Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
File: RKiGN0mLGI_AvOrgu_BoF2GknUs.mft (raw, json)
Hash identifier: oecTLJRfm0ZenYRsCUNkPWduJB0/2Vsek6qLmeZRneg=
Subject key identifier: BD:1E:DD:B9:D2:DA:C2:47:1C:A5:47:7B:65:75:82:65:4F:16:9A:F4
Authority key identifier: 44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
Certificate issuer: /CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Certificate serial: 019E1D231229BCF34A9BE402E28271019CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
Manifest number: 1058
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: IlmmCphtbxCSj-g8MGUHlc5fMJI.roa (hash: ogImPjEXfsHsVXyMK+YnBJnOYbD+aI/1HsAtRVA/WoY=)
2: RKiGN0mLGI_AvOrgu_BoF2GknUs.crl (hash: XIJf82KSpIx4ldcS7fBfkE1P0TZqI19zwwiWjPHpFU4=)
3: hdC4Kn8NS6Sap65oEbc6C4-8rkI.roa (hash: shJCpeavm5lRb/pX8j4NjPSwHatzb8Ath7/zQC9o4/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:12:29:bc:f3:4a:9b:e4:02:e2:82:71:01:9c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a88637498b188fc0bceae0bbf0681761a49d4b
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=bd1eddb9d2dac2471ca5477b657582654f169af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:ba:90:06:c6:67:ef:be:79:e2:76:3e:51:
8e:e1:46:ea:67:17:46:d9:49:2c:c8:26:af:fa:52:
02:ab:e1:84:42:38:81:40:ab:1d:c5:38:5d:13:f2:
01:37:ca:75:48:92:09:4e:78:df:6f:31:13:8d:85:
ce:d4:b3:31:32:31:9f:c5:d9:85:2e:d1:df:f0:a7:
81:39:2f:67:f4:d4:d6:94:e4:04:0a:55:5a:c7:e2:
58:8a:0c:87:a2:eb:84:95:17:4e:eb:76:63:9f:2f:
a6:af:c9:60:33:d6:46:ea:c7:94:db:d2:37:a1:1f:
ea:be:9f:7e:6b:de:8f:84:71:43:4b:9e:1a:d9:cb:
8d:ed:cb:5b:90:17:22:61:de:ac:18:78:77:39:9e:
4a:8d:fa:bf:ed:89:07:e5:00:5c:c4:08:d5:95:f5:
11:76:9a:ad:c3:92:9a:b3:25:3d:71:88:bc:0d:5f:
d4:6f:e7:7d:7d:70:f4:c9:7a:d2:69:09:e6:d5:a6:
8d:e6:7a:e9:68:ba:75:80:3e:fa:5a:96:ad:78:68:
02:38:4b:ca:87:8c:d5:4d:c7:ad:0b:56:c0:23:f5:
46:09:83:47:8a:d7:86:0b:0f:f7:76:d3:67:75:f8:
a9:58:13:d2:4e:30:59:14:53:8d:f6:f4:31:8d:d2:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:DD:B9:D2:DA:C2:47:1C:A5:47:7B:65:75:82:65:4F:16:9A:F4
X509v3 Authority Key Identifier:
keyid:44:A8:86:37:49:8B:18:8F:C0:BC:EA:E0:BB:F0:68:17:61:A4:9D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKiGN0mLGI_AvOrgu_BoF2GknUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5be80b-3382-4448-a1cc-dca04270b9d5/1/RKiGN0mLGI_AvOrgu_BoF2GknUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f6:4e:4b:3c:ae:8f:d1:b6:78:77:8d:30:75:5f:07:d6:a0:
2d:a0:4b:fb:f3:c1:fb:bd:15:86:c7:1e:7b:df:51:0a:67:00:
74:09:2e:c9:45:0b:ae:d3:29:e7:22:47:44:fb:f0:08:07:cf:
64:53:12:4a:60:0b:c4:03:da:e5:76:8f:5c:64:8e:84:4a:1e:
c1:28:aa:6e:e5:df:2f:1a:a8:a1:2b:eb:96:8c:70:e6:4e:f2:
89:b8:11:09:c4:84:e0:1b:57:91:52:94:db:3f:0f:2e:6b:c6:
7f:1b:2b:df:42:59:38:57:23:69:8d:75:4b:54:9d:6f:7b:71:
b4:cb:05:07:a7:56:be:9c:65:96:58:aa:b9:f8:d3:82:cc:c9:
b3:2e:ff:4c:ee:b0:1f:02:c2:e6:c6:42:c3:87:5b:24:9a:d0:
eb:60:01:b5:7a:14:ba:68:27:dc:19:ae:47:3c:53:14:98:5c:
6e:0c:3b:89:f5:0f:72:d1:9e:be:68:db:e6:ca:92:9c:8d:34:
99:ae:a2:45:82:c6:1b:1c:16:19:3d:84:c2:36:fb:a4:3f:7b:
5e:a5:5d:c8:29:8a:d7:5f:39:e3:77:0a:74:39:ca:f2:0b:0d:
6d:61:c8:dc:65:06:16:f3:54:53:ee:db:ed:95:58:d8:ad:77:
b7:5d:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:19:13 2026 by rpki-client