Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: DX/de/m+dhSfJHoskiNu3GuYq1Ra5ghjoDePonzLxbQ=
Subject key identifier: 62:0F:87:02:63:97:63:21:FE:AE:6A:0C:1A:EA:4A:62:FB:60:85:FC
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019E1F481B145DED1FF19B73ECD81956FB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:01:19 +0000
Manifest this update: Wed 13 May 2026 03:01:19 +0000
Manifest next update: Thu 14 May 2026 03:01:19 +0000
Files and hashes: 1: 4g2KoICvRhAlF5rUzbxNV7SMp8U.roa (hash: Ctanikf8U9Sdy0xnpwf0T9RlsG+za8SDalPfgQYX/Y4=)
2: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (hash: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc=)
3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: id3fJIFBdfBLguv58Z8L176QczIkdA8F5Z58nOwaMgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:1b:14:5d:ed:1f:f1:9b:73:ec:d8:19:56:fb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: May 13 03:01:19 2026 GMT
Not After : May 14 03:01:19 2026 GMT
Subject: CN=620f870263976321feae6a0c1aea4a62fb6085fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:13:f7:16:d9:5e:5d:1f:f2:2a:e6:06:b3:
bc:d6:41:ad:dc:06:56:8e:e1:c8:b6:01:ce:27:46:
16:27:7a:17:61:dc:9f:59:89:ce:61:d5:40:a4:34:
3e:88:4a:91:21:e9:cd:ab:90:6d:b0:97:81:ac:a4:
b6:40:d7:31:50:89:dd:17:0c:e3:ca:a3:52:50:a0:
0c:b4:66:45:26:27:77:06:09:8c:e5:b4:0d:de:c5:
eb:f5:21:1d:30:42:47:35:5b:fb:27:e4:1e:df:3d:
ec:82:2c:a8:ca:50:6d:46:2e:ec:90:e2:9d:b8:ad:
cf:5c:6e:cb:cb:dc:e6:48:fa:0b:e9:b4:49:3d:1c:
c5:33:01:3b:0c:03:32:76:98:e8:b6:e1:cd:9f:d0:
56:a4:1b:17:58:50:90:91:b4:20:14:b2:65:b5:94:
c3:25:14:cb:63:b1:2a:4a:93:9b:04:cb:ee:2d:0e:
18:10:ec:e6:88:6b:7a:b2:cb:3a:14:d0:7d:d2:b6:
b2:d1:f8:14:82:8a:2e:ec:f5:c6:cc:f6:94:04:a1:
8f:a9:7e:2c:e4:20:cb:61:5c:1c:30:36:22:a1:d2:
e9:e4:0c:11:7d:b9:f2:c9:5d:35:5e:79:33:33:ef:
31:34:a1:80:be:47:5c:05:e6:b9:ef:ac:77:db:25:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0F:87:02:63:97:63:21:FE:AE:6A:0C:1A:EA:4A:62:FB:60:85:FC
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:72:a0:97:0e:44:dc:0d:4a:13:a6:14:2c:93:9a:3b:0e:6b:
7d:50:37:8b:f7:eb:3c:3f:06:a8:e5:4b:96:ec:c8:63:7e:af:
4a:1c:70:81:d9:f9:25:33:cd:d4:65:ec:6f:54:4c:b3:1b:e0:
24:72:bf:af:01:2b:bc:d6:94:05:e4:89:a3:f2:64:20:2b:4b:
b2:60:44:e9:6d:c0:09:51:8f:63:2d:f6:bf:ea:38:ca:d0:c2:
4e:b8:84:3b:c6:4f:53:dd:9f:58:00:8a:07:55:50:06:27:55:
07:64:9a:8d:6d:66:7b:39:c0:5e:c1:7c:6c:9f:23:55:84:47:
3b:c2:bb:29:5a:36:f0:11:a0:c3:79:c9:ca:34:93:5d:f7:43:
52:1e:da:c1:f7:1f:fa:b6:5f:ec:8c:fb:b9:56:52:18:86:a8:
ab:69:a5:eb:cf:b1:81:28:52:0c:44:b8:15:da:a8:a2:59:e3:
c6:4f:31:12:57:8d:24:09:d9:44:89:94:c3:15:db:0a:8d:1c:
e9:cb:5b:a6:11:11:06:1c:d2:30:8f:4d:93:87:04:03:66:7d:
22:2c:01:a9:d2:26:15:7c:a9:de:58:b4:56:92:68:36:36:ab:
87:54:18:f5:ef:d0:36:c6:e2:80:f1:6a:a5:a4:cf:cb:4e:92:
c0:00:1d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:49 2026 by rpki-client