
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
File: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft (raw, json)
Hash identifier: roFWyHTF3aatXC/3MzNu9uYoUuGzBKNjjlrTp2u6Zew=
Subject key identifier: FC:51:EE:87:3C:80:6F:BA:0E:1A:5B:D2:AA:8C:DF:5E:B8:94:F4:F4
Authority key identifier: D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
Certificate issuer: /CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Certificate serial: 019E1F480AF14F65111A23322DEC76ECEDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 03:01:15 +0000
Manifest this update: Wed 13 May 2026 03:01:15 +0000
Manifest next update: Thu 14 May 2026 03:01:15 +0000
Files and hashes: 1: 0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl (hash: RpZ4JNQbmig8aLvajDItcYfMOTT95zfl9vV9xufU87U=)
2: qB-yYmmoZAETKywXU4O90SMz9p4.roa (hash: zSfrh0GvpLorIoRjiLIdctGLnu0vrYxfcdrku/RI+Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:0a:f1:4f:65:11:1a:23:32:2d:ec:76:ec:ed:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2702a3b27ce9bd04ddca28c21d9d0f5ff32a909
Validity
Not Before: May 13 03:01:15 2026 GMT
Not After : May 14 03:01:15 2026 GMT
Subject: CN=fc51ee873c806fba0e1a5bd2aa8cdf5eb894f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:39:bb:b8:e8:72:dd:ea:18:fc:35:80:6f:
31:0b:f2:c1:a2:68:5f:af:2b:88:ca:0d:c6:9e:19:
26:1f:32:5f:c1:55:c0:0d:63:bc:3d:f3:a8:3d:07:
86:07:27:ab:7a:7e:59:ce:82:e5:1f:2f:3b:22:77:
3c:1c:b5:ba:3f:93:7c:e0:ad:5d:77:c2:a7:af:9a:
53:b6:80:3b:15:fe:7b:a1:92:4e:3a:e8:29:6f:8d:
ab:81:56:10:08:cb:69:1e:2a:be:41:e4:6f:61:b4:
50:e0:c7:fa:d5:e3:bf:94:ec:a1:ce:ab:0a:20:f9:
98:73:59:0c:06:a5:a0:6e:3d:79:7f:65:13:63:d1:
b1:04:56:c9:05:43:c3:e6:17:ea:f9:2f:06:aa:87:
4f:b9:c1:11:23:fb:dc:38:9c:b0:7d:90:db:e1:d3:
56:81:2e:f7:96:58:ca:b5:f5:17:cb:9c:05:c0:56:
28:a8:01:98:2b:bd:55:fe:ce:27:af:64:10:2e:fe:
af:2b:f1:00:dd:c3:8a:1f:63:d1:d5:a9:0b:86:ff:
12:84:a5:94:e2:00:b5:f9:e1:17:41:be:7a:7d:89:
7e:3e:5c:09:06:5b:3e:05:47:f1:0c:16:41:37:89:
5f:34:a3:66:dc:e6:e6:82:77:c5:13:65:8c:1c:eb:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:EE:87:3C:80:6F:BA:0E:1A:5B:D2:AA:8C:DF:5E:B8:94:F4:F4
X509v3 Authority Key Identifier:
keyid:D2:70:2A:3B:27:CE:9B:D0:4D:DC:A2:8C:21:D9:D0:F5:FF:32:A9:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/49f528-e72f-4da7-902e-6975cadb2262/1/0nAqOyfOm9BN3KKMIdnQ9f8yqQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:33:ac:24:a8:32:24:51:5e:d4:c6:30:3e:b5:08:22:00:d5:
d3:54:d7:d1:0e:fb:14:fd:98:26:69:bd:f0:78:70:4c:fa:72:
e1:d6:dc:14:2e:db:48:7a:dc:b9:8c:f7:2a:a9:91:a7:ab:53:
13:b5:83:0b:bd:6c:b8:b7:23:46:5a:5a:cf:a5:99:f4:6f:6b:
a6:90:a9:af:9e:8c:6d:fd:66:32:9c:1e:60:c7:c2:26:88:d0:
41:31:ef:73:69:47:4a:af:d3:d0:ee:de:c3:ba:5a:e8:a6:7f:
69:a7:1d:b9:67:e3:9b:e1:23:7c:93:9f:42:6d:0a:76:fb:f2:
b8:dc:0b:08:32:ed:32:69:e6:2f:27:d3:40:70:98:ec:1a:3b:
bd:b6:52:0a:74:e1:f9:07:78:10:63:11:3a:41:69:c6:7a:5a:
ae:0e:ae:88:c9:78:e3:dd:f5:f5:3f:6b:d3:f1:b5:57:ed:7d:
8c:41:8d:9b:df:67:31:0b:88:5a:71:5b:76:c2:c8:32:5c:78:
7e:63:9e:b3:73:c0:67:9b:f0:bf:65:0b:52:ef:d7:f1:cc:1c:
23:f4:d5:6d:01:65:b2:76:00:e6:c2:ff:40:1d:20:08:ea:1b:
03:88:d0:44:05:71:bb:51:1f:48:dd:d9:a5:83:98:77:6e:e2:
3c:6b:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:21 2026 by rpki-client