Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: JOE1fQ2ffEtZXFn91MoOTrl4tq8IlApI5T7fkMrjY4I=
Subject key identifier: 7F:18:9D:5F:F3:1B:CF:43:77:06:96:CB:06:8A:D9:B1:0B:9C:89:C9
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019E1CEC1709D7117E9B0FC703AA6EF0338A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 16:01:34 +0000
Manifest this update: Tue 12 May 2026 16:01:34 +0000
Manifest next update: Wed 13 May 2026 16:01:34 +0000
Files and hashes: 1: 0mo3X00m4Wa_0S9tvAPdeEXjbIM.roa (hash: 1U4/DSlzuUT0abOkebzV1TmeepoX7B2dOGHwLGQ4cEw=)
2: 2861EryPsrS4a-CLsyIstAV7F9w.roa (hash: +qUAh0c2VsbVAzUE8hPQZ3Z3n7oYsSBDx7kw6q6WdmE=)
3: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: NY0ZfMl+KmCjC9g0vMqeo88A3TE8vVIoZob9GjD92k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:17:09:d7:11:7e:9b:0f:c7:03:aa:6e:f0:33:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: May 12 16:01:34 2026 GMT
Not After : May 13 16:01:34 2026 GMT
Subject: CN=7f189d5ff31bcf43770696cb068ad9b10b9c89c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:a9:08:c6:60:a4:70:fa:b1:f1:77:f4:8a:
19:a9:c0:7c:96:ad:83:43:8b:3d:aa:87:e0:1e:2c:
be:f3:9e:aa:fb:8e:83:fa:6a:83:54:3f:45:c5:4d:
e5:4b:27:7c:47:cd:71:4e:c9:d0:d0:d6:50:9e:43:
af:c3:e9:3c:a6:51:43:ff:21:60:9c:10:6a:11:f3:
77:b4:6b:e1:16:47:3e:92:5e:27:c7:48:b9:0e:74:
40:de:2f:ec:0e:a1:91:5b:10:30:94:83:85:53:d5:
b2:a8:30:c7:c6:c7:90:26:c3:4d:a0:62:77:a7:19:
3d:21:a9:12:59:02:82:4c:35:b5:39:a3:83:6c:cb:
b1:0c:ac:87:bf:8f:dc:c6:3b:51:54:d6:93:f9:27:
6e:04:74:8d:c6:3c:5c:a0:6e:61:da:07:82:64:43:
4b:6b:1a:44:8d:17:33:ca:10:86:e0:4c:2a:51:a0:
35:36:c7:4d:10:5e:a4:96:12:28:0b:f0:70:dc:8e:
a5:bc:95:38:4a:2e:32:68:d4:3f:df:d2:9e:5d:82:
a1:08:a9:e5:e7:0e:d3:06:14:0f:1c:31:e2:a0:e1:
98:0b:06:8d:74:f9:58:38:d9:cd:9c:95:15:55:50:
14:12:db:f8:9a:a1:c1:4e:98:be:b4:d2:d1:0e:9f:
96:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:9D:5F:F3:1B:CF:43:77:06:96:CB:06:8A:D9:B1:0B:9C:89:C9
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d5:48:5a:a1:93:36:c9:e4:97:7c:86:b1:e0:58:11:5a:99:
09:65:f8:35:36:89:06:72:25:42:f7:7c:5f:81:e4:71:0d:a8:
9c:ef:86:8f:83:49:d8:e0:a4:55:03:3a:81:19:82:31:f0:1d:
55:8c:97:02:08:46:e0:18:5b:83:24:0a:3f:ab:5e:40:a3:10:
09:be:5a:91:0f:c7:92:05:5f:90:c7:f6:f9:0c:53:cc:ba:7f:
9f:96:c7:79:b5:10:6d:aa:87:23:2f:66:d1:f7:40:03:69:9c:
ad:35:d5:a5:20:f7:74:8a:ce:ed:c2:18:ab:14:97:1c:af:dc:
85:e4:23:0d:02:35:0f:c0:d1:59:28:d3:86:97:dc:da:87:8c:
14:ac:98:3a:57:fe:6f:b8:a5:d6:7a:05:8b:99:a6:c7:49:b9:
82:29:3f:54:14:06:d6:47:8a:ac:3f:bc:77:13:97:ee:51:ec:
81:18:6f:a2:c4:58:f5:eb:8f:8d:58:3e:8c:e3:81:f0:bd:aa:
a2:29:e2:32:0f:15:44:10:da:fd:9b:68:8a:cd:08:0a:46:2a:
b3:f4:e0:88:3a:41:1e:05:e9:a1:46:fc:66:a9:5c:fc:6b:16:
32:de:08:12:dd:2e:4e:47:79:5a:da:90:9a:f7:37:86:3f:88:
c0:36:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:38 2026 by rpki-client