Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: 4rLezHyCaE2+YsJCNMMHwaBvrCJq/sWTJNQHCPB9yuc=
Subject key identifier: BD:59:0A:44:42:5D:E6:3C:47:D9:13:FE:59:77:9C:5C:EE:86:FA:0E
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019E1EDA8A905424AD4AEA3A6EBF90816FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0D71
Signing time: Wed 13 May 2026 01:01:39 +0000
Manifest this update: Wed 13 May 2026 01:01:39 +0000
Manifest next update: Thu 14 May 2026 01:01:39 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: cEhw1lqdMrEQA/2ozz8f85Hu8aKmsTppD/TPR9HMjhE=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:8a:90:54:24:ad:4a:ea:3a:6e:bf:90:81:6f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: May 13 01:01:39 2026 GMT
Not After : May 14 01:01:39 2026 GMT
Subject: CN=bd590a44425de63c47d913fe59779c5cee86fa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:d6:f6:d4:da:68:c8:82:2d:b6:cf:89:e4:
4e:f6:5a:d4:7d:9d:26:73:bd:c7:eb:7c:15:a6:fb:
71:44:ab:62:98:aa:e2:0d:2e:52:c1:95:fd:2f:51:
af:a5:79:f0:6b:4c:65:c6:59:a7:29:ad:43:d0:e5:
01:f7:f8:d4:ae:c6:79:09:69:35:b6:f4:9e:fb:7a:
49:b2:3c:3f:c9:a1:8b:75:63:55:6b:e2:f1:0e:e3:
fc:a5:81:13:5e:ee:45:40:96:09:2f:65:9c:64:ce:
19:90:9b:6a:2b:5d:68:57:5c:ac:c6:ab:85:1a:2e:
44:64:38:e9:f6:4e:a5:87:bf:de:5d:92:3c:c3:44:
eb:9a:6f:53:93:be:24:5b:fa:c7:81:5f:db:04:96:
d1:87:be:ec:5e:c5:63:f8:78:98:cd:59:b8:a6:af:
cf:73:c9:4e:97:43:e9:3e:62:1f:0f:ca:9d:b2:15:
ad:9b:bf:f2:b4:e4:53:c8:5d:9e:00:d3:9e:ff:c1:
e1:d3:f7:03:48:01:7a:45:ed:47:0f:96:3a:92:18:
15:27:5f:8a:41:ce:aa:7b:c6:1b:25:6c:90:b8:2f:
ff:45:86:73:6d:a9:3d:69:6b:51:b1:fe:a7:f5:bb:
60:cc:16:fe:b2:74:47:48:e6:9a:88:a3:a7:ea:ea:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:59:0A:44:42:5D:E6:3C:47:D9:13:FE:59:77:9C:5C:EE:86:FA:0E
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7c:bd:cc:b1:21:7d:d9:ef:8c:d4:97:d6:79:7c:ee:d7:4a:
1a:e0:ef:bf:7a:82:ce:6a:7c:d4:df:a6:84:bd:42:f0:8a:34:
c9:2f:e5:a6:8c:21:93:82:13:f8:9a:56:b2:c7:06:3f:74:d7:
ef:80:54:af:0c:10:3e:43:a2:23:69:0e:c4:b0:db:57:de:a1:
ed:6b:8b:83:81:51:4d:2a:fc:3c:d3:99:da:19:c5:5e:fb:e7:
29:56:20:2e:08:a7:17:3e:c6:71:11:a4:7e:85:d4:b7:98:7e:
70:78:a4:3e:fa:ba:59:72:fe:65:b1:03:5e:61:1b:9c:df:8c:
db:b7:80:49:fc:a7:de:8c:8c:a3:32:91:e3:5c:06:78:66:c9:
a4:62:e8:ec:6b:b5:fe:cf:a8:3e:18:d4:31:98:3e:ce:62:f8:
4b:e3:52:9e:9b:1b:73:7e:44:48:10:c7:c0:cf:77:f1:12:d7:
8a:5d:f6:57:1b:91:af:9c:37:d7:13:f3:b3:6a:72:12:0e:6e:
d9:11:62:f7:2d:3a:36:47:17:40:2e:31:d8:63:92:b5:f3:74:
f4:30:b9:b4:fd:30:89:93:d8:29:cd:da:25:55:0d:e7:35:11:
10:5a:dd:46:e3:fa:ca:a5:fa:f0:1b:d4:af:08:d0:1d:9d:c8:
2c:ac:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:46 2026 by rpki-client