Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: q7NwL+W+NVU39t26mqGCLQbC51FjWJraCYwW8SzQHBA=
Subject key identifier: 71:BD:65:26:D7:1E:3F:76:EA:D8:41:D0:6B:54:06:F4:DF:42:8C:D7
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 019E1E35D6F913FDC7AFA34DD40962ACA745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 0CB2
Signing time: Tue 12 May 2026 22:01:45 +0000
Manifest this update: Tue 12 May 2026 22:01:45 +0000
Manifest next update: Wed 13 May 2026 22:01:45 +0000
Files and hashes: 1: 41uTXUE3-Tyf_FkkFMPgrkYthMo.roa (hash: 9Aolk2ywdWY79USk6tBgdgUvgIQSTS6ltMiW7geqE8M=)
2: R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa (hash: JOhc4+TJAT9y3euT9g0kxLqAA+8lYprveqxEcA29tPI=)
3: WVWzNQBj7seo8FjvmhSj1kI6sP0.roa (hash: LoWAtshb113BC94Wt1I33mRTXma6WTQ9kgqJ5YaRPcM=)
4: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: mPV3vmyMFGZRiwB2tJdreGXZucc82g/fR0w1ke0q47A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d6:f9:13:fd:c7:af:a3:4d:d4:09:62:ac:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: May 12 22:01:45 2026 GMT
Not After : May 13 22:01:45 2026 GMT
Subject: CN=71bd6526d71e3f76ead841d06b5406f4df428cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:fb:55:a7:39:bf:32:03:ce:81:30:af:f8:
8a:f5:06:b2:e4:c5:d0:1b:d7:55:15:ef:95:96:7c:
46:97:11:7e:19:db:46:45:ef:fb:f2:a1:40:be:f5:
c6:4f:de:d7:b8:8f:40:ab:78:d6:d4:74:ec:24:77:
64:11:d2:8c:1b:57:21:01:4b:50:d2:50:d4:f7:16:
5a:97:25:67:c8:e9:d5:a0:4f:fc:0b:46:f8:7f:30:
89:25:ee:d1:b2:d9:ea:2b:1a:8f:df:61:5e:9e:5b:
6b:9f:58:90:de:aa:af:3e:3a:94:57:ca:2a:a1:9b:
21:22:34:1a:30:a7:1c:dc:5f:1f:aa:cc:ea:5e:86:
2f:35:30:7e:2d:cd:26:05:51:e5:3c:1e:b6:8b:82:
2a:fd:ae:33:58:a1:b0:95:c4:3a:65:dd:dd:a0:e6:
b9:49:47:7f:21:5e:00:74:64:a2:c3:4e:d9:34:e9:
fe:1a:8c:21:f9:26:08:59:48:85:5f:69:b3:a0:7d:
61:ec:80:9c:bb:eb:4a:dd:e3:d9:ad:62:86:42:a1:
6b:6c:32:64:ce:18:92:4f:2a:3e:80:5a:09:e7:9c:
2c:f6:c2:de:34:38:8a:54:fb:c5:21:18:87:bd:64:
e0:b8:0a:04:19:10:b4:80:fa:f1:19:61:2c:e0:fd:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:65:26:D7:1E:3F:76:EA:D8:41:D0:6B:54:06:F4:DF:42:8C:D7
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:83:0c:28:88:fa:6e:57:19:90:9d:58:25:e5:9e:44:02:
e8:85:63:c0:f7:40:e7:be:eb:ea:ca:ec:a7:91:68:08:d7:ce:
d3:fa:a0:d5:fb:cf:d8:57:fe:4e:1c:57:ba:2b:6e:41:95:72:
73:49:d1:93:6e:0d:c8:ff:d5:44:71:bb:af:86:44:d4:6f:c8:
6a:cc:58:83:a0:56:d1:b1:cc:2f:61:fa:2a:43:dc:69:00:c7:
21:1a:47:38:22:d7:eb:21:15:93:90:73:98:1d:07:3e:a9:50:
3e:3f:69:27:80:4e:02:fa:1d:1c:c2:13:75:81:94:f2:37:0a:
a6:20:81:b9:d4:b4:51:91:88:98:2d:f4:3b:8a:78:ba:34:16:
39:fe:ca:5d:c1:19:f6:dc:87:ec:55:13:55:c3:09:16:c3:8f:
a4:d0:7a:25:10:0b:4b:ad:d7:93:a1:72:da:c7:52:85:19:8d:
99:08:6f:f4:50:17:d8:bb:f3:27:b1:b3:eb:7a:49:b4:8e:7b:
33:72:38:42:a6:ed:74:d4:54:14:1c:db:75:e4:c8:ae:a0:a4:
c8:75:06:e3:b9:61:16:94:34:02:14:45:b9:2c:35:36:1a:c8:
8f:4f:d5:b0:4a:3d:10:33:10:56:72:ac:2f:b4:36:3c:60:cb:
46:aa:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:07 2026 by rpki-client