Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: sYo78kFZEFN48Etl9AXUZ4JJGOW8bZSU6/7OVWDvaTE=
Subject key identifier: F5:BC:E7:EB:62:51:87:71:3B:70:98:22:CC:38:C5:9D:00:8A:AF:89
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019E2023B62A56725164B08E857842B10519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 107A
Signing time: Wed 13 May 2026 07:01:11 +0000
Manifest this update: Wed 13 May 2026 07:01:11 +0000
Manifest next update: Thu 14 May 2026 07:01:11 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: xbakQghzbagQPBI6RVUBVzEAh/7nvo2+TgUA3GylSos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:b6:2a:56:72:51:64:b0:8e:85:78:42:b1:05:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: May 13 07:01:11 2026 GMT
Not After : May 14 07:01:11 2026 GMT
Subject: CN=f5bce7eb625187713b709822cc38c59d008aaf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:f3:14:e9:a8:f2:90:33:9b:f2:12:a1:65:
04:bc:97:bc:95:eb:fc:a3:0f:c7:b3:1f:ef:6f:36:
44:7e:75:99:a7:2f:ae:fe:33:cc:1e:5f:c0:82:78:
ac:62:12:e6:9f:21:89:91:6a:41:5d:75:e6:be:c5:
e4:95:4f:c5:01:26:0c:20:1d:cd:0c:9d:d0:77:ea:
3f:76:d0:0f:11:4c:d9:05:90:6e:5e:85:a3:1e:5c:
5f:0b:28:09:c6:56:f7:f9:a3:2b:f5:26:5c:cd:6e:
16:cc:ad:7a:3a:29:d3:b8:f3:f2:bd:9e:dc:1b:4e:
6b:00:c8:54:a1:57:54:e3:d4:d5:e0:64:4a:bf:1f:
32:c4:29:9c:3d:f6:50:68:1f:ce:6d:64:45:eb:68:
d1:e0:ce:9d:6d:78:30:95:ec:f7:a0:a5:21:81:c8:
dd:27:d9:b6:33:e8:5d:a5:f0:93:f8:31:90:64:0d:
a5:15:75:cb:bf:34:43:af:7c:31:2b:4f:6f:8f:7a:
9c:33:3e:bb:77:c5:24:68:9e:58:a3:35:b4:79:58:
2a:23:b6:48:84:7b:2c:ab:ae:bd:3b:3d:a8:60:c0:
68:17:94:eb:63:58:77:30:97:2e:cf:fb:95:f0:c7:
f2:67:0f:75:b4:e5:b2:a7:87:b5:c4:8d:33:74:ed:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BC:E7:EB:62:51:87:71:3B:70:98:22:CC:38:C5:9D:00:8A:AF:89
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3e:cf:46:4c:7f:90:3b:ed:af:e8:ab:36:fe:ac:0f:91:3a:
0d:32:41:d3:b8:32:d9:9a:13:72:79:e6:0e:ec:99:36:a1:32:
6b:c1:0f:4a:35:5c:f3:b1:b4:00:d5:1f:09:85:14:b2:68:e4:
fb:3b:2a:83:4e:50:9a:5a:9c:ec:b4:99:bb:a1:70:61:46:46:
25:50:b0:8a:79:0f:ae:ff:3d:30:81:7e:4e:e6:24:97:0f:c5:
19:6a:1f:d8:11:6e:b8:46:c0:89:5f:bf:eb:d2:c9:37:80:a1:
a5:6a:4b:81:ee:e3:5d:5a:07:d8:8a:b4:01:fa:48:cd:85:7b:
c4:2e:cd:7b:09:cb:40:4d:84:d8:1f:f3:be:5f:43:4b:9e:5c:
c9:ab:0a:ec:35:15:df:f0:d3:a5:86:3c:6e:8f:eb:41:32:9c:
db:fa:ab:d8:42:f3:3e:91:28:ea:c8:bb:89:0c:57:b0:0a:1e:
bf:57:c9:48:51:26:54:e3:06:27:93:44:cd:3b:54:44:3b:67:
0e:1f:77:21:b1:86:6c:1f:9c:45:53:76:3a:a5:00:70:a9:71:
2e:9f:36:62:58:21:cf:cd:1a:ec:e6:a9:f1:10:55:35:92:7a:
29:6d:8d:18:7e:fa:05:55:66:66:42:12:67:bc:63:a0:32:ed:
a7:e9:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:43 2026 by rpki-client