Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: TyfQoGAmUWIO2XZQ6rqHsghLilo4UtAu3WNOBBYTkXA=
Subject key identifier: 38:AA:38:41:22:6D:95:B3:DA:2B:7C:43:8B:BA:D8:4E:CC:8E:62:7E
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 019E3072C709614F872CCB8B4131525EAC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 17EA
Signing time: Sat 16 May 2026 11:01:28 +0000
Manifest this update: Sat 16 May 2026 11:01:28 +0000
Manifest next update: Sun 17 May 2026 11:01:28 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: XFoYG4Q0PpxalxPjckQn8MBJdHzCpZJwS8Y3wcftA4I=)
2: E5AdQLULTFPqJUlYObxVI6_1WfA.roa (hash: mxZ1AnAnqb7JN49e/B8I8tpnf+4p9JvJ06z2WEs5jMA=)
3: S2tprKD6SwzufJkgnCFZdpqoXeo.asa (hash: ExVS38dSe15WrZnAv2zQ7m3XAQFROSbjFsAZ0jzltAY=)
4: ZjZpopADEszQ-pk8iJcM4buK_Vk.roa (hash: kT/wMhqwMSPuX9SvpMfdYohIGO0Je1OedjWoKvA8CNs=)
5: jyVGCyGgEBWJDHp2JEn0ylLOQpw.roa (hash: Z172Tcqn6RnvzWrlqa5fx4IBPek1nFPjcCRMXGw3qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:c7:09:61:4f:87:2c:cb:8b:41:31:52:5e:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: May 16 11:01:28 2026 GMT
Not After : May 17 11:01:28 2026 GMT
Subject: CN=38aa3841226d95b3da2b7c438bbad84ecc8e627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:33:f8:90:49:82:58:62:de:ca:68:f2:74:
af:69:01:d2:29:d6:29:05:a5:57:d1:e1:53:c2:7f:
0b:6d:c7:40:9c:d6:a7:e0:58:fc:df:70:71:41:10:
34:09:5b:da:4f:95:da:53:56:fd:c0:05:c2:34:8d:
1e:de:f3:cb:9f:10:2c:0d:5a:12:86:9a:5e:d2:a5:
83:a9:3b:75:98:47:24:66:44:be:a6:95:99:d5:8d:
af:c7:2d:66:cd:21:43:94:63:08:70:b5:b0:d9:24:
58:36:88:67:36:6b:36:ea:a4:77:a2:4c:59:a8:7b:
8a:f3:f5:b2:c2:cd:43:71:1f:5e:b4:05:a7:d5:66:
67:7f:9f:b6:6f:ff:81:33:04:3a:83:36:4c:09:96:
4c:45:46:69:bf:c0:aa:48:53:44:33:01:b6:ef:85:
97:79:30:7f:39:fe:c3:71:1d:98:8f:0a:3f:cb:b6:
b1:e4:de:5e:58:bc:49:fe:f9:85:1c:14:cc:8f:ef:
f5:df:34:e6:56:8c:fa:a2:3e:99:27:98:49:4e:34:
5a:6f:70:b7:c4:ec:6c:20:02:5d:65:78:a8:c2:79:
68:e9:9e:71:21:ab:65:44:88:05:96:ae:7d:8a:80:
ec:9a:84:e8:3b:1a:f7:f3:0b:8d:14:c7:4a:ff:da:
f7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AA:38:41:22:6D:95:B3:DA:2B:7C:43:8B:BA:D8:4E:CC:8E:62:7E
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f0:48:da:8c:73:93:df:cb:68:45:5c:3b:e3:87:d8:49:16:
15:b4:e3:73:34:e3:18:f7:50:ca:7f:a8:98:68:75:79:6e:4b:
89:97:2e:93:3c:fa:17:11:14:e9:27:fc:4f:38:46:4a:f8:52:
46:ec:1d:2d:18:7c:bb:ec:97:cd:f8:50:1a:15:72:a5:04:91:
10:f5:2c:f6:64:b5:99:f0:95:a1:52:1d:db:07:08:6e:dc:56:
2f:d5:c7:f9:b1:a6:8b:7d:7f:6b:a9:54:03:d1:e2:56:b8:8c:
86:58:1c:e6:80:e0:47:da:76:07:73:c4:23:3d:1d:00:49:69:
3d:35:73:26:33:68:b4:01:af:f4:a5:51:7b:b6:eb:b7:a0:ee:
5a:46:e0:3c:9a:3f:04:cf:1d:26:06:99:ac:39:4e:e8:3b:e5:
f5:5e:b9:35:64:a9:62:f7:7e:43:15:95:8c:cf:ed:ec:1b:71:
df:35:6c:59:2e:40:9a:e6:5c:9f:59:2c:9a:44:38:d6:72:ef:
a3:ac:21:c3:13:28:b2:5e:9a:c4:1f:29:41:97:bc:ab:b5:66:
13:f2:fc:fb:42:fe:59:84:2f:6e:fe:68:55:d3:1d:07:6e:d4:
ee:94:4f:9c:e5:b3:2d:e9:79:bf:b0:2a:54:86:9c:70:d0:d2:
21:b4:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:56 2026 by rpki-client