
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: aHTR4l8Ye/su2AtAMDd+j059BEe9Q8qrZNueHUMThWY=
Subject key identifier: AE:23:F5:CD:D6:32:62:B4:47:2C:88:7E:44:62:46:E5:0C:BB:0F:0E
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019E1FB58C23596B0354048121A651038652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 05F2
Signing time: Wed 13 May 2026 05:00:51 +0000
Manifest this update: Wed 13 May 2026 05:00:51 +0000
Manifest next update: Thu 14 May 2026 05:00:51 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: jhC9a0KGOhskqK8y2P66-mdvVMk.asa (hash: i9dLz9pNHP1gfZet4bvzsUUCDdP+wUgqYcPorhYgXZ4=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: FNo+MYM8b6K4o7IfoL0erE7UyrkXr7da6WQ0vDU5MyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:8c:23:59:6b:03:54:04:81:21:a6:51:03:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: May 13 05:00:51 2026 GMT
Not After : May 14 05:00:51 2026 GMT
Subject: CN=ae23f5cdd63262b4472c887e446246e50cbb0f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:86:25:11:c1:95:4a:52:be:de:01:8a:06:e5:
aa:2b:02:ba:2a:be:f4:19:ba:48:68:dd:47:20:70:
3f:c1:e9:a3:d5:3c:58:10:84:1b:f6:a6:7e:17:c4:
66:cb:74:c8:f3:6a:b0:ac:d2:9c:d2:98:67:96:8e:
5c:0c:af:ca:28:57:98:0e:6c:38:fc:bd:8d:b9:0c:
9c:8a:af:2d:28:31:20:b3:b7:ba:35:07:8d:e2:5f:
e2:30:72:b5:2f:3a:79:63:f8:fb:48:44:01:a4:a3:
09:51:69:92:dc:dc:04:61:d1:92:67:1f:1a:45:e3:
c0:37:f7:c1:57:db:fd:b6:51:1e:83:87:a8:97:7b:
6b:d0:a7:23:c9:3f:24:ef:2b:40:cf:87:10:39:46:
c7:94:06:94:0c:7c:95:0a:a7:60:c0:c3:44:5d:4c:
ef:57:9f:c8:65:23:e1:61:68:4e:1b:d9:3c:53:2c:
22:fe:a4:25:3e:28:72:33:8e:e0:c3:8d:5e:29:4f:
39:5c:f0:8a:be:33:ae:13:d9:72:1d:a5:73:d8:ec:
7f:35:7a:53:10:69:d7:f3:82:27:14:0c:1e:b8:68:
77:0d:d5:90:f3:77:39:8b:d4:75:79:98:99:8f:d6:
b7:35:d7:12:53:71:6e:19:f3:9c:18:3b:91:72:a5:
0d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:F5:CD:D6:32:62:B4:47:2C:88:7E:44:62:46:E5:0C:BB:0F:0E
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:0e:be:e1:e7:04:ef:a6:d9:e3:00:e1:55:a8:7e:de:dd:
e2:a6:fd:cb:f3:a8:e8:35:95:b1:b7:e5:c0:de:4a:f8:55:9b:
b3:9e:a6:0d:05:02:e0:77:65:90:66:1e:75:a2:e4:27:b8:54:
38:9e:05:a4:8e:aa:6b:22:e4:15:19:d9:44:4a:da:3f:15:49:
c6:37:83:8d:e6:e6:14:dd:07:a3:6e:ca:cb:1a:ee:72:0a:a6:
4d:d8:b4:57:4f:2d:39:97:58:a1:9e:8e:df:a9:55:59:70:e7:
e3:37:c7:5f:96:2a:cb:c6:e4:28:d2:ba:ea:29:a3:a2:54:f2:
b9:85:d0:4d:25:b0:9a:ed:6c:77:76:f6:95:ba:a1:c0:60:53:
4a:ef:e6:c2:11:f2:1b:9e:2b:0b:59:8c:0a:14:0c:9e:30:11:
69:1e:3f:20:c3:f7:b1:d4:1d:d4:3a:c5:21:c6:5b:50:7c:36:
32:f6:02:b6:47:80:29:56:03:49:37:4f:c5:08:55:3a:c1:8d:
81:cf:3e:cd:cc:e6:14:b7:f8:18:07:33:7f:8d:93:62:87:ba:
2c:6a:dc:c7:31:f5:a6:12:8d:5c:85:c4:1d:92:19:ac:72:d1:
16:30:59:52:a5:9f:25:81:82:28:0b:29:99:93:a8:8f:84:ef:
e2:03:42:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:55:13 2026 by rpki-client