Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
File: t0QwmQgmnlOLK0-pYzcMnsIHeng.mft (raw, json)
Hash identifier: UnDJ0INDcbyjTcoZ4tXmWRiCs7zIB/ESBNo44MZ/EZ4=
Subject key identifier: D0:AC:F4:C8:8F:07:59:BF:E6:0A:A6:B6:51:9A:AB:09:B0:D7:73:41
Authority key identifier: B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
Certificate issuer: /CN=b744309908269e538b2b4fa963370c9ec2077a78
Certificate serial: 019E1FB5559BA66127C9FAF5A8569D952F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
Manifest number: 1359
Signing time: Wed 13 May 2026 05:00:38 +0000
Manifest this update: Wed 13 May 2026 05:00:38 +0000
Manifest next update: Thu 14 May 2026 05:00:38 +0000
Files and hashes: 1: 6Ftx8Zws0EArRVC2i8S0_U_teiE.roa (hash: 7fbXsad6LDVhAfWE8WJEJDQ3QGP+dEI28LUew1x9B8A=)
2: AZAVETW5nGbM4Ib7koJRmOOqy04.asa (hash: iabYHg5cc7CrHac7c0hzecT2lUuKxBFUzv+J4PC7fgk=)
3: t0QwmQgmnlOLK0-pYzcMnsIHeng.crl (hash: muF/O+rUorFwyKjkQ+Zoe/5ilQ7GfSWwRwXd+2RqRR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:55:9b:a6:61:27:c9:fa:f5:a8:56:9d:95:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b744309908269e538b2b4fa963370c9ec2077a78
Validity
Not Before: May 13 05:00:38 2026 GMT
Not After : May 14 05:00:38 2026 GMT
Subject: CN=d0acf4c88f0759bfe60aa6b6519aab09b0d77341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:a3:cc:81:a9:27:51:5c:86:a9:73:c0:af:
67:a2:c9:2f:c3:ed:9a:6f:54:68:b9:43:98:e7:01:
5a:27:ba:fa:46:d7:33:06:a8:84:90:36:5f:a0:e5:
19:6c:41:b7:6c:10:f5:0d:21:eb:1e:41:cf:50:84:
1b:1c:b2:54:87:ea:e1:cc:44:0d:f8:95:ef:99:b8:
72:79:66:bd:75:72:b6:bb:b5:5f:e6:4a:53:e9:4e:
b6:27:92:b9:c6:95:e9:e5:60:f3:3b:54:dd:dd:e8:
5c:54:62:52:3d:55:e4:65:f4:3f:49:b3:1d:82:79:
62:e2:fd:58:d2:6b:d0:9b:96:e8:95:35:cc:6c:02:
24:d8:99:8d:ac:7b:94:ab:9a:33:d2:8d:f0:39:b3:
66:16:26:49:47:f9:93:5a:95:c4:5a:da:06:b7:77:
ca:b5:2c:f0:62:b5:81:a1:ea:00:3b:03:19:dd:f4:
05:3a:1e:a8:9d:1b:e9:cb:d3:36:00:6e:ee:7b:82:
ba:4d:06:8e:a2:6f:19:a2:2c:3c:d8:47:ad:ad:f1:
0a:ac:b4:8b:63:a6:f0:ec:be:d1:b9:11:47:a7:af:
ee:e0:cc:41:53:db:64:a6:06:d3:03:cf:47:f4:5b:
b2:26:45:91:8b:00:4e:6a:0e:1b:5c:7b:56:87:b5:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AC:F4:C8:8F:07:59:BF:E6:0A:A6:B6:51:9A:AB:09:B0:D7:73:41
X509v3 Authority Key Identifier:
keyid:B7:44:30:99:08:26:9E:53:8B:2B:4F:A9:63:37:0C:9E:C2:07:7A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0QwmQgmnlOLK0-pYzcMnsIHeng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4652e8-5d20-42f6-a739-d54921604ecd/1/t0QwmQgmnlOLK0-pYzcMnsIHeng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:fd:8e:c9:3d:d3:39:5e:8b:1a:ee:71:c4:79:cf:3e:3e:
c1:f4:6f:16:39:7b:40:8b:f6:f1:c0:d2:0c:58:7e:77:ce:5b:
d6:c2:fa:3d:bf:7c:09:b9:7e:d9:b7:c0:36:c2:7f:de:e7:d0:
0e:48:eb:ab:ba:10:e8:49:9e:b6:ec:73:de:5e:8b:c0:b9:06:
23:17:3a:e4:d6:68:a0:34:bd:ce:df:41:fd:0d:b6:96:66:48:
f9:17:fb:4e:a0:58:ea:85:4f:16:61:56:91:8a:47:9b:23:5e:
0e:51:26:4c:e9:7c:36:2e:29:49:64:4e:0d:12:4e:f6:b7:ed:
e7:0e:fa:22:87:03:0f:49:5a:e2:36:f8:da:d0:02:38:10:22:
ec:d2:ba:56:4b:66:eb:e3:cd:20:32:79:8e:5f:a2:bc:d8:fd:
1e:f9:09:9e:44:87:a2:ed:08:f3:04:6f:17:0e:1d:11:57:53:
ca:f7:9d:f2:e5:c9:fa:16:1c:fd:34:cf:12:92:36:17:a9:0f:
fb:3f:cc:be:56:83:af:94:28:13:9e:5c:ee:9e:b9:89:2c:39:
ed:1a:b0:c9:b4:4b:f9:b9:59:ca:61:a5:d6:73:c7:af:78:8d:
50:68:1c:96:ce:e7:ba:a9:4f:6a:fc:8e:bc:c9:8c:0c:49:5c:
44:d4:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:59 2026 by rpki-client