Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: XarsXPzDG+E+yU+MKSo/e+MKtFk7a/cnfFdS7sw5loo=
Subject key identifier: 60:59:67:68:73:17:06:AE:3D:8C:F2:11:C6:93:61:B4:D8:19:D5:A9
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019E1DC75A83169E65E5C57A45758B784882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 0645
Signing time: Tue 12 May 2026 20:01:04 +0000
Manifest this update: Tue 12 May 2026 20:01:04 +0000
Manifest next update: Wed 13 May 2026 20:01:04 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: lEZ/hAbY6V6kgmr61G/PewIvMLQgbKlZnF63uIugWE4=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:5a:83:16:9e:65:e5:c5:7a:45:75:8b:78:48:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: May 12 20:01:04 2026 GMT
Not After : May 13 20:01:04 2026 GMT
Subject: CN=60596768731706ae3d8cf211c69361b4d819d5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:a8:6a:5b:7a:9c:1b:1f:f7:6e:6b:46:db:
1f:18:9e:eb:46:01:f9:ca:05:ce:22:16:be:c5:b6:
d6:16:1e:6d:9f:7d:19:e4:67:e1:03:69:ba:f2:d7:
8a:87:ac:7b:9e:56:41:8d:f9:a6:9b:76:07:6e:ad:
8b:f8:ff:d7:83:ba:ff:e2:85:1b:f7:ca:25:ec:4f:
23:7b:45:a8:79:38:68:e5:fe:52:7b:1e:d8:d7:28:
3d:b5:0f:f0:cd:dc:07:0b:5c:f4:08:20:bc:2d:0d:
fa:14:82:c0:a7:de:65:ff:f7:f7:d3:cd:46:b9:cc:
ba:b5:98:bd:d3:78:b5:f2:9a:4d:3d:12:ef:f0:b6:
d2:fb:ee:84:48:7e:a1:18:87:ce:b0:cc:aa:8b:d2:
dc:4a:92:68:fa:cd:f9:36:7f:b9:1b:28:a1:b1:fa:
a8:63:6c:b5:15:17:83:41:68:ca:37:be:1b:46:b3:
c8:f8:cc:93:35:dd:12:f0:5d:2c:fe:11:57:0a:44:
2b:d8:0d:47:6e:68:2d:9d:44:a9:a1:da:52:eb:88:
73:21:f4:39:a9:e5:ef:10:8f:de:bb:ec:cd:43:fa:
eb:aa:8b:82:ff:88:3a:30:af:85:e8:14:8d:03:5a:
4a:72:44:4f:19:22:60:3c:9a:d2:2d:59:c6:98:d5:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:59:67:68:73:17:06:AE:3D:8C:F2:11:C6:93:61:B4:D8:19:D5:A9
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6d:4b:50:7c:79:01:29:2d:a8:0c:b5:ce:9b:52:6a:d9:32:
95:7f:f8:0e:16:83:f5:ec:09:ca:01:b0:1f:2e:d5:24:99:8e:
23:87:29:f0:71:c5:a5:70:f7:39:ff:2d:85:89:e2:c1:3e:b0:
a9:87:a8:b0:fe:f8:be:c3:5b:65:73:eb:c4:b9:73:46:8d:56:
7d:31:c6:5b:1b:b5:f6:87:99:b2:90:82:c5:22:62:cb:9a:36:
0c:d2:23:39:90:73:43:9c:32:df:b3:05:86:41:46:e7:4e:e9:
4d:63:c8:90:26:de:8a:5f:bc:17:1b:21:bc:9e:d3:f2:f5:10:
31:0e:a0:df:04:b6:89:07:aa:0f:17:f3:f9:21:a5:b9:78:07:
57:27:82:68:94:1b:46:15:04:1a:88:55:cd:9e:20:85:fe:0c:
c5:f7:29:9d:3e:d8:23:6c:ea:f6:ee:af:11:67:b0:35:4a:70:
79:c4:1a:1c:7a:2b:75:e3:5d:a2:ef:8a:6c:6f:27:3f:87:ca:
b3:2b:d2:10:2d:d2:33:aa:73:18:d3:f5:36:32:85:2e:5e:6f:
70:49:ce:18:be:97:71:a5:5e:1d:34:80:58:a6:ce:9c:83:98:
76:43:a2:37:d1:a1:f6:56:a1:03:8f:29:56:c0:71:06:32:5b:
26:e6:5f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:46 2026 by rpki-client