Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: Y3pqHpCgD1MZAZ+9xI4iy1V0Z8boqs2KeVAce7sQAxg=
Subject key identifier: 1F:82:7D:A8:9F:AA:3A:0E:CA:D1:F4:89:FD:8F:C9:13:6B:49:90:53
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019E1E6CC77E6FE93FC0B33816F5752B7CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 15DF
Signing time: Tue 12 May 2026 23:01:45 +0000
Manifest this update: Tue 12 May 2026 23:01:45 +0000
Manifest next update: Wed 13 May 2026 23:01:45 +0000
Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: UFNMhRB6rILjCQ7v1AyUiEd8OanD1KypF9enOvWvuyQ=)
3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:c7:7e:6f:e9:3f:c0:b3:38:16:f5:75:2b:7c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: May 12 23:01:45 2026 GMT
Not After : May 13 23:01:45 2026 GMT
Subject: CN=1f827da89faa3a0ecad1f489fd8fc9136b499053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:aa:c7:4b:93:f6:27:8b:84:94:8c:2e:5e:
70:98:57:88:3d:97:00:c2:3b:bd:b2:38:6e:29:7d:
0b:eb:65:d9:6b:d2:6a:d5:a9:8c:b7:f2:48:8e:05:
91:98:04:9a:a5:fc:c1:d5:f7:a5:6b:5b:13:17:62:
2a:e5:e8:ef:5f:83:6f:9c:5d:bf:1e:fc:c9:c2:22:
6a:59:6c:f0:30:fa:1b:bc:f8:32:f3:5f:d0:db:dd:
ed:c5:a3:06:ab:73:08:9f:07:84:20:42:3e:32:90:
24:70:5b:66:d1:45:13:02:93:89:20:76:a0:12:e0:
9e:36:52:20:be:37:06:04:be:13:db:f1:59:a3:68:
ee:2e:2c:2a:27:c0:39:50:a1:8e:18:1d:df:7f:c4:
5f:38:d6:9c:51:63:c4:4c:84:41:57:20:bc:3e:54:
78:92:0a:39:b3:9d:c9:ab:01:46:16:6a:ee:00:a3:
88:0f:61:71:d9:c4:61:a5:cd:6c:24:dd:35:7b:ea:
01:84:9a:ea:4f:95:75:0d:31:01:7f:53:fe:e1:83:
e1:55:64:14:f8:6b:55:90:03:87:be:5a:0c:c0:7b:
87:2d:ef:56:9d:c3:ba:05:dc:9c:f7:66:ee:9b:0f:
6e:e3:e4:a4:7a:0c:5b:39:22:2a:c4:6e:85:34:eb:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:7D:A8:9F:AA:3A:0E:CA:D1:F4:89:FD:8F:C9:13:6B:49:90:53
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:dd:bd:b5:e5:f5:f6:56:19:e8:72:b6:3a:01:cb:72:9f:
4d:ab:96:5b:94:05:c8:5e:d0:04:76:42:04:35:4a:09:99:be:
3a:31:94:f8:fd:90:0d:27:09:ee:41:af:50:6b:5f:6b:bb:fc:
ba:40:24:46:00:f8:dc:24:3a:50:12:6f:99:e0:f4:01:50:6e:
75:07:e5:ea:1a:8c:8c:83:a6:39:08:ce:10:86:3e:13:24:0d:
18:3c:97:30:b7:ef:7c:59:48:2b:f3:a7:10:97:e1:8c:63:77:
d4:54:22:d9:ca:f9:a2:a3:05:b4:76:22:f0:b8:d7:a4:93:70:
96:8e:2c:71:f7:a4:ce:98:ab:15:9f:3d:f3:4d:85:ab:a7:db:
93:7c:7c:00:fd:ac:87:89:3e:ee:76:8d:18:60:f3:70:47:ce:
25:a6:86:bc:ac:08:b4:34:9d:25:9e:d8:33:a0:42:89:b5:cd:
cc:bd:45:3b:fd:cf:6b:3a:d3:91:81:1b:09:f3:a3:9c:35:76:
44:3c:04:16:18:25:43:88:33:bf:6b:c9:1a:2b:ea:82:fe:ea:
92:01:17:8d:04:16:ac:a3:7a:05:4c:d9:fa:61:b2:3e:a4:01:
13:fd:58:5e:1c:c8:5a:48:9b:09:5d:ab:a7:71:3f:d8:90:27:
60:b9:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:05 2026 by rpki-client