Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: Q8D7a+O+o69lrENILD/psJMFHnXZHydy2ABaBD1mSkY=
Subject key identifier: 5A:EE:0E:A0:28:2A:0B:35:83:36:D2:A4:CE:21:36:CC:56:70:6F:74
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019E1DFE0EACEE3FCA84C4534C8CA5063F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0CB3
Signing time: Tue 12 May 2026 21:00:49 +0000
Manifest this update: Tue 12 May 2026 21:00:49 +0000
Manifest next update: Wed 13 May 2026 21:00:49 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: alN+qQGYD4had9dnSpqI71NjL1ensK/X8BBRO0IW93M=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0e:ac:ee:3f:ca:84:c4:53:4c:8c:a5:06:3f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: May 12 21:00:49 2026 GMT
Not After : May 13 21:00:49 2026 GMT
Subject: CN=5aee0ea0282a0b358336d2a4ce2136cc56706f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:14:cd:d9:04:a9:46:1e:48:e8:20:63:d1:
1d:67:0a:c2:38:73:4e:cc:4e:00:bd:2f:1c:00:c6:
f1:37:de:b5:2f:6b:cf:8d:ee:14:36:cc:a5:4f:62:
9f:8e:0c:47:e0:0d:ca:03:e4:a2:d9:00:43:73:55:
b4:59:de:8d:46:35:96:d1:2d:0b:a7:fc:0a:ab:fd:
8a:cc:fc:b8:e8:ef:aa:92:b6:ac:66:a3:8d:0f:17:
f8:48:34:48:45:7a:30:08:4c:9d:53:3f:cd:74:49:
1f:f8:4d:65:36:5e:be:de:07:a3:23:6f:7b:b3:f6:
91:cb:94:e7:5f:e9:93:79:ef:27:9e:37:0a:8a:a8:
c9:40:82:de:3f:af:6e:34:40:5b:5a:10:89:43:3c:
96:0d:00:f8:e1:7a:7a:c7:7c:4f:7e:05:d5:7e:0b:
a5:40:f4:cc:54:19:50:2c:1e:b8:b8:9d:3a:54:b6:
07:b7:4e:dd:6a:4d:29:fd:de:35:22:45:5f:10:db:
f9:c6:67:ac:8b:12:6f:bc:a8:97:fc:29:14:bf:6a:
d6:bc:89:6e:e3:d8:0b:27:76:d1:ff:20:49:80:43:
50:be:6a:6e:92:dd:79:79:28:35:81:2c:f4:34:f1:
11:26:74:ac:30:0b:04:0e:56:e2:f1:13:a6:bb:85:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:0E:A0:28:2A:0B:35:83:36:D2:A4:CE:21:36:CC:56:70:6F:74
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9e:8f:85:74:35:71:4d:53:84:e8:ba:3b:a8:b8:ac:8d:0b:
ea:a1:6f:33:22:17:7d:30:49:e8:37:6e:f6:83:75:89:1a:73:
92:0b:f7:05:e8:89:81:90:3c:b6:c3:a8:50:08:65:85:c6:cb:
3d:6e:00:c4:6c:5b:b3:8b:ff:65:b7:62:73:a3:1a:85:aa:61:
97:27:e0:22:29:0f:a6:66:7f:50:2b:95:24:86:3f:a2:8f:52:
80:d8:3d:7f:55:8e:3f:19:70:86:dd:13:a6:f3:d1:b0:6d:51:
0d:df:34:e3:92:85:6a:c0:3f:a3:3c:0e:9e:aa:0b:5d:80:69:
89:6f:09:eb:24:a7:43:32:ad:b8:45:cb:f8:28:e0:4b:fa:fd:
ce:11:27:ed:ac:67:37:da:ac:93:80:f2:dd:03:27:92:e5:ae:
ab:e7:ef:db:57:07:75:7a:ee:d5:81:d9:49:7b:75:0e:1a:ff:
cd:6c:36:f7:43:e7:45:4f:f9:00:b8:c1:41:5f:a0:29:4e:5c:
92:24:bf:31:8f:5e:14:5b:16:75:99:f7:69:b7:0f:7b:ab:ba:
ad:0a:56:56:48:e8:b8:04:c4:8c:38:af:4e:8d:70:b9:30:14:
77:6d:43:bd:e1:2c:bd:e9:63:f6:2d:15:b2:06:87:ad:c6:a1:
ca:c1:d9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:24:32 2026 by rpki-client