:5d:e9:d7:3e:e8:ab:
92:04:dd:09:78:a9:04:ff:99:75:e4:15:bf:44:da:ad:39:76:
57:92:66:1d:12:db:ab:78:76:e6:8e:eb:f0:6f:31:79:d9:ee:
3d:20:2b:cf:8f:f8:cd:97:7e:19:cc:5b:a0:9e:48:82:51:c1:
dd:ca:05:bf:4d:62:0d:ed:61:08:f0:93:21:36:a0:00:b8:dc:
e3:f7:ca:10:e1:0e:4b:9b:10:30:31:d0:d2:a0:45:de:b2:c0:
ff:8b:26:2b:b0:69:88:6c:65:80:c6:84:fa:d2:80:fc:19:cb:
49:4d:cb:dc:b0:10:cb:9c:ef:5b:7c:38:03:10:5f:fa:0c:50:
88:09:72:48:b6:35:8f:65:c2:22:07:18:48:aa:82:9c:b9:b5:
1d:2f:ff:08:73:65:74:30:33:e1:84:87:d2:08:08:de:5e:44:
38:4b:93:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0FvHPDSZ+UKOp8CoyjBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3
MTQ0NTkwHhcNMjYwNDE3MDUwMTAyWhcNMjYwNDE4MDUwMTAyWjAzMTEwLwYDVQQD
EygwNjI4MTIyNTEyMDVjYWNlNzA3YTI2NDgzMTQ5NzBiOTBhMmVhYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NRxyTsdySOPMMk+MqLsC8HLapkx
nz20yoeVuU/m3LkZBeDlgcBvXo43flCiZmoADswsY+W1m0TVO3syABKpHZVyi5iu
Lc2YL5dEBSRArv4D55tMt8UHdGirKoF41uvQT15chfr+asUyT0x/qpKgoNfJV9ji
AjOf9fIK1iK6VDiEhiE2XMVfzDgSkUPm8ZhSfxz++j95CYmSGn873teR+y40ko3m
7oQw2/dCf4xmZLGd1HlHi2gOScJPeHY5akGJQso/+h61ACav3a5mP2IBCzyVu44a
FAsXjAVbxvqlTUKVUAv/PXTT2kJHP40CH/XVBG/QDRRFpT5udszsyN+qRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYoEiUSBcrOcHomSDFJcLkKLqxnMB8GA1UdIwQY
MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt
OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0
LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe47/4A0
T7QErYVLXGnJ8R2iwg0tA6jyjz1H9cLWyOrJbw3/RLvjVkQaV4rBfeRsmcoWgUtp
mjFPs0Kq50w8ZVGYwv06gD2chKqp3TB7SjDyEwkzXenXPuirkgTdCXipBP+ZdeQV
v0TarTl2V5JmHRLbq3h25o7r8G8xednuPSArz4/4zZd+GcxboJ5IglHB3coFv01i
De1hCPCTITagALjc4/fKEOEOS5sQMDHQ0qBF3rLA/4smK7BpiGxlgMaE+tKA/BnL
SU3L3LAQy5zvW3w4AxBf+gxQiAlySLY1j2XCIgcYSKqCnLm1HS//CHNldDAz4YSH
0ggI3l5EOEuTjw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:18 2026 by rpki-client