
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: lP4gH+ucknqFvzqz9eIvxGHUsKNK5BBk4Kj+GHrq6Qs=
Subject key identifier: 1D:B1:1E:F0:A8:C6:84:18:11:8E:E6:A0:C3:AA:5B:32:D5:36:B2:0E
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 019E216D898578EAC9D3274CBF9DC83CF24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0E04
Signing time: Wed 13 May 2026 13:01:27 +0000
Manifest this update: Wed 13 May 2026 13:01:27 +0000
Manifest next update: Thu 14 May 2026 13:01:27 +0000
Files and hashes: 1: 3GwgcAPKG43MCPD8y9300VUUE7U.roa (hash: InZ5p01xw0MRhLMDOeL96L2077Wx0d7vpVCiYPBd65g=)
2: IGazZEaa03q0gZwkZa-a01KbsAE.roa (hash: kHgUBuHcjhycij9YJiSSXrr0v5v65zQmDRpctF0dSM8=)
3: YR_Sklpw1rT1jn14ENZmY_YlgSc.roa (hash: a6i5iaFNJsMyMSeoRuHDFzGc9ROq7AMhUx/2K/zffhI=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: turl625nTLHFKGnAV+MmogyS0o4FHhznWGTnnfnfK5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:89:85:78:ea:c9:d3:27:4c:bf:9d:c8:3c:f2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: May 13 13:01:27 2026 GMT
Not After : May 14 13:01:27 2026 GMT
Subject: CN=1db11ef0a8c68418118ee6a0c3aa5b32d536b20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:2c:26:c3:01:98:6c:64:b6:25:c3:3c:47:
39:0c:fa:11:26:0e:bf:0a:b3:f8:a3:04:fb:a8:5f:
12:1b:b7:e1:c5:f8:21:12:33:6b:10:ef:ce:07:9b:
7e:b7:cf:7a:c7:9e:c8:5b:cd:d0:20:f4:1a:81:26:
bb:ea:a7:7f:c9:a6:bf:0c:9f:28:fb:f4:33:cf:95:
79:50:3f:19:1a:68:44:0d:a7:fa:ac:32:7a:4f:5c:
85:47:9c:23:7d:fe:59:9d:ae:12:88:21:eb:77:f1:
83:74:fe:95:56:ab:e2:8b:87:0c:5b:77:c3:e9:ba:
75:9f:34:12:e1:04:c2:7e:1f:a7:0a:d5:47:68:c7:
2a:d4:40:f1:2f:b9:b9:97:54:3b:4a:be:5b:0f:4f:
62:49:4d:06:da:1e:58:81:c5:7f:35:45:5b:c6:55:
03:f3:40:58:3a:e6:12:70:7b:bc:1e:b8:ef:b0:94:
9d:54:46:b9:df:5d:e9:19:fa:ad:9a:dd:50:d5:a9:
89:37:e8:c7:fb:da:3d:ef:68:0e:e3:f4:17:88:fe:
2c:76:50:12:26:34:ab:0c:e0:b3:fb:c7:0e:78:05:
1f:48:f1:bd:6e:8b:32:53:89:0f:0f:ae:fe:3e:a4:
42:8f:6b:66:89:31:dc:c9:1e:88:3a:b4:c0:9f:34:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B1:1E:F0:A8:C6:84:18:11:8E:E6:A0:C3:AA:5B:32:D5:36:B2:0E
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f5:b0:29:ce:b4:b1:c4:88:37:04:e5:ff:5e:0e:5f:b4:ce:
ee:64:f9:45:17:e7:b4:71:d3:1d:95:ac:15:7b:d2:e6:12:3a:
d5:bb:98:15:d4:67:d4:de:64:df:f4:41:c3:e2:73:8e:07:40:
ca:6c:3b:7d:52:3b:6e:9d:af:5d:7e:c4:56:24:e1:df:3e:9d:
02:45:e5:d2:10:73:ae:58:a8:43:9a:e5:1f:a6:2b:38:69:88:
56:17:af:01:9a:6c:7c:3e:70:c8:9e:a2:69:e6:cc:ba:c2:f6:
37:41:6b:6d:63:8e:f9:d0:e8:5d:19:f4:eb:a5:bf:0c:28:2b:
a9:22:dc:1f:46:66:ce:64:34:aa:de:c8:18:da:ac:a8:e6:98:
5d:66:66:5e:43:e6:60:39:d7:25:07:52:87:6f:84:04:a6:d6:
42:ff:2b:ba:97:ce:f2:66:a6:4a:7b:19:d9:f7:08:34:f6:ac:
83:7b:d7:b4:b7:5c:c0:48:ee:85:ed:da:30:19:34:3f:c8:e5:
e6:cc:c2:58:6c:2e:1e:b3:ce:ac:5d:61:a1:48:fc:71:52:4b:
04:bf:2e:c4:99:c9:3c:fc:78:e3:29:2c:79:9d:45:41:06:1e:
40:09:82:a7:35:dd:1c:ab:1b:87:af:bc:2f:c5:8e:a1:6d:ff:
dc:9a:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:12 2026 by rpki-client