Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: /T63inb2KgyW57c585ShutUhvf6fNOYsNbR5KQd7muo=
Subject key identifier: 70:7F:83:A2:90:F0:46:67:C6:61:6D:7D:CE:E1:B1:51:6E:40:F6:40
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019E205AB3E256C30F8ACEB167A6A91A7649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0BD5
Signing time: Wed 13 May 2026 08:01:15 +0000
Manifest this update: Wed 13 May 2026 08:01:15 +0000
Manifest next update: Thu 14 May 2026 08:01:15 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: cdTuWmLxhFZCSg/CUG3yXo6Fj82bPOFG1DhblNVo3KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:b3:e2:56:c3:0f:8a:ce:b1:67:a6:a9:1a:76:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: May 13 08:01:15 2026 GMT
Not After : May 14 08:01:15 2026 GMT
Subject: CN=707f83a290f04667c6616d7dcee1b1516e40f640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:2b:be:5d:78:b7:ae:53:dc:03:8c:db:50:
d5:c1:2f:dc:39:1b:f3:d9:cf:1c:f3:e7:d4:df:82:
01:7c:d6:43:c6:c2:08:8a:e7:f9:aa:da:47:e7:f8:
3b:34:c1:bb:2b:2a:76:81:4a:44:01:ff:06:35:6f:
64:99:6c:ce:0c:f9:33:a2:a2:65:a6:c3:cf:31:a1:
5b:22:09:bf:e5:d9:2c:2b:5f:04:6f:1c:30:9f:67:
11:e9:e9:24:9d:62:2b:f1:ba:6f:6a:d7:13:52:19:
48:97:67:01:70:17:a5:f1:6c:d9:1c:07:41:34:9c:
96:e5:b2:00:2a:16:2d:b9:90:51:0b:c3:8d:25:10:
b2:e8:91:38:10:59:cf:e0:98:ca:f4:be:ad:dd:42:
63:aa:34:48:c9:e8:2d:b8:a9:48:57:4e:2c:38:74:
4c:f5:ca:2f:c4:18:ef:9f:26:20:97:c1:19:55:98:
48:12:5f:3c:71:c3:2a:01:7c:0f:a8:3b:2a:15:44:
f1:97:ca:ce:f1:a9:0c:69:c8:dd:30:f9:be:e5:c2:
cc:bb:e4:4e:2f:6f:7e:a4:d6:76:d0:3e:f5:51:f6:
6e:9e:83:b8:8d:b7:ba:c0:15:e9:23:f0:3e:c9:3d:
1a:0d:9a:02:af:17:ee:3c:dd:33:3b:4b:c5:ed:cd:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:83:A2:90:F0:46:67:C6:61:6D:7D:CE:E1:B1:51:6E:40:F6:40
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:42:12:fb:57:89:7c:5e:2d:fa:8e:0c:7a:83:7f:a6:fc:
cd:e5:27:b3:09:59:a9:42:ee:ee:89:45:86:17:a0:4f:62:a1:
f5:bb:01:63:8a:1e:69:e1:a5:ee:ec:41:d3:e7:05:29:b2:5e:
9d:21:03:a9:78:d0:db:b8:d5:0a:8a:32:de:f3:98:c9:18:02:
3c:55:ed:b4:a9:d7:e4:db:36:8e:2a:8d:72:f6:d6:e1:83:17:
c1:08:27:9c:20:51:e8:09:30:33:bb:8e:3c:b2:b0:fd:81:b9:
bb:1b:95:b1:8e:6b:5b:1f:b1:52:7e:0e:07:64:47:ae:16:ae:
2e:ed:12:83:a9:7b:7c:6c:b0:55:4a:36:eb:43:be:d0:93:6d:
d1:d2:83:4b:67:b6:38:fd:5a:e7:ab:6c:e4:52:3a:a3:5a:e9:
2b:be:88:4c:e9:45:ba:78:66:4d:e9:32:75:7b:5d:55:d4:a6:
91:8b:34:6d:98:21:4a:8e:75:bd:20:43:c5:aa:8a:50:65:6b:
cd:87:55:47:8f:44:12:ad:f2:82:68:92:1d:7e:cb:eb:c3:e5:
21:c5:ed:60:9e:ee:1b:f0:f4:74:b0:1a:0c:f4:2f:89:db:6b:
12:6f:20:6a:61:e4:69:a1:c9:3a:95:df:cd:a1:dd:bb:07:e4:
27:27:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:12:13 2026 by rpki-client