Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: XCG7MPQyUrepR6z1HZlO3qwP292Kcpy01hjO1NF3HYc=
Subject key identifier: FF:A5:AF:27:A2:45:B4:83:8A:7E:2A:89:96:00:2A:71:90:96:68:A4
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019E1C7DB9674AB1BC3BAD1833228836A57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 164B
Signing time: Tue 12 May 2026 14:01:01 +0000
Manifest this update: Tue 12 May 2026 14:01:01 +0000
Manifest next update: Wed 13 May 2026 14:01:01 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: /y53xbi2aKfjCR07TkHr1pZCXgB972MJKVoMuHDdGso=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b9:67:4a:b1:bc:3b:ad:18:33:22:88:36:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: May 12 14:01:01 2026 GMT
Not After : May 13 14:01:01 2026 GMT
Subject: CN=ffa5af27a245b4838a7e2a8996002a71909668a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:70:6d:3a:d5:6c:45:42:3a:9f:50:f4:61:
a4:ef:ef:b3:6f:8a:d8:a2:a4:96:0e:fd:ff:72:42:
53:b3:21:47:5f:63:70:6c:a6:aa:39:53:5d:fe:a4:
a1:23:2f:31:ad:16:19:4c:6f:72:52:84:37:f6:3d:
da:d7:35:93:8b:f8:71:3d:1d:0a:0c:a3:ea:62:7d:
2e:cb:66:2f:a0:a9:62:b6:12:e6:a8:a5:e5:9d:f0:
65:9b:69:16:9c:9c:da:19:0c:50:d5:f5:70:16:7f:
59:3e:ff:aa:ee:28:4c:2d:e1:2f:c9:49:c6:92:d4:
a8:9e:c6:b9:b3:0a:56:8a:15:c2:48:6d:86:63:2e:
48:92:18:00:00:5e:2b:21:0f:00:a0:c4:07:d9:6a:
84:e1:a3:ae:c7:b2:c4:cd:5c:b7:74:b4:1d:39:24:
12:b7:bf:19:af:6b:df:59:50:ff:d0:00:29:68:15:
35:40:4b:5b:d3:73:c3:51:81:2b:56:36:53:3d:7f:
ca:f9:0e:12:54:0d:4b:ee:3d:a2:2d:27:8e:e6:c1:
ad:61:08:b6:4d:ba:17:7f:83:c6:3d:67:28:53:0b:
b2:b8:97:e0:59:a3:52:ee:b0:71:73:24:72:bf:9a:
56:5b:63:0f:10:90:99:98:22:db:85:11:28:c6:60:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:AF:27:A2:45:B4:83:8A:7E:2A:89:96:00:2A:71:90:96:68:A4
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3e:d9:c3:2e:97:c6:8b:8d:fc:41:74:e6:23:db:94:9a:6f:
17:23:6e:84:e9:67:6b:0a:51:9a:a0:23:c3:e2:ff:0b:ff:99:
b2:3a:9e:ff:12:79:c7:c6:1e:b4:d1:d7:dd:01:e4:17:e8:1b:
97:0b:65:21:20:10:2a:9d:4e:ae:a8:83:bd:c8:9b:18:a6:55:
09:4a:d8:ea:c7:24:f6:52:7f:a3:eb:db:7a:00:3c:0d:db:b2:
5c:41:b9:d7:0d:75:7e:9f:67:b3:b0:ac:da:09:7a:28:60:4e:
6d:55:66:6a:93:a1:1c:c8:eb:99:94:28:2f:34:37:a4:3b:49:
e8:de:9c:3b:ea:fc:66:68:da:8c:0b:a7:69:b6:e4:76:10:73:
64:23:5f:90:07:82:52:bd:b6:8b:57:37:6d:1d:64:99:b6:20:
f8:84:d7:18:07:bc:c4:13:bd:41:9f:be:5b:33:0a:48:1e:7f:
06:e5:d8:cd:6f:71:bf:66:5e:02:1e:38:9a:76:22:62:ca:5d:
72:8c:8a:a7:e1:a2:83:2a:0e:84:51:a4:92:51:a5:73:41:f2:
f8:8f:7e:04:9c:d7:67:aa:d2:e6:5d:f4:9c:bf:cc:9c:8d:89:
52:68:29:7a:ae:e9:14:bc:2e:dd:5b:a1:4b:5b:11:bc:f7:79:
2c:3f:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:37 2026 by rpki-client