Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: qYZRqUv4GVNtvY3qnPo43IR8scAGhwADo1K/YPCvQOE=
Subject key identifier: A7:17:A8:B2:0C:D1:21:DD:62:99:5D:9C:24:F8:22:D2:EA:4C:6A:8E
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 019E1EA3342CF7835C95E0C98BDE6D908046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0E20
Signing time: Wed 13 May 2026 00:01:12 +0000
Manifest this update: Wed 13 May 2026 00:01:12 +0000
Manifest next update: Thu 14 May 2026 00:01:12 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: uuCJSJTmgNeJ1HDz6KzYozpTFKRdLO+m1tmqhIaPveU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:34:2c:f7:83:5c:95:e0:c9:8b:de:6d:90:80:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: May 13 00:01:12 2026 GMT
Not After : May 14 00:01:12 2026 GMT
Subject: CN=a717a8b20cd121dd62995d9c24f822d2ea4c6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:c6:9a:8e:67:f8:9b:60:08:07:48:aa:1d:
d3:14:5b:96:93:d2:b5:6b:ef:9d:a2:17:b9:67:2e:
89:b8:61:2f:4d:25:25:2c:87:ab:d0:b3:ac:eb:3a:
6c:b4:7a:42:6b:76:60:32:61:21:58:56:dc:d0:96:
ea:bd:ee:f6:71:77:5b:88:55:ac:89:48:d3:8e:fa:
c1:26:09:2b:98:53:2b:a0:53:bc:8f:e5:60:f9:ba:
b5:03:98:5e:bb:e9:ca:0f:8f:98:01:ae:3e:c3:a3:
97:38:03:d0:2b:84:3b:72:b5:54:d5:c1:9e:81:5c:
4d:b0:09:8b:53:43:c3:bb:bd:71:25:80:86:e8:99:
6c:f8:aa:ae:35:dd:7a:b1:ed:25:f7:e1:51:f6:20:
24:6e:60:03:9a:72:74:49:76:26:61:d6:28:57:2c:
47:3f:b8:3d:9b:f2:8c:c9:f4:53:06:1a:bd:71:d5:
1d:00:e7:2e:97:c8:b3:4a:52:77:80:7e:63:2b:c8:
ca:c4:8a:86:81:18:cd:b1:94:33:82:e6:6f:e4:07:
e5:26:00:3c:e8:25:91:8a:05:f4:24:d8:8b:7a:69:
9f:07:f9:07:d8:59:95:b4:3f:13:8f:b6:4b:52:b9:
a8:8d:0a:fb:7b:17:0c:18:0a:c5:cc:9d:79:69:0b:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:A8:B2:0C:D1:21:DD:62:99:5D:9C:24:F8:22:D2:EA:4C:6A:8E
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:72:33:c8:df:7c:91:d3:cd:1f:5b:e0:17:68:d0:0e:53:f5:
73:44:5f:70:85:af:1b:09:bb:98:69:60:c8:cb:b2:b8:91:ad:
c5:e2:70:69:d3:95:bb:9a:13:f9:85:1f:89:52:75:80:e8:e5:
d7:8f:c0:d8:8c:11:d6:30:4b:b2:7b:9e:1d:05:d6:07:ad:08:
91:9d:28:13:be:7c:06:a9:dd:91:6e:1b:83:ac:a5:7b:84:bf:
bc:a3:20:75:81:cf:3b:0e:95:0c:d2:27:bf:50:f0:fe:2f:4f:
7f:4a:44:76:c7:51:10:a8:be:f8:02:c4:f7:0e:6d:1f:18:83:
c0:5d:86:83:bb:f1:98:03:bf:d5:c5:a9:6b:b8:ef:40:da:1b:
ec:4a:37:4e:d0:2c:9a:3e:5f:3a:42:ee:05:7f:53:4d:a2:2c:
ec:1b:c0:68:36:3c:02:ae:a0:6c:6a:b4:57:dc:47:f3:c6:84:
37:73:b8:7a:f8:4e:b5:32:37:9b:72:13:c1:4c:3b:d6:63:42:
3f:97:c5:2c:80:57:4e:2e:ff:06:6a:e7:1c:83:fb:8f:3b:ff:
63:c7:43:9c:79:e8:1d:6a:03:3d:d1:57:5e:f7:18:72:4b:15:
73:46:46:24:ba:95:54:b3:c9:be:2c:cb:01:da:69:e8:f6:9c:
51:33:5d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:37 2026 by rpki-client