Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File: aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier: 7ZfS1HCW+QYadQveP2bwNgSvuQKH2FGO+dwrsxjRXqE=
Subject key identifier: 5F:39:6D:9D:96:58:8A:AC:42:A7:7A:3D:CC:62:FC:A9:8C:FA:91:1E
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer: /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial: 019E1E35BE3952002849B5C4B9E12C6C2A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number: 0A64
Signing time: Tue 12 May 2026 22:01:39 +0000
Manifest this update: Tue 12 May 2026 22:01:39 +0000
Manifest next update: Wed 13 May 2026 22:01:39 +0000
Files and hashes: 1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: 5hWmwAW4Lin5PMCkbKNxTxKZjuFYxEFGBabtbEjdirc=)
3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:be:39:52:00:28:49:b5:c4:b9:e1:2c:6c:2a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Validity
Not Before: May 12 22:01:39 2026 GMT
Not After : May 13 22:01:39 2026 GMT
Subject: CN=5f396d9d96588aac42a77a3dcc62fca98cfa911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:8e:11:88:cf:b6:25:3e:84:e9:a5:e7:fb:
0c:fd:8f:b5:8a:34:ec:6e:4d:4c:74:c4:3b:b3:60:
5d:c9:2c:7a:da:33:c0:b4:2f:93:ac:10:5e:a1:91:
74:a0:9e:15:11:c6:8a:2c:f3:7c:f7:87:17:aa:51:
28:52:5a:22:45:2c:6a:c4:cb:3a:d8:c1:a3:72:41:
bd:c6:a4:3c:96:1e:06:6b:1e:e0:4d:61:71:c5:ec:
66:d9:25:a5:16:e9:01:bd:87:6f:91:63:89:2c:e6:
57:87:e7:7d:4a:7b:5e:f3:ae:01:1b:e6:9b:6c:5b:
0c:6d:4d:45:6b:7c:24:25:1d:d8:a3:8d:aa:42:76:
21:96:cd:14:37:bf:30:af:d5:e0:3d:9e:ff:8c:a4:
48:8f:3d:5e:53:c9:b9:58:53:14:d7:d7:88:1f:be:
30:7f:e5:ea:05:36:74:cf:4b:a7:92:4f:ec:ab:ca:
80:a3:b4:15:ac:41:cd:fd:24:02:e6:cf:ab:b4:ec:
7c:a7:aa:74:f8:43:be:85:f1:31:5f:64:a5:08:e7:
92:44:63:4d:a9:b3:2a:5d:d4:c2:57:3b:b0:7b:89:
ee:26:11:f8:17:57:01:63:e9:03:c9:f5:f5:f5:2d:
d6:24:d8:de:b8:e7:10:9a:62:d3:dd:97:a9:53:64:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:39:6D:9D:96:58:8A:AC:42:A7:7A:3D:CC:62:FC:A9:8C:FA:91:1E
X509v3 Authority Key Identifier:
keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:71:3d:2b:f4:dd:38:5c:8d:1a:00:03:2a:5d:48:2b:7a:2a:
88:3c:ba:5c:02:87:f4:6f:85:e0:31:16:c1:2b:3f:1a:4b:f0:
56:cd:7e:c4:2b:3f:6f:05:2b:c0:a7:f1:12:cd:6e:56:0a:28:
af:17:7d:37:df:50:61:9b:b1:e2:d8:e1:e5:41:45:83:95:05:
e1:6c:58:46:c1:38:6e:7a:8a:60:95:8e:00:9b:a1:13:88:82:
53:93:d6:3b:b4:85:a7:d2:21:27:d8:23:e3:d8:41:ac:c5:d1:
bb:ad:2b:0d:c3:b7:49:f3:30:30:91:1c:c8:7c:75:de:d6:f4:
61:ac:96:2f:dd:34:55:53:12:37:ff:e0:1d:38:6f:5f:2d:ec:
dd:c2:72:a1:3c:fa:d9:f2:bd:4e:59:0a:b6:d1:af:32:12:7b:
27:9d:fc:26:33:79:a2:dd:60:37:30:f7:7e:20:e7:c2:20:27:
8b:67:d1:06:ce:47:f4:e6:e1:00:5a:75:08:c1:f4:c1:14:ff:
e5:cf:86:b8:e4:2a:98:b4:b8:aa:53:bb:10:46:39:ec:1b:c0:
d0:59:bc:22:87:20:72:95:25:a5:c8:79:10:8a:b2:d4:89:a7:
3b:f4:b8:30:1f:95:0f:8b:99:82:94:ce:97:57:3a:2a:9e:d7:
c1:0b:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:03 2026 by rpki-client