Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: L9TlQ4//U2c7GaF5m+dVy3prLWzIzoLYs3cwRw/Zqig=
Subject key identifier: A6:31:07:17:16:93:7E:B4:1B:F2:2F:15:18:A5:14:A3:66:55:0F:60
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019E1DC78AA1AEF291228D6E68DEDED135DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 167D
Signing time: Tue 12 May 2026 20:01:16 +0000
Manifest this update: Tue 12 May 2026 20:01:16 +0000
Manifest next update: Wed 13 May 2026 20:01:16 +0000
Files and hashes: 1: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (hash: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU=)
2: YCngamdKmrL7RtnLOsCOvdmjrwU.roa (hash: xwesi5tZd9dA95ma72FCibPLwuYV0Ls74wsQh7Krag0=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: lCeSx5jNndAZTASc8jYj/niUzmS2meZ5DzxmCIAVCmc=)
4: xYUdIY0z9xKFX5ufCiqZob2LPK0.roa (hash: nFxhIHiYHhqKXMN0ILHetz/JCzJHXnOEztqoKdJ2imI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:8a:a1:ae:f2:91:22:8d:6e:68:de:de:d1:35:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: May 12 20:01:16 2026 GMT
Not After : May 13 20:01:16 2026 GMT
Subject: CN=a631071716937eb41bf22f1518a514a366550f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:72:2b:b8:d3:77:7c:5a:94:7c:82:5d:1c:
64:ee:01:a5:e5:bb:ee:39:b8:eb:1f:cb:81:95:78:
41:f8:9a:df:c8:44:3e:80:fc:ee:b2:4d:38:c3:29:
39:91:42:7e:11:bb:de:d9:4e:e8:e9:e5:63:68:95:
9e:0f:66:e6:0f:65:07:a3:3c:69:15:98:e6:65:ac:
e1:41:21:6a:bb:c3:fb:9f:e4:5f:11:7e:cd:da:9f:
7a:81:a4:25:d9:b7:d8:65:28:71:17:c3:ab:d1:8c:
eb:76:b1:d1:73:26:b9:30:c9:bc:24:e8:01:59:84:
81:77:c0:1f:e1:fc:cc:2a:90:7d:4b:04:22:6f:35:
03:44:22:94:84:92:ef:e8:7c:6f:75:91:1e:3b:27:
d5:72:90:59:37:9c:73:13:4f:ec:bc:02:60:b0:ed:
e2:e0:ad:b4:7e:3f:21:13:3a:4f:fc:ca:a5:8d:d9:
6a:fe:38:0b:26:c3:69:93:d3:c9:bd:88:e0:b4:07:
cc:be:23:f9:ad:86:de:be:1a:fd:10:05:79:b7:88:
74:95:d7:4d:2b:67:80:b7:00:46:4b:f9:e1:d8:2e:
c7:14:e2:63:71:aa:d4:a6:5b:36:18:13:4e:90:05:
74:10:18:36:73:36:76:35:92:3b:7c:32:02:9b:ba:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:07:17:16:93:7E:B4:1B:F2:2F:15:18:A5:14:A3:66:55:0F:60
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:17:b7:3c:75:0c:89:11:0a:5e:4c:1d:98:03:9b:09:73:13:
6a:fb:e1:a7:2f:70:94:5a:1e:86:8f:54:24:e7:59:86:44:88:
10:f9:05:69:c5:bc:e9:57:52:8b:b3:0d:ad:21:0b:9f:5d:ca:
ec:c5:57:ce:f4:55:66:ea:16:68:34:a3:72:e7:51:df:3f:0c:
de:15:61:f5:96:a7:29:9d:9f:db:8c:1f:f1:be:cf:3c:7b:d3:
6e:32:be:c7:4a:e3:bc:05:aa:3c:ff:51:a7:06:f4:16:9a:53:
fd:ef:8a:21:13:9d:0a:21:c9:d6:73:01:e1:0f:35:93:51:ab:
89:b9:8c:03:d5:ad:53:7f:cc:bb:e6:1a:3b:51:8f:18:6c:24:
45:62:87:11:37:27:e7:be:b4:0e:7e:f1:f7:18:23:ba:91:48:
b2:bc:ae:68:5f:d7:fb:ef:75:a9:ef:20:6a:a4:7a:a0:99:5d:
2b:69:22:ec:cb:83:38:f1:84:d4:82:4f:77:eb:be:ad:d0:97:
2e:3e:37:1f:03:53:cc:e8:a2:4d:59:1c:fc:40:75:08:a6:75:
cc:a7:0b:29:68:98:e8:36:da:03:cb:6e:03:e5:ee:fe:41:6b:
89:be:9d:7e:bd:ce:35:2b:ad:b0:9a:1e:2e:a1:14:ac:a8:5d:
98:72:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:26 2026 by rpki-client