Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: hY/Kj06ZDuJ8bc//jy/pj9+bPdcl0fIAFYioYVWDemI=
Subject key identifier: 71:1D:20:D9:A9:1C:8C:C5:B5:54:65:FD:96:5E:AA:E5:FB:B3:0C:5F
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019E1DC7B9A23B009097B1C555EDD02747AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 20:01:28 +0000
Manifest this update: Tue 12 May 2026 20:01:28 +0000
Manifest next update: Wed 13 May 2026 20:01:28 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: 78361ni8FpZLbPmplKyEQNoYYcZABKtVBjFhEgUDTfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:b9:a2:3b:00:90:97:b1:c5:55:ed:d0:27:47:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: May 12 20:01:28 2026 GMT
Not After : May 13 20:01:28 2026 GMT
Subject: CN=711d20d9a91c8cc5b55465fd965eaae5fbb30c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:2f:19:65:1f:2a:e7:95:ef:06:a5:2e:36:
4d:a3:80:43:ef:ef:33:61:9f:60:86:aa:2a:92:16:
89:bf:8b:35:4b:9e:80:ec:4a:fd:89:7f:d7:ec:4b:
57:f3:5d:79:22:9a:3b:0e:ce:a7:7b:4d:36:33:f6:
46:98:04:4b:9a:63:59:6d:19:fa:48:6e:81:82:79:
5f:ac:d5:38:28:00:55:cc:53:5b:60:27:7b:72:26:
05:a4:20:26:9a:e9:e4:75:a0:a2:6a:44:64:0c:5e:
e9:0b:7c:14:fa:0c:38:22:e7:3e:9c:8c:37:15:52:
5a:e0:77:1e:7f:8e:8a:b0:6c:d6:0d:95:b4:b8:e1:
0c:36:58:6c:64:6b:96:23:41:82:d4:d6:1c:fe:b4:
e5:b7:ec:4c:8f:ff:1c:83:d8:c7:d9:16:35:47:2f:
af:d7:c6:72:d7:6e:49:9d:31:28:03:ce:ff:1f:70:
42:fc:5a:b1:8f:a5:5c:56:55:cf:bd:6a:2c:96:f5:
4f:50:f7:ca:34:82:11:2b:00:22:3d:99:ae:59:5b:
92:44:9f:f2:c8:5f:2f:79:97:32:d0:56:8a:11:37:
a9:d7:29:c3:a3:50:6b:37:06:d4:29:52:e2:eb:f0:
87:96:eb:2f:56:b6:54:4f:aa:67:17:75:5f:35:e5:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1D:20:D9:A9:1C:8C:C5:B5:54:65:FD:96:5E:AA:E5:FB:B3:0C:5F
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:55:7a:88:0b:fc:dd:57:20:bf:bb:b1:c1:c2:aa:12:7b:
be:98:a8:e9:4d:7c:d6:b8:08:1b:49:a7:2e:58:19:97:b0:0d:
78:d1:28:00:ed:62:e9:b9:55:bd:28:a1:ff:79:69:f3:13:c7:
c9:07:f9:86:0a:a8:63:e3:2b:0a:68:9b:fc:87:6c:b7:26:75:
29:22:d5:c5:01:bc:53:f7:d8:48:03:18:b2:43:d3:f8:ed:a9:
bb:e6:28:a1:52:a9:2c:dc:2e:a7:19:37:72:9a:47:a3:fb:70:
d3:1c:37:0b:ae:4f:7a:b9:3f:ad:66:33:31:bf:7f:fd:68:23:
c8:de:9f:03:9d:6c:55:3c:cf:d7:db:53:20:6b:b2:0d:02:a3:
6c:d6:2e:12:e7:d3:de:38:3d:12:d9:e2:43:66:ee:1e:57:97:
36:a7:35:5c:c1:8c:e0:0a:0d:7d:5e:ec:3b:6d:cd:33:95:a7:
4c:bb:c9:2a:17:33:1a:81:5f:b3:5a:36:72:18:06:2e:f9:71:
78:68:b5:83:85:34:b7:34:3f:f0:39:9f:03:64:0a:eb:3f:a3:
68:bd:59:db:d8:ea:db:74:9e:d8:3c:61:d3:75:ba:d0:c2:66:
4f:c8:86:ae:2b:5a:34:65:38:4a:6c:c2:11:bd:8e:af:d7:b7:
7d:90:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:53 2026 by rpki-client