Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: 5hy1El643oLbh9aSXLD7LHW9IqHsqxWs+YqCYBnbq08=
Subject key identifier: 97:3D:73:51:69:98:18:66:76:41:F8:8E:E5:82:4F:5A:A8:F5:47:38
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019E1FB58EC2FE0570AA9DB1BE9DB458EC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 05:00:52 +0000
Manifest this update: Wed 13 May 2026 05:00:52 +0000
Manifest next update: Thu 14 May 2026 05:00:52 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: 0AFMDK6GtDYJnqBwDXzsVYrtjYxDCFz9jKcsdBHIlXM=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:8e:c2:fe:05:70:aa:9d:b1:be:9d:b4:58:ec:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: May 13 05:00:52 2026 GMT
Not After : May 14 05:00:52 2026 GMT
Subject: CN=973d7351699818667641f88ee5824f5aa8f54738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:6c:6f:77:f5:d5:d9:b5:83:e3:16:88:6e:
1f:38:0c:39:db:62:89:28:70:0e:a9:d1:f3:c7:b9:
40:2b:56:4e:64:bc:20:a1:61:38:13:28:f8:c8:cf:
29:b3:ba:73:ec:11:90:01:dd:38:00:4e:0d:e9:f5:
8f:20:42:ce:ef:e6:a2:be:8a:a8:78:8f:12:8e:de:
3b:6e:f7:be:d5:41:f9:d3:5b:1c:da:66:4c:87:f9:
2d:fc:b7:8f:e3:d7:6e:fe:77:9d:a9:62:85:18:0d:
e1:6f:ae:70:59:40:a3:92:e4:47:86:07:b2:1e:fe:
b3:f9:76:d1:83:4a:78:0a:42:d0:b5:65:26:f0:b6:
7e:90:f1:c8:ce:10:3e:fb:7a:e0:d1:e1:21:8f:a6:
b0:f3:28:4d:23:b3:77:e5:88:97:7d:16:f4:d9:67:
78:d5:1f:dd:9a:19:e7:51:7a:fc:45:0b:d2:6f:fd:
d3:25:91:2e:4e:da:a2:fd:83:5e:66:51:ec:3a:51:
4c:4c:84:aa:a1:f4:6a:aa:e9:12:8e:2b:99:9d:9d:
20:5d:61:67:6c:3e:df:49:c0:fb:36:df:c1:90:cf:
43:2a:61:2c:40:02:59:10:44:57:c2:2b:2d:34:97:
f8:f1:c1:db:37:9f:0f:f9:9c:9a:d1:69:c2:fc:d3:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:73:51:69:98:18:66:76:41:F8:8E:E5:82:4F:5A:A8:F5:47:38
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:df:e8:b1:b5:c2:1f:38:cf:dc:53:0e:b0:c7:bb:e9:b9:32:
d8:fa:6e:1e:ae:f2:70:ab:86:e7:ae:45:aa:be:e6:d9:e5:94:
e8:6e:1c:b0:a1:9b:1d:c4:98:a4:d9:ef:48:f2:ce:be:a7:14:
d6:e2:69:fd:2c:89:16:83:26:d0:19:3f:88:aa:14:a5:f1:31:
f7:2c:d3:54:3b:45:2d:e5:76:47:ae:e9:f8:fa:cd:54:f7:eb:
f1:7b:41:0a:c7:9a:0a:fc:17:3f:ba:23:64:f8:d6:82:36:dd:
e2:f7:1d:ab:38:bc:45:6f:89:ee:18:7c:bf:7f:08:34:ee:c5:
f9:a1:75:d7:57:2d:09:5f:4e:25:c9:9f:47:ce:a0:a9:ce:a1:
a3:28:e4:f9:7a:01:06:98:0a:25:0e:cf:87:84:18:10:29:9e:
5e:b3:09:fd:f7:a6:73:75:cf:a2:ee:d5:fe:b7:72:44:04:06:
1f:76:9f:62:38:9c:a7:9e:27:91:e5:17:5a:7f:fb:6e:32:9c:
bd:30:0b:d8:7b:b5:ae:40:c3:57:3e:6d:5e:69:41:88:a8:fd:
86:89:89:fa:10:08:5f:32:bc:8e:a0:93:05:90:49:61:0f:89:
64:2b:13:68:8f:95:f6:e7:ba:e4:95:d5:81:83:ff:f2:0e:75:
a6:5e:81:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:03 2026 by rpki-client