Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: PJK5tvHZJqG+HGi0irUBrWpc1CzvFRoyS61fPIkFLu8=
Subject key identifier: BE:31:4B:8C:13:B6:62:16:69:67:2C:39:17:75:38:EE:44:4A:F2:B3
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 019E1D59CA7FEF5220EEB25FFE4F4959F641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 18:01:24 +0000
Manifest this update: Tue 12 May 2026 18:01:24 +0000
Manifest next update: Wed 13 May 2026 18:01:24 +0000
Files and hashes: 1: Q_ee8py1cZcXFZRaXUkP3TowZDc.roa (hash: w/aCOcSaWrdKUscNCfCU/09gr8uTxVVmhx8jtZuT2dI=)
2: ReMMCAErUt1VBD8DVEIFL-Hpask.roa (hash: wWfg4EEHh6Y+sLSB59zGm12sGRwnX3Xts8Wy3xO33k0=)
3: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: SNJIFsM7udZY2AkZIcxIVPZyIYdXV7f25iK2UDKh9hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ca:7f:ef:52:20:ee:b2:5f:fe:4f:49:59:f6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: May 12 18:01:24 2026 GMT
Not After : May 13 18:01:24 2026 GMT
Subject: CN=be314b8c13b6621669672c39177538ee444af2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:9e:48:40:ac:89:1e:06:f5:a4:c6:ea:4e:
df:8f:2a:69:b9:48:5b:df:70:25:62:e3:b8:0c:45:
80:ea:97:6b:b7:51:12:09:f3:26:b6:d4:56:af:95:
e4:d2:65:5a:18:86:68:f4:99:11:fc:24:0f:30:03:
47:93:30:e9:ac:72:cf:aa:e3:26:3e:e4:59:ea:ae:
1a:ad:e0:1c:44:89:15:36:05:e6:78:44:8e:9a:ee:
4c:75:bc:0c:3d:e7:fc:42:24:c4:93:66:8a:d8:1e:
4c:24:39:5a:87:a1:31:e8:89:f4:b8:fa:29:e5:47:
4b:96:3b:3b:7d:4f:76:f8:87:67:39:3c:05:17:1d:
11:bd:db:6d:40:b5:4b:ce:b7:85:e2:26:15:74:72:
a5:3f:1b:33:8d:7c:c4:ce:58:2f:46:bc:32:47:86:
ca:4d:80:bb:65:0f:66:ca:3c:d2:b8:9d:f0:5d:5c:
86:26:e8:06:c6:4e:2f:36:9f:e8:fe:d2:d8:1b:cb:
13:57:dd:f9:8d:a5:b3:36:86:8a:5d:c7:61:75:df:
a9:b3:50:3c:f9:20:0a:56:49:7c:1a:36:bd:fa:8d:
31:46:30:6f:2a:73:af:05:ae:52:24:4c:b6:33:74:
d5:42:33:de:f4:7e:61:02:b8:fd:88:be:33:33:9d:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:4B:8C:13:B6:62:16:69:67:2C:39:17:75:38:EE:44:4A:F2:B3
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b8:dc:8e:26:3a:11:35:74:0b:73:76:eb:48:c1:e3:ea:63:
22:bc:ea:3d:f9:96:bd:0c:e3:e4:32:93:de:7f:7d:06:86:54:
e7:b2:a5:18:c4:8b:c2:27:be:38:ed:99:a3:df:9d:7c:19:72:
87:ee:15:a5:d7:77:43:da:88:25:e3:b8:de:24:45:d7:7a:99:
a1:b7:06:b3:45:e8:6c:59:d6:a7:74:84:2e:90:39:18:bc:25:
ca:31:bb:da:c1:85:48:a6:a6:e7:b3:e8:cf:fa:ea:60:c9:e0:
f6:1d:db:bc:89:92:2a:3e:8b:3b:0f:f8:0a:1f:02:1b:9e:01:
26:55:ca:29:b8:3c:0c:2f:f6:6f:79:a9:2e:d4:4b:6e:6c:97:
b0:af:5b:4c:20:31:94:e0:59:21:25:aa:a6:8a:fc:b8:30:eb:
bf:df:d3:2f:c1:a4:57:d5:f2:31:90:a6:fb:90:e2:af:26:f0:
f6:a8:f0:a6:22:1f:05:1f:bf:d3:6a:a3:12:38:9c:c7:b3:74:
0a:02:f4:c9:e6:d7:62:44:db:a2:c3:6c:1f:7f:26:92:44:5c:
19:97:45:6f:77:bc:6d:9e:05:0c:b4:28:24:9e:d9:be:03:60:
75:aa:3c:7b:ed:1d:fd:19:43:de:ca:28:33:23:df:27:aa:6c:
c7:93:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:07:25 2026 by rpki-client