Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: qLGEGRQ0p+kDfcqn4ylF/iFflaAa/HOPHU+tfFfngyA=
Subject key identifier: 51:64:46:2D:53:68:69:C0:C2:A2:D3:13:29:EE:93:3B:3D:CD:BF:1D
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019E1D59B5B25276EBBE6B7BB5C7CCCF7C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1601
Signing time: Tue 12 May 2026 18:01:18 +0000
Manifest this update: Tue 12 May 2026 18:01:18 +0000
Manifest next update: Wed 13 May 2026 18:01:18 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: JSJpvrD9O5snkkcEZ0bxuAidY+0deqyStgmbbMTFQuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b5:b2:52:76:eb:be:6b:7b:b5:c7:cc:cf:7c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: May 12 18:01:18 2026 GMT
Not After : May 13 18:01:18 2026 GMT
Subject: CN=5164462d536869c0c2a2d31329ee933b3dcdbf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:85:9c:d7:cd:7b:70:30:d7:d5:57:c3:87:
23:c0:3f:f5:be:61:70:91:cb:90:80:4a:22:93:47:
ee:5f:c3:fa:b6:c5:a3:40:ea:79:41:9c:88:96:bf:
7f:6d:9b:65:8b:f5:7c:d6:49:e9:68:03:c9:81:1a:
65:7d:8f:37:4a:56:b7:73:f5:43:cb:0a:3e:81:6d:
d0:81:1e:1e:ac:f8:a3:cf:cd:c7:63:91:b0:1b:26:
55:cf:2d:6e:64:21:34:3f:c8:af:21:85:bf:b6:1a:
8e:d3:6d:a8:87:63:78:cd:3c:59:36:52:78:67:e1:
34:55:74:f6:64:c2:14:63:2a:7e:41:32:9a:f4:d6:
88:b5:df:59:0a:53:95:99:7f:84:46:b2:7f:8d:7f:
69:22:98:3e:4d:39:e9:17:67:0d:ab:12:6f:4c:ed:
13:44:3d:1c:4f:20:b9:6c:03:b7:e6:37:39:ab:a5:
db:09:73:69:c4:68:cf:be:83:ad:de:45:0a:25:5c:
f2:e1:1a:15:0b:d3:16:8a:a0:bd:c3:cc:e9:b6:6e:
a9:da:38:15:9d:de:22:4f:bc:07:44:89:23:8c:66:
48:b4:b6:ea:fe:66:eb:fd:b2:c4:6c:4a:eb:14:aa:
ff:b6:33:1e:9c:b6:af:56:3b:a2:c0:4f:77:b4:ff:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:46:2D:53:68:69:C0:C2:A2:D3:13:29:EE:93:3B:3D:CD:BF:1D
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d3:f1:f2:45:dd:9d:3a:af:f3:a2:b8:2e:34:b9:e0:e4:b4:
4c:7d:06:bd:1a:b0:31:9c:67:6f:ad:69:e1:d5:66:f5:66:da:
87:72:b0:20:15:80:f3:5e:8c:bb:d6:98:a4:49:75:f1:3b:a9:
be:40:e6:49:e9:66:49:3b:fd:a7:ff:88:f7:64:5a:30:f0:2b:
f3:55:34:e8:8a:73:c6:43:25:11:a7:10:56:e0:27:c0:1f:23:
a2:f1:2a:55:3d:cb:6f:d1:77:ef:8c:fd:3b:06:bd:1c:22:6f:
af:08:61:59:e7:b0:9d:fe:15:0e:c0:04:88:80:98:f4:39:62:
38:59:75:28:68:82:5e:c9:d0:4b:2a:e6:39:f5:fa:7c:46:58:
cb:e4:ff:f0:c5:50:58:0d:6d:8f:18:35:4e:a2:3d:cf:df:02:
fa:3d:3e:73:52:33:0b:73:d8:b1:3e:07:5f:fb:1a:34:6b:da:
5c:9a:c7:1f:bb:49:77:10:a7:83:74:07:c7:5e:9e:af:0e:13:
39:8f:9b:30:a7:28:75:6b:f0:c6:c6:1c:12:ad:4f:42:19:24:
1e:be:3e:7b:f8:2c:24:8d:3c:2d:83:28:4b:d8:b8:60:9c:e5:
37:70:42:ba:f9:87:e4:12:d1:d6:e0:d6:68:f1:f3:3f:50:9f:
9f:47:ed:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:36 2026 by rpki-client