Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: OuklSRzsdSYHPN6PfjLjtYZeTX+q1NwUcJ+/CEIToyI=
Subject key identifier: 93:24:4C:4B:27:7F:75:4C:12:BC:19:C6:62:9E:A2:B6:0E:FD:3F:3F
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 019E1D904FA0C11EDBEA9FACC9D868385C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 086A
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: HlFzm-zahAFjRHtl1bHeIsDoPDc.roa (hash: osKIkxfPFsY8+sDd/0d/lLUvdIHTe/QQACWaNNkv5qM=)
2: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: okw0Qk9XXbtxTOTiNOSpabYy0G6fY8X4idVgzgD4wiM=)
3: wFhxeOIRYZRjHE_NR_YMO7VFyJ4.roa (hash: Fmj1myi/dimk9BjIvdN9tLy/wytpW18VOOMvrJoUFtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:4f:a0:c1:1e:db:ea:9f:ac:c9:d8:68:38:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=93244c4b277f754c12bc19c6629ea2b60efd3f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fd:a6:c7:e2:56:ef:23:8f:5d:9d:56:27:f9:
27:6a:91:bd:03:9a:a5:8b:61:f7:73:b9:43:02:39:
97:ef:ce:00:6d:9f:1d:09:0a:4e:30:3c:27:43:5e:
bb:f5:14:9f:6c:01:65:40:a9:10:ca:0c:a4:1a:7d:
49:9b:80:cb:e9:23:ef:c1:06:75:f3:90:17:6c:14:
47:5d:ba:d4:0c:99:fa:20:2b:e9:5a:f9:12:cf:7e:
9a:3f:a9:b3:90:8e:7b:8e:10:3b:55:6d:e4:da:13:
ac:e3:a8:16:9f:9b:5b:5c:73:f8:1f:f3:e2:16:2f:
59:ad:c9:21:cc:10:1b:1e:8e:27:7e:57:fe:a7:ca:
70:c2:5d:f2:84:9c:40:c5:46:e2:92:5a:b2:f2:ff:
5f:c6:50:28:86:55:d3:26:2e:ff:f6:6c:db:cc:bb:
bb:93:54:34:9e:30:b2:40:0a:3a:37:15:49:91:9a:
31:16:81:5d:8a:34:67:4e:4a:ec:2e:d2:2c:97:6b:
41:41:1b:22:7a:58:9d:7c:fd:02:33:aa:0d:86:b9:
52:c5:5c:8b:53:a3:33:16:b4:56:42:d0:bb:4c:b0:
a7:3a:1e:01:ae:47:bf:c8:e2:e0:41:19:b4:b3:a2:
81:6b:aa:ea:67:76:83:d3:cf:59:cd:83:56:45:c8:
b6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:4C:4B:27:7F:75:4C:12:BC:19:C6:62:9E:A2:B6:0E:FD:3F:3F
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3f:47:46:60:80:b9:18:09:51:28:a4:b7:05:10:b3:64:40:
b5:c9:18:5a:0b:ed:51:fc:30:ba:04:ca:51:4b:80:95:cf:54:
9a:f1:0b:fa:db:6c:17:76:67:db:9b:75:ff:38:74:a8:63:9b:
21:70:75:72:bf:fd:cb:8f:79:cf:e1:65:64:8f:5e:4e:d3:c5:
8f:6b:b4:6d:fd:4e:d9:78:46:32:6d:cb:cf:97:c9:99:e3:c7:
93:3e:8f:20:8e:2a:98:f3:d9:20:8a:0c:05:07:26:90:e8:33:
f7:4e:76:0d:fa:93:4c:6c:80:64:56:9c:a2:09:f0:19:22:37:
eb:9e:85:d0:80:7c:58:7a:4c:6a:0f:2c:12:9d:50:06:2d:f9:
42:78:a2:6b:ee:67:7a:c7:9e:a1:d4:42:2b:30:7b:df:f4:aa:
f3:e9:a9:4b:11:c4:49:74:1d:ce:4b:10:96:08:04:24:9e:e3:
ac:29:40:0d:08:05:1d:93:a5:25:60:bf:b7:ae:28:9c:b1:60:
1b:4a:7a:4f:78:dc:6d:91:92:76:d5:ad:ee:3b:7b:f9:b4:b5:
03:72:37:74:61:7c:1b:a8:d6:47:c2:8f:3f:aa:61:cd:51:91:
3c:8c:e9:f6:ab:b6:04:fd:8b:23:9c:f6:5e:b6:b0:fb:13:24:
22:8d:7d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:05 2026 by rpki-client