Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: l2mBaVSM17vht55mFdlNE2Y0Wf7oLVpcBzYu8teccHo=
Subject key identifier: CF:E7:7A:E6:EC:EB:25:7B:89:36:3F:FB:2F:26:9B:29:F2:FF:B1:32
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 019E1D90312E30EE0E9C837491F3748F7D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:00:49 +0000
Manifest this update: Tue 12 May 2026 19:00:49 +0000
Manifest next update: Wed 13 May 2026 19:00:49 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: PWEN+db+9AljeebO82jbYrb1yp0OipK8JVm2OwfyRO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:31:2e:30:ee:0e:9c:83:74:91:f3:74:8f:7d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: May 12 19:00:49 2026 GMT
Not After : May 13 19:00:49 2026 GMT
Subject: CN=cfe77ae6eceb257b89363ffb2f269b29f2ffb132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:18:13:26:19:30:06:f8:87:a3:bb:e6:a1:
ab:14:90:f4:2a:41:91:4c:91:7f:51:6a:0c:3d:ab:
be:43:38:46:db:2a:70:78:67:81:6e:aa:0c:df:b8:
fd:0f:05:8e:d7:0e:c1:84:48:39:86:3e:e1:c0:85:
af:14:e3:d7:27:dc:f3:5a:d8:42:b1:e3:26:96:65:
39:5f:34:5d:4e:ed:1c:4c:07:bb:7f:1e:0a:cc:d8:
49:c4:9c:a8:4b:15:77:66:5c:25:1a:91:cf:24:71:
06:51:bd:63:dd:f9:55:cf:f4:e4:80:25:d1:21:42:
12:64:2e:36:87:93:75:62:ab:a0:dd:85:33:65:cb:
47:ca:86:af:e0:e2:02:c1:27:a0:b0:e4:c2:de:91:
b2:f3:f4:23:78:60:7b:ed:9d:1f:43:8c:57:2a:c5:
91:b8:fe:77:f5:52:49:1f:3b:78:b5:3c:49:7e:52:
7f:5a:f2:d6:d4:d7:6d:ea:67:57:59:ed:34:a3:18:
54:4b:21:72:8d:b4:78:01:ad:f0:30:da:64:08:16:
ee:ba:2d:a4:fe:ad:14:2f:d4:b9:f9:28:03:e4:19:
2b:87:83:68:d7:cb:d7:7d:70:95:d9:41:0e:63:8a:
7b:58:62:62:ec:00:64:c1:95:28:a7:17:a7:18:0c:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:7A:E6:EC:EB:25:7B:89:36:3F:FB:2F:26:9B:29:F2:FF:B1:32
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:65:be:a1:b0:f1:6f:fb:3c:3d:bb:22:a2:a5:8f:a2:23:
35:60:51:34:e8:ab:53:1d:ed:e4:bb:b2:13:25:f9:c4:87:01:
c6:f6:2e:3e:b2:e0:2b:ed:fa:7d:12:b6:12:cc:cf:d6:ed:12:
e5:ac:08:68:25:3e:c6:c6:4d:f5:89:1d:2e:a8:83:55:6a:39:
a9:02:e1:51:7b:c6:d5:bf:09:a5:07:52:0a:4e:9d:0c:07:19:
a4:0d:f7:a2:95:09:c7:1d:28:e1:da:47:71:97:7c:ba:8e:0b:
74:ab:99:01:4f:13:80:ed:b0:af:b2:e5:9b:45:ad:16:a7:8b:
92:24:04:14:bc:14:e1:1e:c0:38:79:86:8a:66:2f:4c:39:43:
47:ff:7a:30:41:6c:77:8e:c6:03:46:ed:0b:e7:3f:58:9e:10:
90:c4:6c:79:8f:6b:02:ae:01:d8:f6:18:f4:37:4d:e4:e9:fd:
fd:e3:8d:6b:69:28:f9:b4:3d:6d:e5:82:c6:19:cf:94:5c:27:
15:f4:34:29:81:db:d6:0c:e2:f5:21:fa:2a:5e:de:c0:92:88:
fc:0e:8a:f7:e3:c8:db:c9:5c:b5:fa:af:b2:84:de:09:64:29:
0b:08:5c:70:1f:3e:ad:43:97:c7:df:bd:11:bb:27:84:c6:0b:
e0:8d:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:57 2026 by rpki-client