
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
File: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft (raw, json)
Hash identifier: sgLx63SsqXeD7+GQ1h3vWzCRjTm4h8Mf63GZRfWLWbw=
Subject key identifier: 7B:F5:FC:69:F2:E9:D6:62:A9:6B:6A:9E:C4:BB:41:03:C3:7E:E1:94
Authority key identifier: D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
Certificate issuer: /CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Certificate serial: 019E1EA2C62293690DA0375F7957F500D2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:00:44 +0000
Manifest this update: Wed 13 May 2026 00:00:44 +0000
Manifest next update: Thu 14 May 2026 00:00:44 +0000
Files and hashes: 1: 0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl (hash: YchFrTj9x5NR+qKgVKlEaKzOyBNG7qmi5PMmLlykHaU=)
2: i7JFrF70bzBo-gwwIdRO8VszDSY.roa (hash: tGNZRPLTTkwJbCKJRv1gdNJVG7D13l/23dduFfdxkF8=)
3: j-RqQ-Jv6xwxZVAttzs0WSOfmLc.roa (hash: 8oVyr5bD2ep8rJ+/mCDqgEEEeQzSBWCENnyJGHUEE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c6:22:93:69:0d:a0:37:5f:79:57:f5:00:d2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c81b1d028f2af61ea9b422679a5f8de90572e7
Validity
Not Before: May 13 00:00:44 2026 GMT
Not After : May 14 00:00:44 2026 GMT
Subject: CN=7bf5fc69f2e9d662a96b6a9ec4bb4103c37ee194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:cb:3d:09:b9:b6:d8:06:92:3f:0d:8e:96:
1b:1a:8b:81:bd:2f:aa:05:de:f5:42:cb:01:55:05:
b1:c3:3c:e5:e1:7e:f3:16:36:92:c0:5d:70:31:06:
48:17:46:4e:5d:50:52:a1:f7:fa:81:8d:b3:a9:21:
a6:aa:76:cc:e3:c1:42:2d:ed:f8:47:1c:4a:90:7c:
1d:7f:9d:ae:5f:b0:a6:2f:1f:d2:16:c3:d5:a5:b6:
c1:39:8f:01:21:96:7a:a8:75:cc:60:ff:00:12:b6:
ee:e4:a9:74:5e:7d:b1:79:db:a3:bb:5c:1b:83:81:
ff:86:5c:2e:04:76:8a:87:6e:77:0a:4e:41:e7:7a:
5f:d7:78:d0:2e:1f:20:d1:34:86:19:ad:1e:20:4e:
cc:67:d8:bd:60:b5:6a:6a:f9:b7:af:2d:dc:39:83:
4e:48:ed:42:6b:9a:a9:00:c5:43:2b:48:ae:62:2e:
a7:dc:65:18:63:12:ce:22:85:e3:00:74:bc:df:d0:
c8:4b:88:a6:77:99:1e:ec:46:eb:c8:76:ef:b1:f9:
2b:57:82:e2:da:61:24:06:33:39:a9:fe:37:db:4b:
c3:cb:aa:13:61:f5:4e:ab:6c:92:29:0e:61:cd:aa:
64:db:62:e3:b9:70:6c:69:3c:92:ba:8c:a6:ae:be:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:FC:69:F2:E9:D6:62:A9:6B:6A:9E:C4:BB:41:03:C3:7E:E1:94
X509v3 Authority Key Identifier:
keyid:D2:C8:1B:1D:02:8F:2A:F6:1E:A9:B4:22:67:9A:5F:8D:E9:05:72:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sgbHQKPKvYeqbQiZ5pfjekFcuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a275fe-86f0-41e9-8263-69db6a8f58d7/1/0sgbHQKPKvYeqbQiZ5pfjekFcuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:c0:1a:7b:2c:94:44:b4:5f:a2:35:59:2d:34:62:9b:aa:
57:5b:cc:9a:02:9c:d9:54:be:5b:c5:b7:30:28:c4:4a:25:f1:
35:2a:db:e4:da:29:38:e5:a5:36:5d:3d:17:57:2b:29:9e:de:
aa:1c:52:ec:97:df:13:8c:d7:bc:aa:aa:a2:71:8e:e6:3d:f9:
9a:0c:9e:c1:7f:b8:01:34:77:17:c5:9b:ed:99:2e:19:a7:77:
87:2d:a8:a0:62:94:dd:9e:72:39:e0:6c:62:68:31:6e:85:a4:
d4:28:e0:2b:cb:4b:07:60:07:fa:48:31:35:90:18:d4:69:9f:
32:d4:1b:79:d1:73:d0:6c:c2:15:57:91:c2:34:c4:00:72:4e:
bc:4d:39:4e:7f:29:b1:02:51:65:7e:85:3a:92:09:e9:e2:dd:
70:64:b9:51:43:05:85:5c:51:6c:7a:16:0e:a7:93:ad:82:ad:
70:93:37:49:3c:61:d6:17:03:66:13:9a:c6:5a:47:7c:8e:c7:
42:db:9a:48:0b:42:e2:6c:a3:95:cc:5e:50:f3:6f:81:73:73:
9c:88:01:cb:c1:ca:82:54:cc:a3:9b:56:93:b8:c8:47:34:c9:
28:9e:52:07:b7:ce:e6:eb:37:5b:91:30:0e:28:d2:8c:bd:89:
48:e5:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:02 2026 by rpki-client