Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
File: MN0LcIUOH5iVZY7avii52NnqAXw.mft (raw, json)
Hash identifier: bnzE/baiymiDR5oZ4RgbhWsBOUV66QwSZxubtZ6S5dQ=
Subject key identifier: EA:BD:3F:92:1E:0B:D7:EF:93:AF:47:A6:5A:93:F9:89:45:F4:98:74
Authority key identifier: 30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
Certificate issuer: /CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Certificate serial: 019E1EA31B6F2766130D57D9C87446F9E4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:06 +0000
Manifest this update: Wed 13 May 2026 00:01:06 +0000
Manifest next update: Thu 14 May 2026 00:01:06 +0000
Files and hashes: 1: 1S2bZZj9qdyRRB7nR_b4PQ0z1Sw.roa (hash: u9ro5Rvo3czSNujsVQtq0Ez7XFyuHSIaTIk3k7PO73o=)
2: MN0LcIUOH5iVZY7avii52NnqAXw.crl (hash: Ladd8KMZxctgmjBDT7ctwDCkF1t8sbRt41shpa9qIb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:1b:6f:27:66:13:0d:57:d9:c8:74:46:f9:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30dd0b70850e1f9895658edabe28b9d8d9ea017c
Validity
Not Before: May 13 00:01:06 2026 GMT
Not After : May 14 00:01:06 2026 GMT
Subject: CN=eabd3f921e0bd7ef93af47a65a93f98945f49874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f7:74:60:b2:4f:50:ad:5d:4b:cb:4a:23:03:
f7:f8:8b:51:82:6c:a4:ff:27:d5:19:5e:e2:95:a1:
cd:b6:4a:a3:c8:98:f8:f2:6d:c5:00:72:ec:54:05:
2f:a3:b8:e4:9e:76:90:b4:09:db:35:76:b4:7b:d3:
d8:0e:56:57:74:0e:b4:6f:d6:1f:bd:b9:e5:66:1e:
0f:1b:b9:99:c2:f7:e4:cf:4e:19:80:ea:39:f0:f7:
b7:c9:1e:70:63:71:8d:f6:50:6a:e2:a1:7e:f9:37:
b1:a4:ec:49:4a:e0:20:ec:af:25:de:61:50:b2:bf:
8c:6b:ad:99:16:a3:09:9e:18:bb:01:86:d7:10:32:
5a:b9:55:b3:b9:7e:6c:31:49:3a:c0:3e:9c:8b:14:
40:3f:41:bd:72:61:34:e8:15:bd:fa:0d:e8:92:c7:
7e:80:82:cf:4e:67:b8:1c:f0:6d:a7:ed:6d:d9:22:
04:9d:86:ef:34:d3:23:60:90:c3:68:b1:59:38:dc:
12:48:ff:a5:dd:8e:42:eb:7e:1d:bf:c0:ee:71:fc:
3c:02:5f:1e:7f:e0:fe:09:af:6c:81:58:78:e1:e0:
8a:70:0e:da:44:b8:03:2c:5b:96:4b:1f:5c:e5:46:
d1:07:8a:13:1a:8e:42:ea:6d:69:9e:c3:8c:43:14:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BD:3F:92:1E:0B:D7:EF:93:AF:47:A6:5A:93:F9:89:45:F4:98:74
X509v3 Authority Key Identifier:
keyid:30:DD:0B:70:85:0E:1F:98:95:65:8E:DA:BE:28:B9:D8:D9:EA:01:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN0LcIUOH5iVZY7avii52NnqAXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/MN0LcIUOH5iVZY7avii52NnqAXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f7:1d:63:88:57:c7:42:37:12:c9:79:c4:c1:45:c9:f3:44:
8e:4f:c3:8a:bc:51:8e:25:13:9a:d5:d5:ec:94:f9:39:10:9b:
81:6b:02:bb:e6:51:4e:73:8b:69:9a:74:36:42:2e:b5:67:07:
dc:1d:97:3c:86:6d:64:0c:ae:97:63:ac:ae:80:01:ab:f7:fd:
33:a9:24:9e:b1:00:f6:ce:1f:80:5e:bc:b2:16:fb:d9:52:44:
f3:0e:70:99:ed:62:3f:42:f5:2e:85:4a:59:74:2a:df:dc:4e:
ca:06:07:b7:f2:f7:24:40:b9:0f:62:86:77:ce:14:fe:cb:73:
db:e1:83:2e:e7:84:df:04:bf:1f:b3:74:f0:b1:0c:8c:bf:3f:
72:70:62:a4:84:26:89:42:fe:53:4c:cd:92:4c:0c:df:aa:54:
8f:3f:91:c9:5d:87:ae:1c:86:ad:a4:e0:26:61:49:c0:37:1f:
c4:87:3c:e0:a4:4c:12:16:4b:59:1e:0f:60:1d:a7:bb:70:1f:
26:0a:33:d7:c8:3a:0b:93:37:8e:d0:92:03:cb:08:04:3e:5a:
ba:23:f8:b2:ab:7b:1a:13:c6:cf:a8:0b:d9:ed:dd:cd:0c:ef:
29:1b:40:0e:fc:a0:12:1c:66:86:11:90:69:09:7e:1c:b2:0e:
22:bf:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:01 2026 by rpki-client