Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
File: CncZY0DSFEuMp7B3iYS7BLwcs3g.mft (raw, json)
Hash identifier: qBg4yU4riBrTsVMcVryPooTLrNNYeHGmL9va1DCGZwQ=
Subject key identifier: 69:C7:8A:4B:98:55:64:35:7F:D1:8E:FE:A9:90:33:EF:D7:C8:91:CD
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019E1CEBB18CF3C2115E12078505ED1231A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
Manifest number: 1652
Signing time: Tue 12 May 2026 16:01:08 +0000
Manifest this update: Tue 12 May 2026 16:01:08 +0000
Manifest next update: Wed 13 May 2026 16:01:08 +0000
Files and hashes: 1: 7P6Im5vS7MUJ-yzLLIAK6fKBDP8.roa (hash: 1brCRxslIloGUfdpm6U1pSbh0q8gMyESOmn7LpzNMpo=)
2: CncZY0DSFEuMp7B3iYS7BLwcs3g.crl (hash: R06VLvUgiStolcaBYO90sXMEHPQQPw7msM+WQuV/76I=)
3: GZUDzWqJAL2dZXm7LPA-IYt2BZk.roa (hash: fyE8ucidyo4EGIyTiAJR8gxoQAHilS40FZAtS0gtSZ4=)
4: TshvxkGRzWpdZkmbQujodceCcYA.roa (hash: 5VbxjvyHiHbVKo9Pu4BWifcKzehAhCSW23xWmJmvVCU=)
5: terKgDp-lp4YdKLQD6_mhNXlVsA.roa (hash: ntHuNsx6woJ+rhTmlKP6IT/q0AwRNxfD1ikTgfZepas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b1:8c:f3:c2:11:5e:12:07:85:05:ed:12:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: May 12 16:01:08 2026 GMT
Not After : May 13 16:01:08 2026 GMT
Subject: CN=69c78a4b985564357fd18efea99033efd7c891cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:75:43:d8:43:a1:e7:15:64:14:66:48:93:
60:7d:ea:7c:71:25:8a:a8:08:1d:af:4f:e6:34:91:
8c:03:15:4e:c7:4d:25:89:df:c8:09:1c:d0:b9:06:
dd:01:f0:71:91:7e:d5:c2:ce:0a:43:0d:62:40:9c:
19:42:a2:94:0e:94:df:9d:ad:79:d3:0d:ba:2f:c4:
a1:9b:39:3b:20:b1:45:e9:de:e6:01:64:8c:28:98:
fe:d6:68:b2:3e:86:ba:c4:0f:b8:68:a3:c6:a6:c2:
d9:89:f7:93:f0:5d:5d:63:5e:9c:31:37:a9:b1:a1:
46:8d:a2:73:b3:34:c9:fd:cb:48:26:88:c9:76:61:
35:78:af:2f:56:9a:41:bc:d4:83:31:95:83:bd:81:
6d:bb:23:bd:fe:95:7d:03:a8:4a:40:a4:1c:7e:84:
5c:f0:1c:8e:83:f6:e2:13:52:7b:38:9c:45:75:4c:
6c:c1:c4:6a:69:62:43:a0:aa:ef:ba:6b:e7:53:5e:
ec:78:e3:39:ed:97:43:d5:7a:d4:ec:47:2c:5a:72:
0c:24:ea:13:c8:b6:56:06:0e:4a:bb:29:f2:e6:8b:
42:a1:6e:de:8a:51:cf:74:ce:57:ea:ea:6c:9f:8a:
ef:71:1c:0e:c3:85:5e:cd:d6:e6:15:1a:d1:7d:e0:
b9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:8A:4B:98:55:64:35:7F:D1:8E:FE:A9:90:33:EF:D7:C8:91:CD
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bf:20:01:51:e4:b4:19:bd:0b:78:ff:a1:4e:db:10:ab:5c:
b0:d3:e4:a6:27:c5:90:63:0a:dd:28:2d:02:56:f7:4b:a4:a9:
dd:8a:5a:46:11:6a:3e:5d:8a:29:a1:38:ab:08:e2:7e:50:e3:
30:84:3f:93:71:f7:03:bf:ef:4c:bb:5d:b6:5b:f2:69:e7:6b:
c9:01:4d:bb:3f:ea:80:db:d6:41:3d:76:42:6e:d4:0b:31:96:
30:23:81:e5:99:be:03:32:aa:9f:77:e0:df:81:a4:c6:7a:f8:
97:da:81:28:f1:a2:11:e3:b0:fd:89:68:e8:33:0c:0c:a0:82:
79:b9:1a:52:5c:2a:28:ca:e3:7a:9f:f5:39:2a:91:c8:7f:34:
7e:08:86:df:46:92:3d:56:00:dd:d0:b3:70:04:ea:36:e8:60:
d1:02:5c:5f:9b:7e:d6:8c:17:71:5b:42:37:8c:96:ff:33:d6:
bc:41:36:1a:aa:6f:f2:9e:fc:04:4e:ff:55:bd:6e:e9:ea:01:
4e:fc:41:f0:4b:ae:33:96:c0:b4:f4:e8:8f:0e:25:8c:28:68:
0f:03:d9:57:cc:84:ab:31:c7:66:66:d2:87:5b:2d:73:7c:6e:
30:51:b6:13:b1:9c:e8:8c:31:a4:2b:31:44:04:6f:f3:bf:f2:
67:f0:6d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:02 2026 by rpki-client