Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: LN2zg33I4vV21+atkDvQn+T26D51AQGK5P55qoog0IM=
Subject key identifier: 3E:CD:C9:C0:90:16:EB:02:D0:33:25:BC:63:23:11:48:BF:EC:8F:32
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 019E1FEC43C64D5D81FD3772D7585F5D4175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 0AB5
Signing time: Wed 13 May 2026 06:00:37 +0000
Manifest this update: Wed 13 May 2026 06:00:37 +0000
Manifest next update: Thu 14 May 2026 06:00:37 +0000
Files and hashes: 1: HPjdErKX1660Wu5s3Fbu_90wV10.roa (hash: XoWOK8TjiKV/F4rH7IzW3ugdSSR8xjGdlOumvhasewI=)
2: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: QUNz3v60SnmTSIxBQ2bkSI6IIm93s7XRfJ0cUzXnI3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:43:c6:4d:5d:81:fd:37:72:d7:58:5f:5d:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: May 13 06:00:37 2026 GMT
Not After : May 14 06:00:37 2026 GMT
Subject: CN=3ecdc9c09016eb02d03325bc63231148bfec8f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:28:16:ac:93:f5:78:a3:5d:25:8c:4d:78:6e:
9e:84:47:f5:06:e1:4b:2f:b0:39:ac:82:45:d4:2f:
0a:9a:f7:83:72:d2:5d:b6:e7:b4:f9:84:40:ef:32:
06:52:2f:14:0d:48:ae:84:4e:3e:a6:20:2d:e2:33:
e8:01:1c:91:fa:f9:45:83:de:bc:c6:0d:35:75:8f:
70:01:39:3e:4d:ac:6c:4b:30:ac:08:6c:cf:93:49:
a4:74:32:2d:89:37:27:d3:aa:eb:0c:2b:4b:c2:89:
ec:1f:bd:55:bc:de:f5:1b:89:ce:38:76:64:50:b2:
8c:7f:a2:44:cd:b2:a5:32:1b:89:76:e1:ce:0c:0a:
30:c4:80:78:1b:2a:46:a7:30:ef:07:97:5d:36:62:
61:04:d9:64:fa:55:d3:39:15:ba:7b:d1:9b:1f:0f:
c1:35:e3:32:62:77:b2:d2:04:b3:ec:93:f0:e6:ca:
15:e8:30:79:2c:31:57:2e:62:3f:2e:06:79:e8:17:
47:37:7d:7e:79:5c:b2:67:52:c4:39:2b:ce:9c:13:
70:b4:16:7c:30:8b:20:0d:1d:5c:19:32:80:3a:5e:
15:51:a1:8f:3b:e6:38:36:93:fc:50:d8:c3:10:fe:
55:1b:4c:e9:3b:6f:14:59:4d:76:d0:ec:87:c5:55:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:C9:C0:90:16:EB:02:D0:33:25:BC:63:23:11:48:BF:EC:8F:32
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:35:0c:5a:8c:95:0b:1a:42:cf:bb:48:cb:8a:b7:f5:0b:37:
55:d2:4c:b5:0f:f3:99:3e:b0:ac:62:84:e9:8f:7d:73:92:f7:
c0:aa:e0:9b:6f:51:a5:1f:7f:20:ee:79:ad:c9:43:77:c3:6f:
46:c5:85:2d:87:a0:3b:b4:01:bf:80:63:fb:f6:31:da:24:d6:
73:62:b8:00:66:18:4a:1f:e6:1d:9a:f0:4f:5a:d7:c9:dc:7f:
93:72:c0:c1:d5:56:5a:f9:89:c7:28:d3:84:63:1b:05:d1:19:
5f:64:6d:67:7c:83:8c:06:25:f5:33:6a:98:2c:76:43:d7:57:
0e:80:bd:51:e1:ca:03:45:0b:16:8a:ea:5d:b3:17:f8:d5:d7:
df:9c:dc:66:46:d0:f4:39:ad:43:24:d9:28:0d:1c:87:66:4f:
bd:f3:65:f7:e8:52:ad:3e:9d:90:d8:6f:05:06:a1:58:6b:88:
6f:32:4e:24:6d:41:1d:8c:ec:3e:80:87:f3:8b:9c:c4:3b:ac:
40:db:26:96:39:57:fe:8a:a6:45:c7:76:3a:39:e8:ab:5b:1a:
4a:c1:4a:a6:1d:46:11:06:b2:28:9d:c9:6f:a0:2b:9d:9e:8f:
b8:46:31:1f:ce:8d:d4:1e:5b:15:7a:b6:a9:92:c6:5c:9c:2b:
c2:48:1b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:44 2026 by rpki-client