Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: IeS0Dcq1diOmorVIyi7Pz3mnnkUJAyfDuRq3P2AyZf4=
Subject key identifier: B5:AD:34:03:FE:C8:DF:A1:B3:00:79:AF:2A:E6:19:58:FA:FE:B1:A4
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 019E1DFE3A7B38597183854CD442FCDC4872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:01:00 +0000
Manifest this update: Tue 12 May 2026 21:01:00 +0000
Manifest next update: Wed 13 May 2026 21:01:00 +0000
Files and hashes: 1: GAjXHoY_7fmDzbj9H9Uc6m8T6p8.roa (hash: EkPjSmD4j4Tlx7uZB0Hl4Pvd/i8ecVQc5MnBSe4X3KM=)
2: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: VNDV+T4RamKP9VuhvqjgncciCEeXprQpePQh7Ki/1iE=)
3: ztgFzTNfEVT3y4KjWAVdD6rV_ug.roa (hash: p5G0iO/ni16aCpdoZzR7W6j0r+kLy8M2fpyoJ34V+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3a:7b:38:59:71:83:85:4c:d4:42:fc:dc:48:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: May 12 21:01:00 2026 GMT
Not After : May 13 21:01:00 2026 GMT
Subject: CN=b5ad3403fec8dfa1b30079af2ae61958fafeb1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:58:94:be:09:a3:9d:43:39:2d:ee:ba:47:
a6:65:ce:4e:66:79:d7:0c:d3:c6:fd:9d:f8:38:ec:
6b:51:4f:18:f6:fa:11:c3:69:b1:8a:7a:1f:01:bc:
b4:cb:b1:dc:a0:f1:b9:9c:f7:ca:ad:68:70:41:80:
4a:55:a1:e1:7b:dd:6e:5f:de:14:f4:4b:f0:d1:25:
fc:f3:a6:f9:21:db:25:7b:06:29:bc:b0:bc:3c:57:
e7:a8:81:1f:3a:02:27:72:bc:b5:83:ac:49:ca:e2:
ce:9f:99:53:8b:41:63:cb:77:f0:56:e5:03:49:c6:
2c:0d:d0:c4:85:87:b8:d7:e6:4f:bc:9b:a4:58:05:
c5:36:ac:93:42:3f:80:6a:97:0d:45:1e:07:73:90:
c4:e3:28:e2:64:50:6b:9c:cf:f6:6d:9a:ba:58:2d:
ac:6d:21:67:a0:4c:07:d8:cc:41:1c:18:77:13:34:
92:54:55:75:b8:fa:be:6c:b0:6d:54:4b:57:43:99:
32:b3:4a:b4:53:18:8b:5f:a7:c5:58:a0:58:5f:ac:
e8:c1:df:fa:2b:4a:ca:f6:d4:af:49:fa:7c:40:2b:
71:ec:02:23:25:64:e0:fc:9c:64:f0:4f:dc:53:ef:
75:ad:37:4d:58:f7:92:fd:ed:eb:57:55:18:68:19:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:34:03:FE:C8:DF:A1:B3:00:79:AF:2A:E6:19:58:FA:FE:B1:A4
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e7:37:23:44:59:5a:03:c6:15:db:a4:55:c9:80:72:0c:c4:
0e:a6:26:42:e0:0d:8d:50:af:87:db:05:0a:14:0d:ca:5c:08:
96:8e:f2:1a:eb:fc:cb:36:0e:05:d0:a6:a9:22:db:b4:49:d5:
cd:dc:b4:16:6d:15:88:a0:18:07:61:c0:27:a4:e1:61:10:1c:
8e:7b:3c:29:a0:7f:42:f1:f4:9d:be:60:49:63:2b:9c:eb:5d:
19:b8:10:60:5b:cf:6b:cc:61:7f:40:6c:7c:4e:da:9f:18:40:
27:7e:64:99:cc:6e:f0:4e:ea:59:fa:a7:11:ca:42:71:9a:3d:
56:38:ed:4a:48:80:47:7c:9b:38:49:e1:1a:a9:3b:28:84:9d:
a5:a6:a6:6d:0f:e7:a9:18:06:5f:3e:af:36:21:6f:89:8f:1f:
b5:86:41:c5:0c:b7:5b:99:2f:3e:03:00:59:b3:25:5c:2a:66:
6e:13:b5:05:b6:df:cf:8a:5d:60:58:1f:13:1c:63:ac:71:c5:
d9:59:ff:a0:d7:d5:85:27:c4:83:bb:eb:5b:4b:8c:dd:ff:40:
dc:57:bb:ba:f1:25:8c:74:e7:bb:be:77:f5:80:93:5c:fa:0c:
a7:83:7a:d4:a4:66:04:93:87:63:90:ab:52:71:24:48:60:79:
3d:9e:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:32 2026 by rpki-client