Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: rQ6YsZ1qCxObCOzK4O9vPPnPgnPQHcFBTZ8K5MwJn5M=
Subject key identifier: 65:FB:EE:F5:D7:F7:78:9D:F5:9D:E4:D9:3C:21:C8:D2:B6:6B:18:6B
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019E202420507236EA76561FD214EFAA67CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 07DD
Signing time: Wed 13 May 2026 07:01:38 +0000
Manifest this update: Wed 13 May 2026 07:01:38 +0000
Manifest next update: Thu 14 May 2026 07:01:38 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: NPVmrHT79KFazFuQcU0y2JsYsNll4xHY8iB7KxOldcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:20:50:72:36:ea:76:56:1f:d2:14:ef:aa:67:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: May 13 07:01:38 2026 GMT
Not After : May 14 07:01:38 2026 GMT
Subject: CN=65fbeef5d7f7789df59de4d93c21c8d2b66b186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:89:c2:87:b0:eb:ff:46:f8:0e:f4:07:75:
8f:06:56:20:8d:bf:18:28:14:51:75:47:f6:c7:5a:
43:b3:03:4e:0f:14:94:f7:18:ae:18:64:e4:f6:07:
05:50:a3:ed:05:59:15:e1:e6:b6:86:33:af:6d:89:
67:ed:16:87:40:52:05:b4:1c:e8:91:76:6b:2b:68:
3e:1c:da:d0:64:8d:9e:7b:f0:0e:6d:c2:d7:f4:e3:
bc:54:fa:ee:ca:7a:19:fa:53:0a:51:95:78:36:ed:
b7:63:c3:76:ae:03:14:fa:9f:41:e5:28:17:89:95:
33:24:9c:31:88:cf:88:10:f0:6b:46:32:7e:25:e3:
fb:36:cb:40:c5:f1:3b:61:2e:59:ac:e1:ee:f5:76:
34:51:87:83:49:8c:b0:3f:39:1e:78:1b:86:0c:7b:
af:83:b8:0c:0b:6f:aa:cc:93:87:34:72:f6:31:1f:
fc:d5:46:07:f7:71:ee:5c:3f:12:c2:d4:3b:c6:46:
cf:6d:7d:d0:09:82:71:60:02:63:bd:c3:63:b7:c6:
fe:9e:80:62:eb:3e:78:13:51:2e:a4:7f:c4:37:95:
7d:39:27:f7:54:e9:9b:14:d1:f8:15:79:3d:6e:bf:
62:45:c7:9d:00:ad:24:d6:7f:95:05:07:3f:6d:06:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FB:EE:F5:D7:F7:78:9D:F5:9D:E4:D9:3C:21:C8:D2:B6:6B:18:6B
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f9:8b:aa:e4:44:2b:9b:4b:5c:3e:12:7e:51:75:b5:4b:b2:
51:c1:5c:15:84:41:66:89:49:c7:e6:4e:b4:90:86:28:2b:a2:
52:f1:19:63:f6:7f:a5:b7:86:4b:26:f5:ba:b9:05:3d:ea:96:
e8:ce:bf:ad:03:13:22:b0:15:2c:88:0f:f3:09:84:18:4c:a2:
13:24:27:47:79:fb:56:25:98:61:fa:b7:b0:bf:b8:7b:42:b8:
a5:ca:c2:9c:9b:21:f0:75:c2:81:ca:25:9c:d6:c8:b2:cd:f0:
d9:82:35:5c:43:1a:6e:1e:91:c6:f6:3a:bf:25:53:e7:b9:b6:
78:f3:01:ed:34:67:39:87:39:e8:07:52:25:ab:44:61:db:3c:
69:b4:9c:24:b9:c5:78:c6:e5:a8:b3:ee:ea:b3:5c:da:f0:14:
0a:00:a1:26:88:5d:e6:14:fa:75:a3:ef:96:a1:8f:f5:db:43:
d4:46:0d:07:51:15:71:3a:4a:e7:fc:2b:36:b5:bc:79:a2:e1:
df:46:77:50:84:82:85:c9:b4:69:96:ab:80:f0:c4:04:6a:9b:
5e:78:fe:6f:8d:80:38:e9:f1:90:43:0c:5a:5b:41:df:33:c5:
d8:96:b6:8e:cf:dd:9a:eb:06:f0:d5:85:7e:06:e5:2c:8f:a1:
06:e0:6f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJCBQcjbqdlYf0hTvqmfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MjExODY0MTNiYmRmZGUyMGU1OTJmYmU1NTUzZGU3Zjk0
ZTU5ODcwHhcNMjYwNTEzMDcwMTM4WhcNMjYwNTE0MDcwMTM4WjAzMTEwLwYDVQQD
Eyg2NWZiZWVmNWQ3Zjc3ODlkZjU5ZGU0ZDkzYzIxYzhkMmI2NmIxODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf6Jwoew6/9G+A70B3WPBlYgjb8Y
KBRRdUf2x1pDswNODxSU9xiuGGTk9gcFUKPtBVkV4ea2hjOvbYln7RaHQFIFtBzo
kXZrK2g+HNrQZI2ee/AObcLX9OO8VPruynoZ+lMKUZV4Nu23Y8N2rgMU+p9B5SgX
iZUzJJwxiM+IEPBrRjJ+JeP7NstAxfE7YS5ZrOHu9XY0UYeDSYywPzkeeBuGDHuv
g7gMC2+qzJOHNHL2MR/81UYH93HuXD8SwtQ7xkbPbX3QCYJxYAJjvcNjt8b+noBi
6z54E1EupH/EN5V9OSf3VOmbFNH4FXk9br9iRcedAK0k1n+VBQc/bQYgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGX77vXX93id9Z3k2TwhyNK2axhrMB8GA1UdIwQY
MBaAFKYhGGQTu9/eIOWS++VVPef5TlmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYt
ZjU2Yzc3OWIxNDJmLzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wMzk2YWQtZGRhNy00NjAwLThmNjYtZjU2Yzc3OWIxNDJm
LzEvcGlFWVpCTzczOTRnNVpMNzVWVTk1X2xPV1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/mLquRE
K5tLXD4SflF1tUuyUcFcFYRBZolJx+ZOtJCGKCuiUvEZY/Z/pbeGSyb1urkFPeqW
6M6/rQMTIrAVLIgP8wmEGEyiEyQnR3n7ViWYYfq3sL+4e0K4pcrCnJsh8HXCgcol
nNbIss3w2YI1XEMabh6RxvY6vyVT57m2ePMB7TRnOYc56AdSJatEYds8abScJLnF
eMblqLPu6rNc2vAUCgChJohd5hT6daPvlqGP9dtD1EYNB1EVcTpK5/wrNrW8eaLh
30Z3UISChcm0aZargPDEBGqbXnj+b42AOOnxkEMMWltB3zPF2Ja2js/dmusG8NWF
fgblLI+hBuBvCg==
-----END CERTIFICATE-----
Generated at Wed May 13 17:02:57 2026 by rpki-client