Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: puSTHes0mKRwtrhrEUYLFCWEfSgjzE3fv1PsxGDx9BE=
Subject key identifier: C1:2E:CE:2C:CF:D9:0C:1F:38:D4:7F:78:FA:DE:16:76:17:ED:85:1F
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 019E1F10A67754ACA0B188F01FB54E69D21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 12B0
Signing time: Wed 13 May 2026 02:00:45 +0000
Manifest this update: Wed 13 May 2026 02:00:45 +0000
Manifest next update: Thu 14 May 2026 02:00:45 +0000
Files and hashes: 1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: rlKn58UL10IziJOodNoPUDPrGzl6B/ePbxkuuvW/KeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:a6:77:54:ac:a0:b1:88:f0:1f:b5:4e:69:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: May 13 02:00:45 2026 GMT
Not After : May 14 02:00:45 2026 GMT
Subject: CN=c12ece2ccfd90c1f38d47f78fade167617ed851f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:38:98:3a:b1:e1:d4:17:b8:33:34:59:24:
94:0c:8f:33:6f:d4:b3:c7:bd:fd:36:48:5c:6e:0a:
8b:00:37:81:47:08:6d:aa:06:36:b0:0a:0b:93:4c:
75:5a:16:12:1c:51:87:78:4c:80:f7:de:fe:1d:ea:
d3:c5:72:5f:cd:f3:e6:2a:99:a0:41:c3:82:c8:f7:
f3:16:50:10:75:84:24:4d:24:30:88:8d:65:64:bd:
bc:2c:65:65:51:71:d1:f7:1f:76:9c:9b:7b:73:33:
32:ec:d3:80:98:35:71:5d:3d:16:fd:d5:97:10:4a:
a6:2c:d3:87:b7:9e:2c:0f:11:8d:63:43:5b:06:a0:
e2:6b:19:bf:c0:fd:57:55:e9:f8:35:37:6b:6d:80:
d4:0d:86:e6:ce:f5:41:98:65:5e:f2:5f:72:59:19:
fa:68:d2:a8:6d:ce:7f:ab:70:c4:ea:c3:83:5f:a6:
d8:37:4c:20:0a:fa:78:99:f1:55:68:c2:97:b8:38:
c8:3b:05:b0:26:b4:18:ba:a2:56:93:8d:eb:66:02:
7f:8d:56:d2:fc:ed:7f:c2:58:84:74:4f:26:61:02:
58:47:86:cc:79:27:50:25:6b:04:4e:c7:3f:40:c0:
86:f4:23:9a:ea:59:a2:77:38:30:b7:0e:2d:c7:3f:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2E:CE:2C:CF:D9:0C:1F:38:D4:7F:78:FA:DE:16:76:17:ED:85:1F
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:20:3e:ea:d7:6a:e4:6f:cb:6f:ee:44:ce:ea:7f:65:88:
59:32:cc:4e:56:e3:49:53:63:35:b3:3d:b6:90:cb:df:20:b9:
3f:93:7d:ed:54:59:84:60:14:30:22:f1:92:d9:1e:13:2c:75:
cf:55:7f:3f:11:e7:2b:26:2b:6d:4f:dd:2f:66:ec:78:90:e5:
81:5e:c9:ed:4d:ea:53:88:1f:a9:19:be:da:5e:84:00:06:c5:
c3:5c:6b:e7:ed:fc:bd:54:16:4e:1c:5d:ea:a6:5c:5d:6d:af:
be:65:ca:cc:b5:d5:3c:81:89:95:40:32:c3:14:4f:44:8c:b3:
c6:61:5f:ce:78:ab:2f:e6:f9:30:bc:d4:b0:23:ca:9f:5c:56:
ee:d0:95:63:b9:9d:f2:5a:aa:2f:6d:de:b8:91:71:04:67:8e:
12:07:24:c2:ff:44:11:28:79:4d:59:9d:41:eb:63:ea:64:72:
99:36:7d:5a:43:a1:bd:27:f2:1f:db:b1:b7:59:50:94:b1:9e:
50:30:cb:ad:c7:8a:64:a2:e3:be:6a:4e:db:f5:e2:e6:b3:51:
5b:e1:57:24:df:f2:6e:2d:f5:44:c8:f3:af:92:bd:09:89:0b:
a0:ca:76:67:ea:e8:02:64:46:f2:0d:3c:28:a2:1a:df:31:74:
0f:4d:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:46 2026 by rpki-client