Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: q5thdjr6M3x7iI0ro0gXDZw4JEHZoAVeu/ajwA6EuZQ=
Subject key identifier: E3:05:68:03:02:F1:55:C7:6D:9D:07:76:B0:DE:58:3E:BA:01:28:73
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 019E1EA2DE68EEB45BDEB6049441CE402D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0A3A
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 5CekNIPR1bX2MHNEuFYE4/azqo5sKw3Sw5hF19v26OA=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:de:68:ee:b4:5b:de:b6:04:94:41:ce:40:2d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=e305680302f155c76d9d0776b0de583eba012873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:00:f8:a9:89:d1:5e:f7:98:55:02:18:d9:
ec:fd:78:b6:d8:76:94:95:13:44:aa:85:3f:12:bb:
2f:e9:f3:7f:a7:f9:aa:26:40:a3:16:db:0d:e9:04:
f6:e6:bd:d4:f4:32:f5:b7:b8:21:e1:a8:cd:1d:dc:
ef:86:cf:b8:7b:d3:05:92:27:3b:e6:05:a2:de:c8:
2f:73:88:ac:a7:6f:aa:6d:cf:22:75:76:30:7b:e1:
c2:b8:b7:e3:0b:57:e8:d6:96:4d:a5:41:d1:48:99:
9e:11:6a:c6:9f:11:47:23:00:26:7b:8a:54:8e:ac:
7b:bd:47:89:23:8d:91:63:da:56:c9:9d:97:48:02:
d0:2e:1f:39:61:e4:bf:80:38:af:e5:01:13:76:45:
e5:e9:78:e3:a2:20:35:47:d3:cd:86:e5:ee:55:55:
83:22:58:ee:ec:75:e9:2d:d4:32:f4:3f:18:8e:6b:
ef:05:cf:c2:d5:61:b1:95:b2:76:65:1c:39:46:2e:
1c:87:fb:89:30:3a:81:60:69:7e:4a:77:4e:61:02:
8d:9a:25:0f:14:b5:87:1c:e7:2a:0f:fe:4d:a6:28:
db:54:f8:ce:ec:9e:57:77:06:84:88:cb:e0:91:ab:
b9:c8:6f:44:5c:6b:ce:aa:14:e6:a9:95:f3:bc:95:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:05:68:03:02:F1:55:C7:6D:9D:07:76:B0:DE:58:3E:BA:01:28:73
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:17:3e:bb:f5:3d:c3:7c:b4:04:5a:b4:be:15:e3:e4:fc:2a:
af:22:ab:54:1c:94:d2:2c:fa:49:34:6c:49:94:47:24:5e:8b:
66:3d:d4:b3:ee:0d:1e:88:37:95:23:4c:f1:b1:6d:30:c3:d5:
a0:30:ef:d1:00:92:0f:c1:3a:67:6a:95:ed:f5:11:0d:bc:f3:
8f:bd:95:01:d9:ba:f9:a3:94:5a:2c:dd:ab:7b:af:52:0c:d5:
61:b2:d4:16:31:d7:cf:73:3a:2d:a0:7b:26:24:ee:aa:54:12:
0c:ae:41:cb:4a:49:a3:94:1a:9a:49:7a:43:b1:b3:2d:17:71:
be:ab:54:27:5d:a7:24:7b:1c:4d:64:4f:5a:cf:e7:d4:88:e3:
bb:bb:62:23:db:39:08:58:20:20:89:bf:be:4d:45:a6:ca:13:
65:45:a1:87:e1:d8:a9:37:a1:f8:60:0f:4f:f7:ee:c6:21:66:
ed:35:89:f2:e5:06:6c:37:c3:5f:15:05:85:be:7e:89:fb:ba:
02:45:9f:95:21:cf:cd:e8:1e:5a:ae:b5:d4:00:32:50:81:a0:
c8:b4:73:84:e5:ac:6d:fd:97:25:ad:06:1e:f2:4d:78:be:96:
ac:73:92:f7:1f:ad:c6:39:79:c8:45:e3:59:66:62:19:ef:e8:
e8:0f:d5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:57 2026 by rpki-client