Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: +kxJZomKqR7dQG3wcBdBC41Yn5NWDxHHxoB/q1OWyZI=
Subject key identifier: 33:CD:31:A4:E6:8C:A3:60:65:28:A2:68:6C:FD:94:05:40:8E:FB:70
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 019E1FEC7CD4F51697371FD7B5BF0FDACD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0A05
Signing time: Wed 13 May 2026 06:00:52 +0000
Manifest this update: Wed 13 May 2026 06:00:52 +0000
Manifest next update: Thu 14 May 2026 06:00:52 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: Jx+Wm1qdU1JeqhU0Up7PZNGOJ80hlQULa+phmqtj0mE=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:7c:d4:f5:16:97:37:1f:d7:b5:bf:0f:da:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: May 13 06:00:52 2026 GMT
Not After : May 14 06:00:52 2026 GMT
Subject: CN=33cd31a4e68ca3606528a2686cfd9405408efb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:02:3c:bc:34:c2:b1:2f:a3:66:8f:c4:5a:
8f:33:58:e3:db:d8:42:bf:6c:20:83:91:d1:65:1d:
60:b2:97:ef:e4:88:d2:76:66:6e:b6:31:f4:bc:ee:
77:12:bb:af:c2:2d:0e:78:e5:8b:bb:79:e9:8f:db:
5c:44:42:c9:2a:5a:b0:7f:86:64:02:33:fb:1c:43:
8c:ce:e9:74:94:cf:bd:23:34:ba:e0:17:66:98:63:
f9:b6:8a:8d:c2:1c:27:92:6d:39:08:ac:0e:4c:f6:
f4:d8:08:16:4d:dc:f0:0d:9a:74:0c:55:d3:27:0f:
13:bd:c6:bc:a0:bb:80:be:5c:58:97:3e:e9:e4:6b:
81:d0:0d:55:34:5d:6a:6d:4e:1f:17:fc:8e:92:0e:
8d:d3:4b:01:9e:89:d8:44:17:fa:04:41:0d:aa:5e:
ac:6a:0f:23:28:94:93:07:e8:5f:ef:69:65:0f:11:
54:54:f0:9e:77:5b:52:7e:be:eb:70:4d:7f:95:f4:
62:b5:80:37:3a:39:56:6c:60:cb:9d:02:b9:7c:48:
47:82:46:ea:1d:42:53:bc:b9:94:bc:b6:d9:37:24:
81:8d:85:28:bc:d8:67:1c:2b:15:92:eb:ee:90:fb:
70:0a:0b:86:d4:c9:b0:3d:87:a5:37:90:77:49:b6:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CD:31:A4:E6:8C:A3:60:65:28:A2:68:6C:FD:94:05:40:8E:FB:70
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:56:41:98:c6:a6:c8:33:7c:df:1b:c0:58:7b:bb:6e:b3:d7:
c2:b8:f4:dc:b2:ed:38:e7:8d:75:bc:77:57:a4:6d:c2:ac:9f:
fc:c3:75:7f:29:72:8b:97:14:ed:83:22:56:df:b5:e6:61:e7:
2c:c3:a5:cd:41:48:53:f8:db:e6:47:bb:63:bf:39:70:e1:e9:
0f:dd:51:cc:6c:9e:6b:fc:1f:ae:77:9f:86:17:02:82:fb:67:
24:5c:d2:52:6f:7f:c8:e1:f7:59:e9:54:da:be:6a:f9:ff:d2:
52:a3:08:ba:b8:9b:d7:d6:f4:3a:ea:b8:d5:4f:3c:b1:6e:86:
da:78:54:61:12:d5:b7:43:b7:da:cd:ce:62:80:7c:9e:52:29:
0d:e7:c6:5f:07:d9:20:84:d0:9b:19:b9:f2:7d:d4:50:f3:f6:
10:f4:8b:d8:00:b3:ea:e2:44:46:80:be:85:b2:81:4f:f2:ce:
66:79:63:4a:6a:bf:d2:30:f5:d2:52:0e:b4:97:15:b2:ae:26:
a2:df:9a:73:fe:d8:ca:5b:e2:71:13:88:28:1e:d5:c8:58:91:
8f:3b:24:3a:3e:9b:04:90:ce:01:ee:36:35:ac:50:84:3a:33:
75:37:ef:9e:60:7d:a4:68:dc:a9:ac:db:bb:53:13:17:4c:be:
d9:7c:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:21 2026 by rpki-client