Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: VjVn29IFZt4mFzRbMf6ar+CWKtjU5Ju3bmErlE719Qk=
Subject key identifier: 78:49:96:98:92:83:7C:6C:B5:E3:06:28:88:68:22:74:A2:DC:7D:58
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019E1D911E9126049AD9F7692B2A0C9F6B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1919
Signing time: Tue 12 May 2026 19:01:50 +0000
Manifest this update: Tue 12 May 2026 19:01:50 +0000
Manifest next update: Wed 13 May 2026 19:01:50 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: puPP2EEpR7ue6/KJ9E0OM4v+mbDKKj+KTQ+nm04CSYw=)
2: FYE5Q3Mlv51odwTBANvIYF0s6IA.roa (hash: r/sE12BhKzVBtzNy9xBdk9/yYXwH8MFHHau2SN5trWA=)
3: WuVc3nuSKHmp3Zm0YnwHWiUHPTA.roa (hash: kgJdmFJQtmaA3Y3jCaieWqKoWOzHXlfXNx+CHVD0plg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:1e:91:26:04:9a:d9:f7:69:2b:2a:0c:9f:6b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: May 12 19:01:50 2026 GMT
Not After : May 13 19:01:50 2026 GMT
Subject: CN=7849969892837c6cb5e3062888682274a2dc7d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:83:4f:4a:76:6a:a2:ea:ce:a8:f9:16:10:
7b:47:d4:c4:79:b4:0e:b4:fc:82:f7:8a:54:fd:97:
96:64:64:68:a2:c2:c3:48:62:8e:7e:14:f5:02:8c:
77:dc:c8:24:4b:78:6c:a1:7d:e4:c9:5b:b3:63:56:
58:0a:e8:63:4d:80:20:03:99:0e:22:92:59:22:1c:
82:8b:99:29:61:ec:78:a4:91:0a:70:17:c1:8f:f8:
2f:53:ec:d1:4d:c5:cc:44:1c:e1:85:22:fc:ec:0a:
26:11:81:a5:d5:7b:51:52:2c:fb:6b:da:40:6e:10:
c2:2f:e4:68:9d:38:2a:cc:9a:e6:99:2b:7b:76:70:
8c:7a:de:fc:e0:cb:4d:02:a0:e0:f7:f8:cc:00:58:
49:77:51:55:a7:e2:63:0e:2c:8f:16:1f:73:4d:6c:
2f:46:13:85:41:29:05:03:4e:51:01:dd:49:d3:ef:
69:aa:0e:f4:1f:ab:45:23:b8:b0:c1:1d:3b:b9:c6:
83:b6:29:e2:50:1c:0e:c9:c6:22:22:16:53:7a:23:
83:4d:be:c0:2b:c4:f1:56:9a:59:48:f4:e6:7d:1d:
88:7f:79:c7:64:89:f5:84:a2:bc:9e:1b:a4:c4:50:
fa:1c:75:a8:14:f3:0f:d6:fe:e1:09:a6:fd:b8:f6:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:96:98:92:83:7C:6C:B5:E3:06:28:88:68:22:74:A2:DC:7D:58
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f8:9d:92:c9:82:6b:c2:d0:b3:d3:53:a3:54:be:95:01:7f:
f5:f8:11:c7:45:3a:69:30:57:ea:48:24:dc:fc:d0:b2:bc:6a:
fb:c8:35:ea:3b:87:f3:89:b5:14:c7:71:8b:e2:fb:c6:00:5b:
ab:73:7c:24:18:94:9d:2c:cc:98:d9:53:55:0f:5c:69:df:73:
ac:f4:ae:10:04:cb:e4:bf:9b:39:fe:f7:87:9f:63:3a:6b:23:
70:79:83:5a:45:05:ab:82:a1:7a:44:47:df:58:89:30:a8:92:
49:64:8f:d9:36:5c:17:2e:40:c1:d4:10:10:36:74:0b:b8:df:
13:1e:4f:01:64:38:78:71:b8:e8:ad:d8:14:c5:80:4c:a0:5c:
8e:4a:41:12:dd:9e:5a:e2:bb:29:a6:1c:65:df:1b:16:c0:5c:
b4:a6:12:f0:fe:6e:8f:ea:98:f2:32:dc:05:0a:09:7c:ab:3b:
be:21:8d:a2:2a:f5:d3:10:85:ae:03:e4:fa:7a:67:bf:49:39:
a2:71:74:bb:f5:50:0c:00:51:3e:be:0d:76:f6:53:9d:c1:21:
74:3f:47:bd:1e:96:c1:0b:74:45:c8:86:dd:0f:6c:e4:6f:33:
37:2c:35:93:bf:72:4f:c2:16:d1:7e:a7:1b:6f:aa:45:c5:b8:
c8:b4:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:26 2026 by rpki-client