Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
File: pTi7DCtB76jDsCBk68UvupLCNiY.mft (raw, json)
Hash identifier: 9WEdzbXzQbM71rRK7JHy/MCweN/SRMsxRr/qy1Mmvrk=
Subject key identifier: 5A:D1:EE:EB:C8:29:C5:A7:14:5F:9F:23:D2:0C:7A:34:8C:4F:A1:56
Authority key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Certificate issuer: /CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Certificate serial: 019E1CEC0AB7E9460D0F31A839AF1A7D779B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
Manifest number: 14F0
Signing time: Tue 12 May 2026 16:01:31 +0000
Manifest this update: Tue 12 May 2026 16:01:31 +0000
Manifest next update: Wed 13 May 2026 16:01:31 +0000
Files and hashes: 1: CPVxDc_aZPt8p2hD-fQ5EY3ek5w.roa (hash: YSCCvnapCyu6BSWmfyyXkWgH96EnMt+2gyVUr+pHUOM=)
2: cxSAbl9AGDjuAytpRHVKIsDfitI.roa (hash: 6VeXR5AotX5hFxSi1IUjWsyHhQBxezCmfN4HLADcz8c=)
3: pTi7DCtB76jDsCBk68UvupLCNiY.crl (hash: bGKkAnB0BZTd8Hh8eV6kCq5EAY1Yt7qiSGFDxmfh2vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:0a:b7:e9:46:0d:0f:31:a8:39:af:1a:7d:77:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Validity
Not Before: May 12 16:01:31 2026 GMT
Not After : May 13 16:01:31 2026 GMT
Subject: CN=5ad1eeebc829c5a7145f9f23d20c7a348c4fa156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:dc:73:1c:d4:74:62:4d:f3:08:6f:97:fe:
36:bb:6f:6e:41:24:94:31:d2:54:16:8f:cc:97:6f:
51:e9:c1:78:16:20:db:f8:fe:e4:99:cf:e7:ed:dc:
76:f9:09:9b:cc:3d:da:7d:30:a2:b1:7f:2a:ba:39:
8c:5b:93:c2:51:59:a8:16:d1:9c:43:cc:7e:ca:92:
cb:fd:38:b6:f3:a4:84:e8:d8:21:f8:13:81:3f:dc:
b4:36:0d:8d:27:10:50:a1:31:dd:bb:95:52:82:cf:
a9:66:19:4d:1e:a7:af:3e:0b:9e:26:6a:97:ad:7c:
63:1f:d1:bb:ed:0a:2b:e1:a3:20:fa:a9:34:22:19:
90:c8:cf:49:c7:08:72:73:f9:37:36:ac:65:6c:a8:
b5:5b:14:87:53:b8:8d:b9:44:58:e8:b5:b2:39:63:
83:6d:21:6c:32:a7:2c:9f:75:3d:95:07:5a:3c:93:
f9:2a:10:fd:d5:cd:40:62:9c:9a:37:9e:19:0a:dc:
00:cc:45:a7:32:e2:f9:71:c3:dc:4a:4b:2f:70:7a:
d8:0b:50:dc:bc:2b:38:43:28:67:05:7c:d1:20:e6:
dd:0d:47:45:7b:ff:2a:35:95:00:09:60:18:56:80:
ae:4d:8b:89:a0:2e:a4:c5:85:48:9b:a0:aa:2c:6b:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:EE:EB:C8:29:C5:A7:14:5F:9F:23:D2:0C:7A:34:8C:4F:A1:56
X509v3 Authority Key Identifier:
keyid:A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:f1:5c:0e:54:7e:e4:1b:c1:4b:4f:ff:65:bd:50:9d:ff:
d2:9f:39:ed:8d:01:20:eb:c8:6d:4c:b9:dc:ff:ce:16:69:56:
be:e6:d2:67:74:9d:ac:ac:f5:14:05:df:9d:4a:13:2e:39:ed:
5a:1f:6b:d7:b9:bf:e7:6a:7d:b3:34:58:2d:f1:03:e5:6b:33:
36:1a:53:40:40:cf:67:07:bc:26:6f:63:8e:d5:b7:2a:9a:67:
02:27:2d:23:d4:bc:8e:1a:3d:4e:25:a3:5e:f2:87:a9:6f:37:
01:99:a5:0c:4e:38:4a:d8:05:78:80:40:94:3c:66:93:a4:1d:
32:55:e9:75:f6:42:25:39:69:1e:0a:04:ba:4a:77:8e:9f:09:
5f:ef:70:76:da:67:79:1a:ef:c2:26:0e:35:a1:84:e2:94:61:
7c:92:e7:a5:d0:52:3c:92:73:f6:7e:27:ef:19:b3:a5:b1:44:
50:34:a9:74:69:29:39:9b:81:58:0d:a8:ae:7d:a6:a1:70:3c:
14:7a:b9:dd:1d:62:8c:28:26:ec:c3:fb:67:56:cb:6e:dd:db:
ba:96:c1:d2:11:fa:47:5a:21:bb:17:cc:68:0d:50:84:1f:4e:
b6:a2:ab:76:e1:e0:4b:7e:f3:fd:3a:fb:75:88:bd:3d:f8:06:
bb:41:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:07 2026 by rpki-client