Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: rQMg+6L5vjijNfHvTK10RsO6faj3zlVAtVYetGpR34Q=
Subject key identifier: 7A:2B:BA:E4:43:24:66:5D:DB:79:DC:4D:1E:92:97:94:62:9C:8B:58
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019E1ED9DBDCFDECEA46423708AC8EADA4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 0560
Signing time: Wed 13 May 2026 01:00:54 +0000
Manifest this update: Wed 13 May 2026 01:00:54 +0000
Manifest next update: Thu 14 May 2026 01:00:54 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: f6oTgVRZDpC8egT8B47XoS/W5Zixg+PhajxenDg+5Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:db:dc:fd:ec:ea:46:42:37:08:ac:8e:ad:a4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: May 13 01:00:54 2026 GMT
Not After : May 14 01:00:54 2026 GMT
Subject: CN=7a2bbae44324665ddb79dc4d1e929794629c8b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:2a:8c:86:c4:79:50:09:cc:08:4f:38:08:
d0:98:2c:a5:89:84:1a:bf:cc:26:ce:df:ec:44:c3:
51:4d:e3:4c:4c:1f:c9:f4:10:81:12:a4:55:63:53:
3f:e0:00:7e:79:7b:a7:2e:31:75:b4:ee:4d:a2:0b:
3c:dd:c0:d4:9f:d7:bc:7e:36:8a:2e:6e:5c:44:86:
be:74:df:10:f6:f7:3c:3b:3e:c3:1d:ba:7a:20:5e:
dc:c2:ca:44:81:a4:f7:e3:87:b7:f4:e7:04:ea:da:
14:e0:cd:c3:fa:63:13:2e:eb:19:cb:99:58:27:ad:
ea:09:e0:ce:89:8b:0f:69:16:7c:ae:00:18:df:3a:
de:2c:a1:8a:30:9c:71:f7:71:38:47:a7:b6:55:86:
e8:dc:a3:14:ff:8b:dc:21:62:e1:ac:b7:dd:9a:4c:
e2:a8:2a:d5:e0:75:87:70:f0:b8:5d:4b:eb:ff:27:
5d:b4:ae:08:aa:bb:ad:ef:01:bf:87:8d:7b:29:ba:
9c:ad:ef:d3:e9:87:b0:5d:7c:d3:81:82:07:8f:a1:
e1:79:be:19:36:1a:6e:cc:9f:15:10:fd:35:e2:5a:
49:94:af:90:31:01:da:d5:bf:9a:43:24:24:7c:24:
6f:56:9d:55:b2:70:bf:b3:d0:26:c5:88:47:2d:1d:
37:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2B:BA:E4:43:24:66:5D:DB:79:DC:4D:1E:92:97:94:62:9C:8B:58
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b7:e2:51:fa:cd:88:95:98:d6:c8:d4:d8:12:0d:8d:4b:8b:
f7:44:32:c8:75:43:1a:7c:0a:af:40:66:97:59:b8:04:9b:53:
da:9c:f7:49:a7:05:d1:cc:58:5d:57:d3:e3:e2:e0:df:0d:96:
3f:89:53:27:f7:9d:01:77:92:7f:e5:1e:3f:19:10:db:fe:c0:
c0:0a:81:1b:dc:9f:38:83:85:5d:b1:1a:f2:3f:a9:ac:2d:39:
f3:5c:f1:b4:4c:cf:2b:68:96:23:8f:41:c0:80:76:a5:73:d5:
3d:39:69:e3:11:44:d3:51:bc:34:58:b3:71:48:ee:92:47:96:
5b:f7:d7:73:2e:93:86:71:95:b4:8d:d6:5e:78:c3:a3:ed:c2:
03:ed:61:e1:01:60:b7:cb:c3:dd:2a:f6:9a:84:48:b1:37:11:
87:7e:0a:18:a3:04:e2:36:b0:3b:03:91:51:60:36:53:b2:04:
79:e5:a2:33:33:6d:fe:ba:72:0e:e3:ea:49:b7:f6:d5:c0:e5:
b9:43:40:61:6b:a6:68:f9:56:d6:23:36:3d:0a:9e:d5:0d:6b:
24:64:b7:9b:f5:e6:2f:f6:62:35:a4:69:e9:6d:f9:c6:13:ae:
9e:76:fd:f3:d3:65:f5:b1:a5:cf:9e:f4:c3:93:36:b0:fb:6f:
87:1b:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:10:39 2026 by rpki-client