Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: vEVycfK2kNTopKK0CDb409QOU7CjP9WnmrtL7/ZgOS8=
Subject key identifier: 71:15:54:46:16:66:6E:92:6F:CD:FD:3D:96:75:AC:0D:2D:4B:2D:DC
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019E2091B49B81F1E0B0F1F0A43FA0D2986C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: 0164
Signing time: Wed 13 May 2026 09:01:20 +0000
Manifest this update: Wed 13 May 2026 09:01:20 +0000
Manifest next update: Thu 14 May 2026 09:01:20 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: rIanMvCrZHn4oDHcciT6wNNBfYwKivDCZnLNklztuqg=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:b4:9b:81:f1:e0:b0:f1:f0:a4:3f:a0:d2:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: May 13 09:01:20 2026 GMT
Not After : May 14 09:01:20 2026 GMT
Subject: CN=7115544616666e926fcdfd3d9675ac0d2d4b2ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:0a:0e:6f:76:5b:00:53:87:22:e5:8e:31:
27:46:89:87:24:74:0d:ba:0e:7a:3e:13:01:00:71:
3a:ce:42:16:ba:86:2a:c3:c7:18:0e:48:25:50:f5:
ee:2a:bf:2c:8c:9a:fa:78:12:13:91:4b:a4:f1:61:
a9:6f:94:91:69:53:b2:31:33:2c:3b:2c:59:31:1b:
df:c2:ae:69:02:fd:37:08:95:bc:7a:49:0e:e8:18:
9d:e2:d7:5c:66:25:50:7b:07:72:bc:cf:4b:52:5d:
53:d4:62:c6:82:e7:71:5d:3c:ab:23:8c:31:ee:6d:
c0:38:30:f8:c7:5f:fb:5a:52:d4:e6:b1:56:be:15:
d5:f2:1f:46:7a:eb:f2:e7:43:3b:f4:1a:14:ff:cf:
ad:b0:71:94:d4:d9:79:2d:07:58:6d:ba:45:68:43:
cd:38:a3:26:89:7d:cb:b1:d7:84:7e:89:f9:9e:c0:
d8:2e:67:10:90:ba:9e:8d:57:d9:1e:20:bc:3b:3b:
36:18:1f:0e:0b:e1:d5:4d:37:ee:6e:2f:1e:63:bf:
af:6a:51:f4:d4:1b:d8:78:37:0c:f7:05:38:06:c8:
ac:93:10:ef:dd:97:47:f1:73:51:f6:3f:86:41:96:
de:a9:65:72:38:f8:62:ac:d1:c8:55:c1:e3:bd:0f:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:54:46:16:66:6E:92:6F:CD:FD:3D:96:75:AC:0D:2D:4B:2D:DC
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:c5:0e:3f:2d:ad:45:da:77:00:18:b6:b6:4b:3e:9a:14:
92:47:e7:b8:e9:27:b2:4a:bb:cb:10:f2:8d:e4:d9:15:10:b4:
ee:bf:17:5e:e3:77:f6:a2:9d:23:44:6f:8f:62:1a:f5:fb:ad:
31:04:3f:3e:cf:63:3d:95:7d:dd:c2:38:42:bf:10:51:98:4c:
71:47:8d:3f:a4:b4:7a:f5:2c:25:84:29:6c:fa:2c:44:f6:ba:
a2:7d:23:4c:33:7e:6e:a5:40:37:93:ab:da:26:08:8c:ad:84:
77:bd:50:b6:3e:90:96:61:f1:20:d8:9b:f3:eb:d2:dc:57:54:
54:99:44:39:42:83:e5:f4:29:e9:a5:01:a7:dd:08:fc:6a:ab:
80:87:d3:a8:98:6f:92:32:4a:b5:05:22:b9:da:1e:19:44:a1:
fd:1d:05:b0:70:7d:12:2c:70:77:0b:15:c3:e4:3b:95:bf:14:
ff:4e:8e:1b:bb:f5:b8:74:b7:3d:2d:2e:c7:27:a1:fd:fd:0a:
c8:40:5c:ae:80:19:36:ae:b9:19:b5:e7:81:ae:cf:16:ec:a9:
43:0d:b8:d6:68:09:72:09:2c:0b:42:e7:3e:3f:7f:2a:31:66:
ab:19:a1:5f:a9:30:2b:2a:b4:a6:a7:65:8b:08:d9:d6:31:04:
94:53:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:50 2026 by rpki-client