Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: MGYEhz+owPolvwFBkMVgWDi+0D2IRZ4e3DryKTgpg/g=
Subject key identifier: 90:05:C1:A3:9A:A0:96:96:9D:8A:9D:51:B8:4D:44:17:5B:45:8C:8E
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019E1E361104D6FA9E924275C5DCB2B8DBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0D21
Signing time: Tue 12 May 2026 22:02:00 +0000
Manifest this update: Tue 12 May 2026 22:02:00 +0000
Manifest next update: Wed 13 May 2026 22:02:00 +0000
Files and hashes: 1: 16srEBoxiiP_SLONARpHEy8GOoo.roa (hash: +6A67bqXKJfVetajXvC/jcqmg3rLZdsfP1x5JHp+/TM=)
2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: v8kcJfHJDaRBnkrdAR8L+GK8JIz7DCS6Cd607D51Aa4=)
3: fERV_JWJtZ06djuribfR-EanimI.roa (hash: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=)
4: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (hash: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:11:04:d6:fa:9e:92:42:75:c5:dc:b2:b8:db:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: May 12 22:02:00 2026 GMT
Not After : May 13 22:02:00 2026 GMT
Subject: CN=9005c1a39aa096969d8a9d51b84d44175b458c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:97:f4:7b:bc:f8:bf:1c:4f:11:04:df:d9:
14:e9:5f:b0:c8:77:93:25:65:b7:8c:e8:57:2a:2c:
08:10:4e:ef:d0:57:03:90:a4:b5:55:ec:49:2f:12:
9b:14:8a:88:a9:5a:b6:f0:be:58:de:7a:42:97:c2:
50:c4:03:6b:14:bc:25:8d:35:6f:34:e6:d2:fa:5f:
a7:13:9f:07:1f:97:76:ee:fe:99:04:24:c5:c1:6c:
44:f8:45:55:a6:99:15:80:a1:e5:8c:a4:8f:ee:df:
ba:c9:41:aa:71:8a:e6:ea:aa:3d:74:0d:14:5f:2f:
d9:72:a4:f2:f0:69:60:2a:0c:84:f9:c5:b8:92:5e:
31:fe:58:9f:cc:70:f5:4a:f6:3b:ee:4a:ff:53:56:
9e:2f:ec:85:91:8a:1f:ed:98:67:2d:fd:14:09:eb:
e9:5d:43:47:38:6e:8d:9a:03:53:cc:6e:66:d2:f2:
89:29:0a:ad:88:8f:60:3e:72:01:f6:79:c2:4b:7e:
e8:4e:b3:85:86:81:f6:2b:3c:63:b6:b7:7b:9e:da:
d8:4b:61:43:c3:e2:e4:8f:2a:13:08:81:e8:be:33:
eb:1c:93:d5:4a:4e:9a:fe:92:4c:4c:90:e8:6e:e5:
0f:e9:60:3d:c6:17:b2:04:31:8b:ba:9e:48:95:a4:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:05:C1:A3:9A:A0:96:96:9D:8A:9D:51:B8:4D:44:17:5B:45:8C:8E
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:1f:32:52:90:cb:56:23:50:e5:52:e2:f1:fd:52:9b:bd:
27:01:b8:81:1c:6e:01:e3:f5:f0:59:88:e9:a8:0e:ca:60:31:
9f:0b:dd:07:dd:1c:0c:cf:2c:6c:33:e1:4d:d8:51:2e:ab:1f:
b1:fc:ee:20:5c:48:1d:5c:e7:27:83:0c:72:e7:77:15:bd:3b:
d7:82:98:93:d3:85:78:40:21:9e:8d:3f:23:27:a5:25:ae:c3:
59:ba:6c:19:1e:d7:b9:7c:9c:bb:75:44:4f:de:6b:0a:0c:08:
f3:a7:4a:3d:a7:29:6d:63:fa:30:ec:45:d0:c2:05:18:7b:16:
46:ff:dd:99:ce:6d:d2:91:4f:f2:7e:ed:cc:46:2b:97:bf:39:
14:e5:e4:f5:d6:ae:53:74:7f:47:e6:8d:6e:83:6d:27:52:3c:
cc:6d:b7:93:37:b8:a4:71:b1:ee:64:59:26:e3:80:b8:2f:57:
ba:3f:e5:78:14:61:ac:74:07:de:2b:a9:5a:40:8b:17:b7:02:
ff:c5:69:32:09:15:e2:dd:80:1d:67:05:ba:e1:ed:9e:a2:a7:
4a:9e:65:68:d3:5f:75:70:96:f4:52:14:64:90:b7:18:dc:b1:
a7:9a:7f:b0:63:0a:0d:1f:ed:67:1b:88:9f:d9:8d:8c:d5:4b:
09:6e:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:21 2026 by rpki-client