Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: GCPobw3+jz9xbOoFkowoP+K8uQugyyXV3d3LzocDtTk=
Subject key identifier: EE:E4:2C:6B:55:16:91:38:26:A5:2F:A6:9F:48:6F:8E:EC:EE:01:E6
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 019E1D901F4C1B535BD7517DB3297549B237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 19:00:44 +0000
Manifest this update: Tue 12 May 2026 19:00:44 +0000
Manifest next update: Wed 13 May 2026 19:00:44 +0000
Files and hashes: 1: T4BJnDBfE6AyBSAWAjPZ1GzLlMM.roa (hash: SXBhd3/vnyIoPB/kDRi62FVnMbysfno7J5T9Eftc8tY=)
2: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: 4mph4e7h3QzAa1GYGPOM6eph5+Sb4+MLx/O8hSHHCLM=)
3: tSpDrZGtdp0mH1aXKivR6nDrhuY.roa (hash: xkSEr+C7WhhCLocSo1zhSLhZi6gcFYi1jnV4sR3gnUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1f:4c:1b:53:5b:d7:51:7d:b3:29:75:49:b2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: May 12 19:00:44 2026 GMT
Not After : May 13 19:00:44 2026 GMT
Subject: CN=eee42c6b5516913826a52fa69f486f8eecee01e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:f4:f0:71:46:95:15:fa:8b:5c:9a:c1:56:7b:
96:8a:7c:a3:ca:73:b4:1d:75:db:5e:89:0c:48:96:
35:16:1f:65:8d:7c:45:87:34:1c:ea:a7:52:87:05:
58:53:43:4b:e4:69:3c:79:11:0f:50:60:1c:71:a2:
a6:34:a5:bd:b3:11:5e:ab:af:3a:ae:bf:99:6a:6b:
23:29:72:0c:0e:b2:30:52:03:17:c6:0e:44:b5:a6:
63:d6:0f:4a:18:b2:9e:9d:e7:2c:c4:b1:c9:81:4b:
91:66:a6:aa:ef:c8:2a:ed:79:90:3e:a9:67:27:8e:
0c:83:7a:ed:91:ca:e9:a4:29:bc:9a:97:a0:76:88:
4b:4f:d6:c7:fa:1a:26:5b:05:28:32:5e:3e:17:83:
0b:63:86:41:48:d3:68:66:6f:0f:b6:c6:3e:01:66:
33:ef:fb:67:be:37:86:40:06:05:ab:2a:1a:c3:b2:
6c:f2:61:5f:53:42:d2:d7:78:fd:e6:a0:7d:bb:0e:
1b:99:c6:09:90:d2:38:12:57:00:b8:0b:ef:12:0e:
39:4c:83:e9:80:09:6f:3f:47:b1:77:d8:a5:74:98:
f3:0c:4e:1f:eb:a0:0b:f3:e3:7c:5e:71:69:f6:e3:
44:6c:e3:1a:f9:f3:64:18:29:26:e1:e6:6d:c6:45:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:2C:6B:55:16:91:38:26:A5:2F:A6:9F:48:6F:8E:EC:EE:01:E6
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:ec:de:c0:63:1b:25:56:22:b6:eb:9e:56:34:61:34:55:
a7:fc:3d:b2:36:c4:32:be:67:50:7a:44:a7:45:56:df:4e:4f:
18:aa:80:0b:63:ab:56:4b:91:d0:98:c1:77:06:b2:4f:48:55:
e7:89:c4:1f:b2:04:ed:cd:21:02:8b:32:8e:10:86:07:f4:02:
b6:96:ed:31:3f:8e:b9:c0:87:09:7e:48:7a:f3:ae:72:0c:b0:
40:53:fd:67:07:81:dd:bd:59:fb:37:28:95:82:36:42:6d:ff:
41:bf:94:41:de:38:0e:84:f6:c2:f4:51:80:23:d5:9b:4f:2e:
8e:59:5d:41:08:7a:5c:2d:1f:24:a2:c6:cf:22:c1:72:1c:e8:
33:7b:fc:11:40:f8:24:b0:f0:f4:2a:38:1a:47:48:3f:2d:25:
9d:14:de:02:a7:d8:79:b9:cd:dd:ea:86:a7:8d:78:99:61:04:
31:07:bc:6c:78:75:d5:51:db:88:f2:95:21:09:d5:59:10:46:
5d:09:94:9e:5a:97:bc:5f:f1:f1:8c:d5:34:47:c2:8f:26:59:
16:12:5e:e9:da:a0:02:6b:49:00:fa:d3:54:6b:89:94:e4:20:
4b:c5:2b:2b:66:e9:58:41:9a:78:a6:ba:ba:1a:4e:3f:86:3f:
2c:fa:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:41 2026 by rpki-client