Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: 5kNiVEJanug5P1b4kZD052bOAJzKUckiCbJCqa0O0+s=
Subject key identifier: CD:10:63:10:42:39:2C:80:33:F4:57:D4:D7:17:A2:EF:D9:28:FE:51
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 019E1E6C60193316341BF44A060B8399E9B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 05ED
Signing time: Tue 12 May 2026 23:01:19 +0000
Manifest this update: Tue 12 May 2026 23:01:19 +0000
Manifest next update: Wed 13 May 2026 23:01:19 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: 2KhYhDK64CsBCISAYnUMkIwASOKYSASz5G7bz7wNYKI=)
2: Lo4U5uzIqQymJnHj6wN0AbLyZbM.roa (hash: ycmh+M2BZFC7JlSPZ+8HQ4O+vAT26Z/Ysr616GoAdi4=)
3: qiZqn4t44rqOklzg05vu8ezVPj8.roa (hash: tlCFx29Qdk4Q9WIDOMKfJRel9JippLh4IujxGOwL5Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:60:19:33:16:34:1b:f4:4a:06:0b:83:99:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: May 12 23:01:19 2026 GMT
Not After : May 13 23:01:19 2026 GMT
Subject: CN=cd10631042392c8033f457d4d717a2efd928fe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:f7:a6:45:4f:61:8c:e2:2d:04:85:b0:d6:
a4:b8:55:fc:d8:db:53:da:d1:b4:34:fe:9e:9a:03:
62:71:cb:d6:6c:05:05:91:56:f4:d1:e7:b1:17:63:
4b:26:96:36:97:11:2a:ae:e9:f2:2d:7f:5f:a7:a2:
93:f2:cd:2f:ce:12:48:e6:ee:6d:34:b0:58:73:68:
9b:7a:80:89:04:0a:76:65:73:3f:2f:d6:9f:59:cb:
22:22:42:ab:8e:5f:92:ec:ca:df:fb:3a:54:a3:22:
b7:e3:93:38:3b:44:d8:22:3b:51:6d:15:2c:3e:69:
3b:60:30:01:da:7e:57:7d:9e:8c:7c:c5:31:c6:40:
70:65:55:7b:be:ad:51:b6:b4:54:58:be:8f:23:cc:
1a:0d:e6:56:7d:61:75:8c:7b:1f:33:72:ae:64:d2:
a6:55:ce:92:d9:77:88:6b:48:4f:b1:a7:5f:82:98:
32:93:24:a4:1f:6b:e6:64:7b:ac:63:f5:57:2e:2a:
e0:aa:b4:6f:86:ee:a6:76:25:fd:a9:d1:b6:3e:72:
19:de:c9:8c:56:aa:0e:c6:52:54:4c:d1:33:09:42:
fd:06:8e:41:d9:7c:51:94:ec:1f:84:91:02:9b:be:
27:85:fb:f8:ea:0b:fa:c1:bc:e6:ac:20:5a:66:be:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:63:10:42:39:2C:80:33:F4:57:D4:D7:17:A2:EF:D9:28:FE:51
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:3f:32:b3:1d:ba:f6:e8:2e:e3:21:9e:d1:e3:90:3a:ea:
d3:8f:39:6a:98:1d:99:60:08:d4:4f:8a:cf:56:59:25:bc:65:
d7:c1:b9:db:e2:ef:b6:4c:90:06:3e:a1:99:9f:68:eb:b4:b2:
bd:c6:44:b9:ea:ee:ac:9f:7f:6c:6b:bc:a4:92:02:06:07:3c:
db:31:52:29:fb:56:de:d2:74:1f:88:10:ed:7d:8f:ab:7b:d1:
7e:bb:3c:28:f4:a7:d6:a1:5b:de:1a:b5:11:12:62:55:b7:60:
88:a5:8c:f1:5a:3d:08:fe:fb:fb:04:0f:42:14:bf:4a:ae:7f:
22:1a:ba:24:ad:15:e1:d8:6e:96:83:35:68:42:f4:88:68:3f:
0d:77:34:de:93:ad:fa:57:b1:b5:6e:0f:0b:52:2f:92:87:3a:
d6:45:76:9c:13:e3:75:a4:65:a6:68:61:8b:87:3a:b9:69:d1:
ae:09:b5:38:e1:98:d0:df:e7:a8:b8:03:59:f7:49:fc:9e:53:
1a:3e:64:24:65:d9:67:d4:02:69:01:ec:20:06:86:22:17:ce:
d5:02:7d:1d:fb:cb:02:c8:bc:a5:7f:aa:6a:c7:26:ee:91:10:
31:1b:82:bc:fb:02:c1:97:eb:58:7b:d7:11:d1:76:17:79:bd:
71:b2:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:42 2026 by rpki-client