Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: YTfLCqQhwZ+Yr7gklvtENsic7fvlIcZdUQWx+DCrZpc=
Subject key identifier: 07:E1:BB:10:F7:A7:73:E9:5B:4A:EB:73:5A:B6:FE:8F:57:B2:08:E0
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019E1DC71254D11DDDB3BCAE61E8BACDE7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 058A
Signing time: Tue 12 May 2026 20:00:45 +0000
Manifest this update: Tue 12 May 2026 20:00:45 +0000
Manifest next update: Wed 13 May 2026 20:00:45 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: aejodry1i6RZRdU7gg3HC/Gt0/Pi7sRV+491MOZI880=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:12:54:d1:1d:dd:b3:bc:ae:61:e8:ba:cd:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: May 12 20:00:45 2026 GMT
Not After : May 13 20:00:45 2026 GMT
Subject: CN=07e1bb10f7a773e95b4aeb735ab6fe8f57b208e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:00:29:df:72:bd:4e:6b:0b:c5:30:bb:da:
62:57:68:e5:25:48:19:db:27:91:cf:80:7d:ff:d6:
33:e6:6c:75:76:f2:dd:a2:e5:bf:79:48:1d:ab:0f:
d5:17:5c:4d:2c:d1:86:38:96:d4:e6:16:09:32:d6:
89:87:b4:95:06:55:ff:1a:13:b3:fc:39:9a:26:bd:
92:59:b4:48:3a:d4:1b:9d:e1:24:c8:05:71:ad:0a:
16:5a:f5:9c:17:0b:1b:74:5c:f7:46:6b:d3:01:50:
76:30:e3:d1:7b:f4:cb:6a:71:fd:c4:07:63:ab:7e:
61:d6:83:2b:1f:1c:8a:4f:9f:fa:e5:2a:03:29:5d:
b7:f4:55:55:a3:09:47:d2:01:4d:a2:e8:45:d5:54:
ed:3b:a8:79:3b:ec:33:65:ce:9e:6f:38:10:67:85:
c6:d2:ca:61:2d:97:62:34:48:e4:5d:cf:97:c4:25:
9b:5a:90:6f:f9:95:51:09:13:00:2e:c6:05:a9:d8:
4a:d6:3f:19:a5:3b:ea:89:af:04:9d:6e:39:b6:11:
bc:4b:98:07:3e:75:87:02:e7:cc:0f:99:59:ba:ce:
34:a4:09:0c:bb:e8:2a:2f:6c:1e:4d:80:b9:da:37:
14:b9:74:e1:0b:53:55:5e:56:71:24:27:c2:24:15:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:BB:10:F7:A7:73:E9:5B:4A:EB:73:5A:B6:FE:8F:57:B2:08:E0
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8a:28:a3:ea:54:b8:89:12:4a:98:c3:a5:36:e5:83:1b:26:
67:a2:37:1d:94:f3:dd:80:e0:b9:b1:55:b7:18:8a:2e:44:06:
45:78:0b:1d:de:1e:e2:69:0d:b3:97:6b:9b:82:7d:13:bc:ee:
89:d1:47:ea:15:71:8c:50:37:e6:7d:b9:c9:1b:a2:0c:af:55:
33:86:27:6b:9a:7b:7c:9a:5a:d0:83:8f:22:88:24:ff:65:60:
5a:b4:96:99:c2:fe:b5:a3:70:9d:b7:48:6d:14:b3:6f:2e:ee:
81:d7:b9:26:05:da:b2:65:49:db:7d:fc:88:bd:a0:ea:f7:eb:
13:83:e3:1b:a9:8a:bd:61:7f:5e:5b:61:53:ac:87:07:60:01:
57:59:21:08:ff:cc:09:39:05:0a:42:f1:1f:88:59:f1:98:c7:
0c:4d:5e:c8:3e:62:9d:fc:40:24:6d:d7:2e:0a:ab:91:0e:3d:
61:ea:b5:1e:01:96:f1:76:e5:6e:3f:54:4d:62:c4:c0:f5:79:
51:8f:e7:20:2b:bd:24:83:e5:89:1e:c4:6b:cc:2b:6f:ec:9d:
6b:6e:3d:c3:a4:b5:0b:87:e7:25:ee:5d:cc:16:17:5e:43:eb:
7b:10:95:5f:35:a5:15:40:58:85:46:5c:2a:6c:83:d0:c4:9b:
b7:0d:2c:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxxJU0R3ds7yuYei6zefvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYmIwYWQ3NzY1NjEzOTUzYjkyYjZjYmY0Y2RhOTNmOWMx
MzcyZTYwHhcNMjYwNTEyMjAwMDQ1WhcNMjYwNTEzMjAwMDQ1WjAzMTEwLwYDVQQD
EygwN2UxYmIxMGY3YTc3M2U5NWI0YWViNzM1YWI2ZmU4ZjU3YjIwOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e0AKd9yvU5rC8Uwu9piV2jlJUgZ
2yeRz4B9/9Yz5mx1dvLdouW/eUgdqw/VF1xNLNGGOJbU5hYJMtaJh7SVBlX/GhOz
/DmaJr2SWbRIOtQbneEkyAVxrQoWWvWcFwsbdFz3RmvTAVB2MOPRe/TLanH9xAdj
q35h1oMrHxyKT5/65SoDKV239FVVowlH0gFNouhF1VTtO6h5O+wzZc6ebzgQZ4XG
0sphLZdiNEjkXc+XxCWbWpBv+ZVRCRMALsYFqdhK1j8ZpTvqia8EnW45thG8S5gH
PnWHAufMD5lZus40pAkMu+gqL2weTYC52jcUuXThC1NVXlZxJCfCJBXpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfhuxD3p3PpW0rrc1q2/o9XsgjgMB8GA1UdIwQY
MBaAFAO7Ctd2VhOVO5K2y/TNqT+cE3LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTIt
ZDc1ODI1ODliYjU5LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iZDllNTUtZDIwYS00MjU5LWI3MTItZDc1ODI1ODliYjU5
LzEvQTdzSzEzWldFNVU3a3JiTDlNMnBQNXdUY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4ooo+pU
uIkSSpjDpTblgxsmZ6I3HZTz3YDgubFVtxiKLkQGRXgLHd4e4mkNs5drm4J9E7zu
idFH6hVxjFA35n25yRuiDK9VM4Yna5p7fJpa0IOPIogk/2VgWrSWmcL+taNwnbdI
bRSzby7ugde5JgXasmVJ2338iL2g6vfrE4PjG6mKvWF/XlthU6yHB2ABV1khCP/M
CTkFCkLxH4hZ8ZjHDE1eyD5infxAJG3XLgqrkQ49Yeq1HgGW8Xblbj9UTWLEwPV5
UY/nICu9JIPliR7Ea8wrb+yda249w6S1C4fnJe5dzBYXXkPrexCVXzWlFUBYhUZc
KmyD0MSbtw0sUg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:26:39 2026 by rpki-client