Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
File: pMtQ54o6MeM3XPKquGXoRf8umcE.mft (raw, json)
Hash identifier: I5+YajsHbxDxLWLtV8jjAj3L25jNfz/Qdnghs0LiQik=
Subject key identifier: 82:7D:89:22:DD:A2:3C:C4:94:78:C5:2B:5B:5A:F9:0B:0A:9D:74:EB
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 019E1E34E04C35804CF43F5DDC0E36BB3ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
Manifest number: 1917
Signing time: Tue 12 May 2026 22:00:42 +0000
Manifest this update: Tue 12 May 2026 22:00:42 +0000
Manifest next update: Wed 13 May 2026 22:00:42 +0000
Files and hashes: 1: KeBHh_EXoo6vxPcJVgCWPFy_Qck.roa (hash: Lb6JJsVM1wJrwKLdOhRrqdN+kt/BOWmpYchxNlLSv+A=)
2: RgbTxSuQRNXFVhZjHsG1yRfbDcY.roa (hash: QEQTGxs8uKOEp8JVm8z26NyHbZ3CIT8Ts2wlZUqrfqw=)
3: fc-z64p9INgXqSlpt0wgmjnDjcM.roa (hash: iAvsJsJGvYYjjk6ye/5/KN/cmvlNuk2vjqxHBnhTILY=)
4: pMtQ54o6MeM3XPKquGXoRf8umcE.crl (hash: bzkoA3LHeBnp46k1kpwWYnDFtP+koSIjrN+/i91cif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:e0:4c:35:80:4c:f4:3f:5d:dc:0e:36:bb:3e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: May 12 22:00:42 2026 GMT
Not After : May 13 22:00:42 2026 GMT
Subject: CN=827d8922dda23cc49478c52b5b5af90b0a9d74eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:7f:31:ac:50:67:c0:1c:cb:20:24:62:7e:
6b:ea:e1:6d:ea:a2:89:97:e5:09:30:04:31:aa:95:
1d:6e:b4:3d:4a:bb:44:f0:ba:7b:09:ff:9a:8b:eb:
a8:cc:65:9b:f8:e7:ec:9a:8b:a1:86:9c:15:bb:eb:
4e:11:94:fc:b2:a3:4c:2d:54:9d:bf:1b:b6:b3:d2:
16:8c:e5:19:57:a4:84:16:a4:73:d7:c7:21:4b:e9:
e6:1f:b8:85:43:70:62:d1:d2:e1:e8:03:a7:8e:5b:
a5:d0:c2:4e:04:b1:30:b2:cc:5f:fc:b3:a5:94:e8:
c7:98:01:0d:f4:3a:34:06:98:74:57:e3:09:fd:89:
2a:d4:2b:65:ed:24:bc:a6:5c:2c:1d:97:2a:1a:cc:
f7:26:98:2f:c0:44:b1:e7:98:ec:06:96:57:56:1a:
71:90:00:83:3a:82:b8:fa:64:5b:4c:db:cb:65:0b:
67:8e:2d:22:a0:20:2f:b2:54:d7:25:41:82:88:eb:
91:89:d1:2a:e7:60:f6:10:e7:41:a7:5d:f1:cd:17:
92:9c:da:b1:46:b7:05:ce:ae:f0:f2:09:33:8f:5c:
3f:f0:56:e2:cb:7a:f8:da:d1:b4:47:ee:89:b5:67:
27:68:41:a3:cb:1d:c5:2b:d3:a0:e1:fb:2f:89:02:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:89:22:DD:A2:3C:C4:94:78:C5:2B:5B:5A:F9:0B:0A:9D:74:EB
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b0:08:15:e0:5c:a4:3d:5b:37:c9:88:c0:3e:f3:67:76:60:
47:0c:ac:c4:e9:fb:49:62:fd:84:62:14:b6:d3:95:70:bc:31:
a4:0e:1c:09:d7:44:7a:b2:49:85:94:e1:a3:30:56:f4:34:e9:
5e:b9:f8:c3:07:9a:27:a2:b4:67:9f:fa:f1:d6:f3:96:27:bc:
4e:37:81:e4:ef:f8:22:0d:05:34:9b:1c:e8:01:0e:44:37:b0:
0e:66:5e:05:77:59:e6:6e:fb:70:1a:a7:58:87:ff:80:1b:c4:
aa:de:19:e9:13:97:53:8e:68:6c:78:8f:fe:de:51:6b:70:4f:
43:38:57:54:76:57:22:33:34:6c:78:26:c8:14:96:61:b1:d0:
e6:05:d8:d8:d8:39:78:34:a3:08:59:24:52:62:3a:9f:02:0c:
a1:59:a3:5c:15:d8:2f:4f:ba:14:c2:e9:30:0f:57:53:21:9b:
75:c8:a3:f9:39:df:2b:c1:af:6c:ac:b9:66:af:80:aa:5f:88:
1a:3b:bf:8f:71:74:c4:19:6c:97:56:a3:df:19:5e:e4:99:df:
78:60:5c:ce:03:9d:3d:f2:c2:7b:ff:19:b2:63:16:74:04:f7:
fc:25:c4:08:04:c9:e2:5c:db:a0:7b:91:93:86:26:43:3b:1c:
93:8f:cc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:26:14 2026 by rpki-client