Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
File: fLi4cwN1yShTuZrjr1eXwSPdFQc.mft (raw, json)
Hash identifier: i0mDePUNEXfTMW1TbkTk4sGlMVY4VrDTlRYpzwI6P6o=
Subject key identifier: C3:34:F2:46:AF:93:4C:BC:5F:3A:56:B2:59:B7:D9:C2:36:14:CA:8D
Authority key identifier: 7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
Certificate issuer: /CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Certificate serial: 019E1EA2AA03D5682997A1780936F055F9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
Manifest number: 132E
Signing time: Wed 13 May 2026 00:00:37 +0000
Manifest this update: Wed 13 May 2026 00:00:37 +0000
Manifest next update: Thu 14 May 2026 00:00:37 +0000
Files and hashes: 1: M39X3O93meXiYEZMdDY1T4wsyVE.roa (hash: eG1u14rPe8MIz7sm8dVuxE9spwX9dFAUZNpT/Ys6fi4=)
2: f95OM8NcoOZXSRzDeGxPVA2Zw_o.roa (hash: 1YBKV57aXgzHn2Rt1P5Y2ZBSmwKVR2wirj1B4cjqRz4=)
3: fLi4cwN1yShTuZrjr1eXwSPdFQc.crl (hash: r32GQna6DCQ5WrOSHjduJvYGr75z/U8amSu0lH/rohc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:aa:03:d5:68:29:97:a1:78:09:36:f0:55:f9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cb8b8730375c92853b99ae3af5797c123dd1507
Validity
Not Before: May 13 00:00:37 2026 GMT
Not After : May 14 00:00:37 2026 GMT
Subject: CN=c334f246af934cbc5f3a56b259b7d9c23614ca8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:91:0a:e2:d5:ba:f7:ca:d3:57:ef:ec:4c:
f8:c1:e0:4c:b3:2f:f8:ca:fd:87:b3:11:7c:96:7f:
ab:06:f5:de:73:05:7c:3f:b4:33:8f:9f:35:c2:91:
c6:c5:1e:dd:b2:82:96:29:c0:d6:5d:69:54:4d:f9:
37:ea:99:e7:84:0a:aa:27:70:5a:cd:36:70:39:08:
00:87:fd:29:9a:a7:9e:1c:02:47:a3:ec:71:80:d1:
ca:55:4a:4a:06:d3:c9:19:2b:f6:67:e6:5e:f2:10:
93:50:8f:6a:85:37:7f:e9:37:86:1b:7b:e6:52:cd:
37:54:7f:d5:cf:ee:9d:d8:42:19:3f:88:fa:42:0b:
ee:a3:2f:67:b6:d1:c5:97:6b:57:01:d1:6f:72:3c:
7c:5a:f2:93:3b:da:24:0e:91:39:d1:a2:90:97:73:
2a:cd:ad:89:26:9e:55:1a:9c:19:57:8e:98:ac:09:
10:5e:e8:ec:3f:7a:e7:b7:aa:fc:37:66:f1:45:24:
5f:33:58:0e:a2:df:12:a3:6d:e3:45:04:89:09:bc:
3e:18:51:3c:c9:25:f1:2c:80:90:12:d2:0a:2e:48:
4f:b8:90:ae:25:b6:4e:94:b5:31:14:38:43:6f:9a:
7b:9f:ca:32:4c:13:91:3b:5d:8d:b6:be:bb:7b:f2:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:34:F2:46:AF:93:4C:BC:5F:3A:56:B2:59:B7:D9:C2:36:14:CA:8D
X509v3 Authority Key Identifier:
keyid:7C:B8:B8:73:03:75:C9:28:53:B9:9A:E3:AF:57:97:C1:23:DD:15:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLi4cwN1yShTuZrjr1eXwSPdFQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a9ced2-3fa4-46ed-88e0-38411a312d86/1/fLi4cwN1yShTuZrjr1eXwSPdFQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:8b:0b:83:e8:4c:f7:52:3a:03:45:63:27:c9:6c:be:15:
a6:7b:ae:d4:1a:89:21:ef:c7:52:57:53:98:d7:7f:ba:54:da:
1f:03:41:36:ac:48:82:fc:a4:b4:81:a9:de:72:2f:55:06:0d:
81:e3:a8:9a:e9:1a:be:05:02:5d:f3:9f:f5:af:95:51:92:61:
07:84:85:0a:31:cf:01:82:de:da:bd:e4:55:40:23:46:0b:d6:
50:a6:d2:b9:ca:0e:41:cf:bd:06:f7:93:ed:a7:fc:fa:9a:4e:
02:b1:b1:f2:c2:89:84:e9:68:35:63:49:b5:dc:f0:c5:dd:af:
cf:44:f8:65:79:e9:3c:0c:45:28:d3:23:0c:4d:0f:de:05:bc:
8a:78:b4:27:d8:49:b9:78:cd:b8:69:3e:38:c7:41:f5:1f:ba:
64:77:d2:a2:fb:66:33:01:4b:b6:a2:48:7d:19:19:84:44:a7:
fb:e5:e4:44:f4:db:34:b7:ba:11:bc:f3:a0:18:c6:ef:f9:6a:
85:86:f3:98:a5:1b:bc:7b:91:94:ae:d5:90:47:ad:ed:07:dd:
47:f2:0e:d8:cd:97:4c:83:57:cc:38:b1:73:11:e2:7b:e6:09:
2c:b4:69:6a:45:b5:72:84:8a:d7:ec:90:70:2d:00:0b:6e:10:
f3:5b:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:34 2026 by rpki-client