Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: gtXzho+IKe8aTLi4hDoEuF6W96hrn+3ONmqGs6g2QRg=
Subject key identifier: DA:4A:D6:52:66:9B:0B:1E:B3:91:77:C4:ED:08:3C:F2:EE:94:13:98
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 019E21DAB628B8F8BF0A34E65D4642B9275B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 15:00:42 +0000
Manifest this update: Wed 13 May 2026 15:00:42 +0000
Manifest next update: Thu 14 May 2026 15:00:42 +0000
Files and hashes: 1: ACMwaAvueA5hj2k5vPo_qhJ133c.roa (hash: cdrRftiXvx3VVL7eXRerOEoJNGRyUrwNZfHdITSoxdk=)
2: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: hob85N1Slo+ghq/Yb1cwXmeWX8PKs96zpMmItfrD55o=)
3: jnbKsQGegNxjdm1zgvtf-2y2JHU.roa (hash: f0JFyB2CkMNujvorViUmIgNxI65wDl2h0L0eKcz8mXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:da:b6:28:b8:f8:bf:0a:34:e6:5d:46:42:b9:27:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: May 13 15:00:42 2026 GMT
Not After : May 14 15:00:42 2026 GMT
Subject: CN=da4ad652669b0b1eb39177c4ed083cf2ee941398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:b5:6b:1e:58:51:08:53:2b:09:22:3b:0d:
60:6b:d6:d5:50:75:b6:69:65:99:79:b5:5b:e3:c4:
f6:e6:c6:32:47:87:5c:5b:89:59:ea:a5:1e:d0:81:
58:f5:97:0f:34:85:ab:93:ff:cc:bc:d5:f0:70:ad:
36:61:21:b0:b8:2d:3e:2e:e0:c0:81:d7:24:ce:a3:
41:75:92:3f:d1:ff:c7:5a:aa:55:fe:c2:4a:13:4e:
36:c2:e2:e6:21:6f:21:e4:d8:d9:ab:6d:d0:d1:d9:
7f:e7:d1:f8:c9:fd:d5:9a:b7:6d:d6:91:4a:cf:64:
02:7a:3e:df:30:2b:fe:ae:59:b2:36:d1:9e:1a:a6:
20:7a:ac:d7:83:1f:e0:f4:57:a4:84:2b:45:ad:a8:
10:62:13:b9:4a:b3:dd:58:6f:f3:66:23:92:e9:22:
00:af:71:3a:34:98:39:7f:ba:62:7f:1c:97:e2:08:
73:11:ec:52:50:c6:27:4a:07:43:49:0f:32:ce:55:
7d:eb:cf:c1:e3:14:07:e0:66:f1:e2:5e:3a:45:9d:
ff:7a:7e:c8:f1:66:41:7f:08:a2:e5:ae:8a:54:06:
8c:5f:e8:7a:29:47:25:3b:04:d1:fc:fc:2c:0c:12:
cf:69:41:cf:54:55:28:c6:40:7f:f7:47:03:e9:94:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:D6:52:66:9B:0B:1E:B3:91:77:C4:ED:08:3C:F2:EE:94:13:98
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d8:87:b1:8a:67:ec:9c:14:bb:29:27:ef:aa:4e:2e:5e:00:
79:72:51:6c:bc:21:30:16:a2:c2:c3:97:05:4a:38:91:64:e4:
50:e2:41:f9:4c:cc:a2:99:b8:f1:2c:09:e8:6f:87:e0:38:49:
72:d4:65:fd:8f:c9:47:80:57:13:fc:b8:bc:2a:09:f8:50:0a:
4f:39:fa:05:62:88:39:d2:3e:55:b0:e1:f8:5b:0a:da:25:29:
22:27:92:10:58:ba:5e:38:41:6b:c2:fa:7d:2f:bc:ba:fb:de:
01:e1:83:b1:16:14:c1:ff:67:e2:72:f2:b3:f6:2f:18:1b:42:
a8:11:49:3f:99:f6:84:f8:ce:f0:02:6f:94:52:76:bc:8f:03:
6f:d4:e5:e2:b5:00:f4:46:d0:05:0a:67:b1:7c:d7:74:25:69:
4e:a2:7d:7d:e3:da:97:2a:04:aa:0e:e9:84:de:c2:c5:8d:1e:
92:b9:3d:c6:21:4a:b4:9e:f5:25:a0:38:29:9c:9f:3c:e5:12:
6a:76:f5:0e:94:46:68:89:f7:84:c2:80:d2:35:fe:bd:e5:d2:
3e:84:fc:5c:04:2a:96:89:54:8e:84:81:f9:28:65:b7:be:8b:
77:c7:1d:32:60:7e:37:6c:2c:68:ad:33:bc:a2:2f:45:77:b3:
eb:4b:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:55:34 2026 by rpki-client