Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: f+b2KTQFx+Ljvs2QVD7Sf7hW9kEvvFD2ItHnl2IosIw=
Subject key identifier: F6:FD:C4:16:DE:9C:AE:99:59:71:F8:03:BA:F1:A3:83:C9:89:06:3C
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019E1DC7920C15FD2D77CA58AD344C15731C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0FD7
Signing time: Tue 12 May 2026 20:01:18 +0000
Manifest this update: Tue 12 May 2026 20:01:18 +0000
Manifest next update: Wed 13 May 2026 20:01:18 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: YMFmlqudCubZFX5DAxtlOOsjQZjwdQ64xaC1WLO1LWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:92:0c:15:fd:2d:77:ca:58:ad:34:4c:15:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: May 12 20:01:18 2026 GMT
Not After : May 13 20:01:18 2026 GMT
Subject: CN=f6fdc416de9cae995971f803baf1a383c989063c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:d9:78:f2:9a:9d:69:74:de:50:b0:9f:16:
ee:7d:98:73:42:04:b9:31:3c:53:01:7d:8b:7d:72:
d3:54:0d:ee:40:17:81:0d:5d:9f:31:1b:8f:a1:fa:
88:1f:78:df:ce:6b:a8:aa:0f:6f:b1:88:b3:8f:21:
55:09:c8:a8:c5:3d:d2:54:f4:ca:a0:e6:9d:eb:1d:
bd:32:73:8f:db:e5:50:16:d0:34:47:a7:0a:b2:c1:
d9:e5:7a:f8:91:3d:63:92:39:2c:c0:e7:c1:31:30:
dc:91:61:0d:d2:53:12:21:b0:88:a7:93:1f:70:52:
11:f6:d6:cd:6b:d4:5b:d0:ca:43:5a:66:9c:61:76:
33:4f:e9:20:a0:55:62:d3:5d:14:61:ca:e1:92:6a:
96:02:8e:24:35:1c:56:f3:e8:e6:7b:a6:36:8f:fe:
b6:5d:72:2b:ad:d8:f7:9e:fb:00:18:ad:9f:2a:fa:
31:65:e5:69:78:d3:7c:10:8b:9b:9e:c4:d5:08:27:
f3:0e:8f:49:3a:fd:55:3f:2b:f8:b1:b4:2a:37:6e:
62:13:6d:86:7f:a9:8d:be:a7:87:14:ac:78:3a:00:
64:6f:28:d1:c7:43:2e:e9:d5:97:4d:5f:04:f2:60:
41:e0:23:6d:99:28:2e:48:4b:3c:f6:23:cc:8a:d7:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:C4:16:DE:9C:AE:99:59:71:F8:03:BA:F1:A3:83:C9:89:06:3C
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ed:e9:3e:f3:25:d7:89:5b:bd:8e:c2:75:61:20:3a:c5:82:
c5:a5:55:4b:70:b2:e3:f7:b4:62:b8:0c:d0:c4:ae:7d:f0:04:
9a:19:44:d0:dc:24:05:11:27:ee:c2:05:25:f7:9c:d4:c7:bc:
d6:c2:5c:ea:59:a0:95:67:b6:9a:8d:fe:dd:ed:37:d9:5e:1d:
87:00:a0:5e:7b:d4:41:74:f4:7f:bc:bb:bc:79:47:9f:13:ad:
66:8d:01:18:3d:34:86:d0:88:65:2d:29:13:e0:66:f8:97:f7:
8f:2a:07:aa:c7:c3:fc:2a:90:9b:9d:c6:91:5d:4c:f0:01:0c:
80:0a:76:37:f9:32:c3:03:a3:e8:27:7f:48:71:ab:f8:f1:2c:
f6:f3:57:3e:db:9a:ea:51:7e:53:e1:e5:e6:2c:47:d0:b5:db:
37:8b:0d:49:b3:7d:7c:cb:b0:5b:28:c5:b7:72:c4:c4:d6:de:
ea:5f:45:63:89:d6:7d:d3:43:bc:c2:c9:e1:47:33:4e:99:cc:
36:fb:5f:00:d3:c5:d0:42:30:71:c4:4e:e4:1f:d8:a8:33:0b:
c7:bb:4e:1d:3a:f2:6c:62:98:7f:0d:33:3e:e5:b3:56:7b:77:
d1:59:ea:b8:74:2b:31:b0:ad:7c:7e:07:ed:11:57:69:84:07:
04:9a:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:29 2026 by rpki-client